Paul
Wed Jun 25 05:39:02 PDT 2008
Got it fixed, it was so simple it is embarrassing. DCDIAG incorrectly
reported an error when there really wasn't one. A multi-function print
device (A new version we are trialing) generated an incorrect host record,
creating its own domain within our domain.
Sigh...
Like I said it was totally embarrassing once it was located.
--
Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4
http://www.pbbergs.com
Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.
"Chris Dent [MVP]" <chris@highorbit.co.uk> wrote in message
news:uSraWke1IHA.1768@TK2MSFTNGP03.phx.gbl...
>
> Hi Paul,
>
> It's a bit of an odd one, and I can't quite see how it would happen. But,
> it looks like you're missing a period from one of the NS Records.
>
> For example, if you were to somehow have an NS Record like this (without
> the terminating period):
>
> mnpower.com NS somenameserver.domain.com.
>
> Instead of (with the terminating period):
>
> mnpower.com. NS somenameserver.domain.com.
>
> The Name Server would add the current zone name as a suffix (because the
> record is relative not absolute). Then it would give you a broken
> delegation error because the target zone doesn't exist (I assume it's
> checking the target there).
>
> --
> Chris Dent
> MVP Directory Services
>
> "Paul Bergson [MVP-DS]" <pbergson@allete_nospam.com> wrote in message
> news:ObxNbzk0IHA.524@TK2MSFTNGP05.phx.gbl...
>> Wish it was that simple.
>>
>> --
>> Paul Bergson
>> MVP - Directory Services
>> MCTS, MCT, MCSE, MCSA, Security+, BS CSci
>> 2008, 2003, 2000 (Early Achiever), NT4
>>
>>
http://www.pbbergs.com
>>
>> Please no e-mails, any questions should be posted in the NewsGroup
>> This posting is provided "AS IS" with no warranties, and confers no
>> rights.
>>
>> "Jorge de Almeida Pinto [MVP - DS]"
>> <SubstituteThisWithMyFullNameSeparatedByDots@gmail.com> wrote in message
>> news:ui4gnfk0IHA.2384@TK2MSFTNGP02.phx.gbl...
>>> Broken
>>> delegated domain mnpower.com.mnpower.com
>>>
>>> your domain name is listed twice in the domain name.
>>>
>>> check your dns config
>>>
>>> --
>>>
>>> Cheers,
>>> (HOPEFULLY THIS INFORMATION HELPS YOU!)
>>>
>>> # Jorge de Almeida Pinto # MVP Identity & Access - Directory Services #
>>>
>>> BLOG (WEB-BASED)-->
http://blogs.dirteam.com/blogs/jorge/default.aspx
>>> BLOG (RSS-FEEDS)-->
http://blogs.dirteam.com/blogs/jorge/rss.aspx
>>> ------------------------------------------------------------------------------------------
>>> * How to ask a question -->
http://support.microsoft.com/?id=555375
>>> ------------------------------------------------------------------------------------------
>>> * This posting is provided "AS IS" with no warranties and confers no
>>> rights!
>>> * Always test ANY suggestion in a test environment before implementing!
>>> ------------------------------------------------------------------------------------------
>>> #################################################
>>> #################################################
>>> ------------------------------------------------------------------------------------------
>>> "Paul Bergson [MVP-DS]" <pbergson@allete_nospam.com> wrote in message
>>> news:OKa$Q5i0IHA.5832@TK2MSFTNGP02.phx.gbl...
>>>>I regularly run diagnostics and the dcdiag /test:dns reports that I have
>>>>a broken delegated domain, yet I have never delegated this (There are a
>>>>couple of other admins).
>>>>
>>>> I thought I understood this but I am down right stumped, it has to be
>>>> something relatively simple but I sure am missing it. I don't have any
>>>> sub-zones delegated, at least none that I can find. Everything is
>>>> clean. DC is pointing at itself and another for dns services, AD
>>>> integrated, forwards all internet requests to ISP.
>>>>
>>>>
>>>> TEST: Delegations (Del)
>>>> Error: DNS server: dcxxx.mnpower.com. IP:192.168.1.2 [Broken
>>>> delegated domain mnpower.com.mnpower.com.]
>>>>
>>>> --
>>>> Paul Bergson
>>>> MVP - Directory Services
>>>> MCTS, MCT, MCSE, MCSA, Security+, BS CSci
>>>> 2008, 2003, 2000 (Early Achiever), NT4
>>>>
>>>>
http://www.pbbergs.com
>>>>
>>>> Please no e-mails, any questions should be posted in the NewsGroup
>>>> This posting is provided "AS IS" with no warranties, and confers no
>>>> rights.
>>>>
>>>>
>>>
>>
>>
>
>