DcDiag: “Warning: The Active Directory zone on this DC/DNS server was not found (probably a misconfiguration)” meaning

domain-controllerdomain-name-systemwindows-server-2008

Does this mean there is no Forward Lookup Zone by the name of the domain (say domain.local) in DNS?
I only have the log of dcdiag, not the actual machine, so I cannot check.

Later it says:

Matching A record found at DNS server %own IP%:
dc2.domain.local

So dcdiag says there is a record in a zone that is not there? Or does dcdiag not notice when a record is found using a forwarder?

UPDATE: The DNS server has two DNS servers configured as forwarders.

Best Answer

EDIT: changed answer, because partly it was nonsense and partly it didn't apply.

Possibly the server has only a stub zone, which can include A records. The AD zone includes also structures like "_msdcs", "_sites", "_tcp", "_udp", "domaindnszones" and "forestdnszones", which are necessary to find the directory services in the AD.

Also the A record could be served by the forwarders.

EDIT: When you have access to the server, check for the zone being primary, and having the above mentioned SRV entries.

You can read here in more detail than I'm able to explain how DNS is used for AD, an whats needed.