Windows – DC keeps losing DNS record

domain-name-systemwindows

I have multiple DC in the organization with DNS roles installed on them.

One of the DCs keeps losing its DNS entry.

I flushed dns cache using ipconfig /flushdns

I registered the DC using ipconfig /registerdns

For few minutes all looks fine I can ping the server with hostname and can see the dns entery.

After few minutes the record in DNS server is gone and I cannot ping the server (DC) with host name. I can ping and RDP with IP address.

Any help will be appreciated.

Best Answer

Check your domain controller for a teamed NIC using third party software. Windows servers don't like teamed NICs prior to Server 2012, and after 2012 you'd better be using Windows's own NIC teaming. However, there's ambiguity on the supported nature of NIC teaming on Domain Controllers as Microsoft documentation never actually directly references the supported or unsupported nature of it and dcdiag sometimes hoses on teamed DCs.

Also check that your DC doesn't have two active NICs on the network. That would be bad on a Domain Controller. It can and will cause DNS problems.

And finally, turn on "Audit Directory Service Access" in Active Directory, then enable auditing in the DNS zone, and you can see what's being deleted in Event Viewer.

Related Topic