Windows – nslookup picking up wrong address

active-directorydomain-name-systemnslookupwindowswindows-server-2003

All of my client machines are picking up the incorrect server address when using nslookup. I also get the incorrect DNS Servers when using ipconfig /all

C:\Users\>nslookup
Default Server:  UnKnown
Address:  192.168.3.2

C:\Users\>ipconfig /all
*(edited for relavent info)*
Default Gateway . . . . . . . . . : 192.168.3.1
DHCP Server . . . . . . . . . . . : 192.168.3.1

DNS Servers . . . . . . . . . . . : 192.168.3.2
. . . . . . . . . . . . . . . . . . . . . . : 192.168.2.70
NetBIOS over Tcpip. . . . . . . . : Enabled

This 192.168.3.2 server in question was a partially setup DC that had the DNS role installed but I didnt believe it was actually being used. I ended up having to do a forced dcpromo and metadata cleanup to remove it. I have searched throughout the DNS Management and AD Sites & Services and removed all traces which is the reason NSLOOKUP comes back with Unknown but I cannot find where it is being pulled from. Also, the DHCP and Gateway are running on an old Cisco ASA but it is only using the 192.168.2.70 address. If I manually configure a computer's primary and secondary DNS then everything is fine but currently all of our client computers are set to auto. The primary DNS should be 192.168.3.40 as it is the PDC with the FSMO role, DNS and other key functions.

C:\Users\>netsh dhcp show server

6 Servers were found in the directory service:

Server [SERVER.company.local] Address [192.168.1.2] Ds location: cn=SERVER.company.local
Server [exch2k7.company.local] Address [192.168.2.3] Ds location: cn=exch2k7.company.local
Server [server.company.local] Address [192.168.3.40] Ds location: cn=server.company.local
Server [server-dc2.company.local] Address [192.168.2.70] Ds location: cn=Server-dc2.company.local
Server [server-dc2.company.local] Address [10.10.10.20] Ds location: cn=Server-dc2.company.local
Server [server-hyperv.company.local] Address [192.168.1.3] Ds location: cn=server-hyperv.company.local

The only actual functioning DHCP in this list is 192.168.2.70 but it is at our Colo and doesn't have any client machines it is running.

C:\Users\>nltest /dnsgetdc:company.local
List of DCs in pseudo-random order taking into account SRV priorities and weights:

Non-Site specific:
   server-dc2.company.local  192.168.2.70
   exch2k7.company.local  192.168.2.3  10.10.10.10
   server.company.local  192.168.3.40
The command completed successfully

Best Answer

Fix your DHCP server, 192.168.3.1 aka "old Cisco ASA", to hand out the address of the nameservers you want to use.