Forum Discussion

Copper Contributor

Mar 28, 2019

Azure ATP Health - Low success rate of active name resolution using reverse DNS

Hello! Got an alert about Domain controller health where issue is low success rate of active name resolutiong using reverse DNS: Sensor X, has a low success rate of active name resolution using r...

Mtee-

Copper Contributor

Apr 03, 2019

I checked also ATP sensor error logs and no new errors even if the ATP keeps alerting.
I am in a process of upgrading that 2012 R2 DC to 2019 so lets see if it alerts after that.
I have one 2019 DC and two 2012 R2 DCs in my environment. Only that one 2012 R2 is alerting about that name resolution and that is the fsmo role owner and DHCP server (where it differs from the 2019 DC which does not alert)

Tali Ash
Microsoft
Apr 03, 2019
Mtee- thanks please keep us updated.

the 2012 is alerting on reverse DNS method or others too?

Thanks,

Tali
- Mtee-
  Copper Contributor
  Apr 09, 2019
  Tali Ash
  
  Updated the alerting DC to 2019 and installed the ATP sensor to it and it have not alerted now. Can't really say the reason for alerting but it seems to be healthy now with that DC.
  
  But now the earlier updated DC (2019) is alerting about that same thing...
  - Tali Ash
    Microsoft
    Apr 10, 2019
    Mtee- both DCs are active in the same domain agaist the same computers and DNS servers?
- Mtee-
  Copper Contributor
  Apr 03, 2019
  Hi,
  
  No, only that one DC is alerting and others are fine.
  CPU, memory etc. are identical on every DC.