Forum Discussion

Copper Contributor

Mar 27, 2019

Azure ATP Health - Low success rate of active name resolution using reverse DNS

Hello! Got an alert about Domain controller health where issue is low success rate of active name resolutiong using reverse DNS: Sensor X, has a low success rate of active name resolution using r...

Tali Ash

Former Employee

Apr 10, 2019

Mtee- both DCs are active in the same domain agaist the same computers and DNS servers?

Mtee-

Copper Contributor

Apr 10, 2019

Tali Ash

Yes, both DCs are in the same domain and are also DNS servers with same DNS settings.

Adrian_Harper
Brass Contributor
Oct 15, 2019
Mtee- Tali Ash

Was any solution found for this, we have 1 of 5 DCs that constantly reports this alert?
- Mtee-
  Copper Contributor
  Oct 22, 2019
  Adrian_Harper Hi Adrian!
  
  Actually this was not resolved yet. Although everything works in our infra as usual but Azure ATP alerts about those Reverse DNS problems. Also our RODC alerts about RPC and NetBIOS resolving but this is more than likely about firewall issue and not under investigation because we are demoting the RODC.
  
  I have not figured out why the low success of name resolution alerts pop up sometimes and sometimes all seems to be ok.
  - EliOfek
    Microsoft
    Oct 23, 2019
    Mtee- , the alerts pops if your daily failure rate exceeds a certain percentage (90% if I am not mistaken). it could be that normally you are borderline, so sometimes you exceed it and sometimes not...