Forum Discussion
Problem to setup DNS server on Windows Server 2016
Hello,
Thanks for the screenshot.
I can see that when asked "Enter subnet in format 10.10.10.0/24" you entered 255.255.255.0
You will need to enter 192.168.88.0/24 if you are still using that IP range.
Hope that helps
Hello,
I have written this adress but dont work.
I write subnet: 192.168.88.0/24 and description: 192.168.88.0/255.255.255.0
I will attach again my screenshot.
Thank You.
- Feb 21, 2018
Try setting it all up but for the domain name just use something like:
ad.komplex.pl
Hopefully, that should sort your issue out.
- piotrFeb 21, 2018Copper Contributor
Unfortunately it does not working.
When I want to join domain I see this error:
I can't join domain beacuse DNS Name dont exist.
I think, I dont have "_ldap._tcp.dc._msdcs.ad.komplex.info.pl" because "query concerns the SRV record for _ldap._tcp.dc._msdcs.ad.komplex.info.pl"One or more zones do not contain delegation to the child zone:
ad.komplex.info.pl
komplex.info.pl
info.pl
ok
.(Main zone)
- Feb 21, 2018
Try removing the DNS role and then reboot and re-add it.
- piotrFeb 21, 2018Copper Contributor
Configure your DNS server to use a static Internet Protocol (IP) address. - Yes, 192.168.88.201
Create a forward lookup zone named after your Active Directory. - I have attach it.
Enable your domain zone to allow dynamic updates. - I have attach it too.netdiag /fix - doesn't work. I have attach it.
I used "dcdiag /fix" and here what I have:
C:\Users\Administrator.SERVER2016AD.004>dcdiag /fix Directory Server Diagnosis Performing initial setup: Trying to find home server... Home Server = Server2016AD * Identified AD Forest. Done gathering initial info. Doing initial required tests Testing server: komplex-info\SERVER2016AD Starting test: Connectivity The host 76a7d524-7979-40d8-ba37-c21ef98d201b._msdcs.ad.komplex.info.pl could not be resolved to an IP address. Check the DNS server, DHCP, server name, etc. Got error while checking LDAP and RPC connectivity. Please check your firewall settings. ......................... SERVER2016AD failed test Connectivity Doing primary tests Testing server: komplex-info\SERVER2016AD Skipping all tests, because server SERVER2016AD is not responding to directory service requests. Running partition tests on : ForestDnsZones Starting test: CheckSDRefDom ......................... ForestDnsZones passed test CheckSDRefDom Starting test: CrossRefValidation ......................... ForestDnsZones passed test CrossRefValidation Running partition tests on : DomainDnsZones Starting test: CheckSDRefDom ......................... DomainDnsZones passed test CheckSDRefDom Starting test: CrossRefValidation ......................... DomainDnsZones passed test CrossRefValidation Running partition tests on : Schema Starting test: CheckSDRefDom ......................... Schema passed test CheckSDRefDom Starting test: CrossRefValidation ......................... Schema passed test CrossRefValidation Running partition tests on : Configuration Starting test: CheckSDRefDom ......................... Configuration passed test CheckSDRefDom Starting test: CrossRefValidation ......................... Configuration passed test CrossRefValidation Running partition tests on : ad Starting test: CheckSDRefDom ......................... ad passed test CheckSDRefDom Starting test: CrossRefValidation ......................... ad passed test CrossRefValidation Running enterprise tests on : ad.komplex.info.pl Starting test: LocatorCheck ......................... ad.komplex.info.pl passed test LocatorCheck Starting test: Intersite ......................... ad.komplex.info.pl passed test Intersite - Feb 21, 2018
have you followed the steps in @ https://support.microsoft.com/en-gb/help/241505/srv-records-missing-after-implementing-active-directory-and-domain-nam
- piotrFeb 21, 2018Copper Contributor
Well, I dont have:
Forward Lookup Zones/ad.komplex.info.pl/_msdcs/dc/_sites/Default-First-Site-Name/_tcp Forward Lookup Zones/ad.komplex.info.pl/_msdcs/dc/_tcp
_kerberos and _ldap I have here:
Forward Lookup Zones/ad.komplex.info.pl/_sites/komplex-info/_tcp
In "%systemroot%\System32\Config" I don't have "_ldap._tcp.Domain_Name"
Nslookup
> _ldap._tcp.dc._msdcs.ad.komplex.info.pl Server: ad.komplex.info.pl Address: 192.168.88.201 *** ad.komplex.info.pl can't find _ldap._tcp.dc._msdcs.ad.komplex.info.pl: Non-existent domain
- Feb 21, 2018
This is a very strange problem you are having.
think you will need to check the SRV Record. You can follow the details @ https://support.microsoft.com/en-gb/help/816587/how-to-verify-that-srv-dns-records-have-been-created-for-a-domain-cont
Then if the SRV record is missing follow the instructions @ https://support.microsoft.com/en-gb/help/241505/srv-records-missing-after-implementing-active-directory-and-domain-nam
Hopefully one of them will help fix your issue.
Thanks
Richard
- piotrFeb 21, 2018Copper Contributor
I have disable it on DC, restart machine but no results
When I want to join domain, I see error "DNS Name does not exist"
- Feb 21, 2018
Try disabling the firewall and then try again.
- piotrFeb 21, 2018Copper Contributor
Sure thing
I will attach it.
- Feb 21, 2018
I have noticed an error in the code you were using. you had co instead of info. I have updated it below. Try running it again.
# Add subnet to sites and service Write-Host "Add Subnet to Site" $Subnet = read-host "Enter subnet in format 10.10.10.0/24" $desc = read-host "Enter description eg: 10.10.10.0/255.255.255.0" New-ADObject -Name:$subnet -Type subnet -Description:$desc -OtherAttributes @{location="komplex-info";siteObject="CN=komplex-info,CN=Sites,CN=Configuration,DC=ad,DC=komplex,DC=info,DC=pl"} -Path "CN=Subnets,CN=Sites,CN=Configuration,DC=ad,DC=komplex,DC=info,DC=pl" - Feb 21, 2018
Can you do a DCdiag again and upload the log files.
- piotrFeb 21, 2018Copper Contributor
Okay, I have add subnet.
I will attach 4 screenshots.
server1.png - contain IP configuration of DC (Windows Server).
client1.png - contain IP configuration of Client (Windows 10)
ad1.png - contain error while I want to join domain.
1.png - I add reverse DNS lookup zone.
Domain name: ad.komplex.info.pl
Thank You in advance
- Feb 21, 2018
The code looks good to me.
The error seems to say the server refused the task.
I think just to get you past this step, just ad the subnet to your site under Active Directory Sites and services.
Right click on subnets and add your subnet.
Hopefully, that will get you pass this step.
- piotrFeb 21, 2018Copper ContributorI have found error.
Now everything go :)
I try to add domain on client. - piotrFeb 21, 2018Copper Contributor
Sure.
Here you have:
# Add subnet to sites and service Write-Host "Add Subnet to Site" $Subnet = read-host "Enter subnet in format 10.10.10.0/24" $desc = read-host "Enter description eg: 10.10.10.0/255.255.255.0" New-ADObject -Name:$subnet -Type subnet -Description:$desc -OtherAttributes @{location="komplex-info";siteObject="CN=komplex-info,CN=Sites,CN=Configuration,DC=ad,DC=komplex,DC=co,DC=pl"} -Path "CN=Subnets,CN=Sites,CN=Configuration,DC=ad,DC=komplex,DC=co,DC=pl"My Active Directory Domain is called: ad.komplex.info.pl
NETBiosName: komplex
Default-First-Site: komplex-info
- Feb 21, 2018
Are you able to copy the code you are using to here? the screenshot is missing some bits.