Windows 2016 Server stops DNS DHCP to Windows 10 PC's randomly

%3CLINGO-SUB%20id%3D%22lingo-sub-1566458%22%20slang%3D%22en-US%22%3EWindows%202016%20Server%20stops%20DNS%20DHCP%20to%20Windows%2010%20PC's%20randomly%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1566458%22%20slang%3D%22en-US%22%3E%3CP%3EHope%20someone%20here%20can%20help%20-%20I've%20been%20struggling%20with%20this%20one%20for%20some%20time.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20have%20a%20client%20that%20brought%20me%20in%20to%20install%20new%20Windows%2010%20machines%20for%20them.%20When%20we%20did%20this%20-%20we%20discovered%20we%20had%20a%20ton%20of%20issues%20-%20mostly%20revolving%20around%20map%20drives%20disconnecting.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ETroubleshooting%20further%20today%20I've%20discovered%20that%20the%20server%20will%20stop%20responding%20to%20DNS%20AND%20DHCP%20queries%20to%20a%20random%20machine.%20I'm%20pretty%20certain%20it's%20not%20an%20issue%20with%20the%20computer%20itself%2C%20as%20all%203%20computers%20will%20at%20different%20times%20have%20the%20same%20issue.%3CBR%20%2F%3E%3CBR%20%2F%3ESo%20at%20this%20very%20moment...%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EPC1%20will%20not%20get%20DNS%20responses%20from%20the%202016%20AD%20server.%20(ping%20google.com%20%3D%20could%20not%20find%20host%20google.com).%3C%2FP%3E%3CP%3EPC1%20-%20ipconfig%20%2Frenew%20%3D%20unable%20to%20contact%20your%20DHCP%20server.%3C%2FP%3E%3CP%3EPC1%20-%20I%20*CAN*%20remote%20in%20using%20AnyDesk%2C%20therefore%20it%20does%20have%20internet%20connectivity.%20Currently%20remoted%20into%20this%20machine.%20Obviously%20I%20can't%20browse%20the%20web%20though.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EPC2%20ping%20google.com%20%3D%20works%3C%2FP%3E%3CP%3EPC2%20ipconfig%20%2Frenew%20%3D%20works.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EFirewall%20is%20OFF%20for%20both%20PC's.%3C%2FP%3E%3CP%3ECurrently%20PC1%20is%20the%20problem%2C%20but%20it%20could%20be%20PC2%20tomorrow.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIPConfig%20for%20both%20machines%20has%3C%2FP%3E%3CP%3EIP%20(192.168.1.14%20PC1%2C%20192.168.1.15%20PC2)%3C%2FP%3E%3CP%3EDNS%3A%20192.168.1.254%20(AD%202016%20Server)%20(no%20other%20DNS%20servers)%3C%2FP%3E%3CP%3EDHCP%20Server%3A%20192.168.1.254%3C%2FP%3E%3CP%3EGateway%3A%20192.168.1.1%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EServer%20is%20Static%20IP%3C%2FP%3E%3CP%3E192.168.1.254%3C%2FP%3E%3CP%3EDNS%3A%20192.168.1.254%20(single%20entry)%3CBR%20%2F%3EFirewall%20Off%20on%20Server%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EPC1%20WAS%20working%20a%20few%20hours%20ago%2C%20as%20was%20PC2.%20It%20seems%20like%20the%20server%20just%20decides%20to%20stop%20responding%20to%20requests%20from%20a%20machine%20at%20random.%20Rebooting%20PC1%20Resolves%20the%20issue%20(But%20again%2C%20this%20can%20happen%20on%20PC2).%3CBR%20%2F%3E%3CBR%20%2F%3EAnother%20note%20-%20as%20Windows%2010%20seems%20to%20be%20involved%20in%20the%20breakdown%20-%20we%20have%20Win7%20running%20in%20VirtualBox%20on%20each%20of%20the%20computers.%20Running%20in%20VBox%20Win7%20Guest%20(win10%20host)%20-%20and%20things%20work%20pretty%20reliably.%3CBR%20%2F%3E%3CBR%20%2F%3EAny%20ideas%20or%20help%20would%20be%20very%20appreciated.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1566458%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3E2016%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EActive%20Directory%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EDHCP%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EDNS%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ENetworking%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EWindows%20Server%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1567071%22%20slang%3D%22en-US%22%3ERe%3A%20Windows%202016%20Server%20stops%20DNS%20DHCP%20to%20Windows%2010%20PC's%20randomly%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1567071%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F749740%22%20target%3D%22_blank%22%3E%40PcComputerGuy%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESounds%20like%20this%20could%20be%20a%20whole%20bunch%20of%20things.%20Thing's%20I'd%20look%20at%20to%20try%20and%20narrow%20down%20where%20along%20the%20chain%20the%20issue%20is%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E1.%20When%20PC1%20is%20unable%20to%20ping%20google.com%2C%20can%20it%20ping%20the%20DC%20by%20IP%20and%20by%20name%20as%20well%20at%20the%20same%20time%3F%3C%2FP%3E%3CP%3E2.%20When%20PC1%20is%20unable%20to%20ping%20google.com%2C%20can%20it%20ping%20an%20external%20IP%20(i.e.%208.8.8.8)%20during%20that%20time%3F%20(I%20suspect%20yes%20based%20on%20what%20you've%20already%20written%2C%20but%20good%20to%20check)%3C%2FP%3E%3CP%3E3.%20During%20the%20DNS%2FDHCP%20outage%2C%20can%20you%20do%20a%20NSLOOKUP%20to%20google.com%20if%20you%20use%20public%20DNS%20(i.e.%208.8.8.8)%20and%20does%20it%20resolve%3F%3C%2FP%3E%3CP%3E4.%20Is%20there%20anything%20in%20the%20event%20logs%20of%20the%20either%20the%20server%20or%20the%20client%20PCs%3F%20I'd%20be%20keen%20to%20see%20if%20the%20DNS%20and%20DHCP%20services%20suddenly%20stop.%3C%2FP%3E%3CP%3E5.%20Is%20it%20possible%20to%20use%20another%20DNS%20server%26nbsp%3B%3C%2FP%3E%3CP%3E6.%20What%20DNS%20does%20the%20DC%20forward%20onto%2C%20or%20is%20it%20using%20root%20hints%3F%26nbsp%3B%3C%2FP%3E%3CP%3E7.%20When%20the%20PC%20cannot%20resolve%2C%20can%20the%20server%20ping%20domain%2FIP%20of%20the%20client%20in%20question%3F%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ECertainly%20a%20strange%20one.%20Can%20you%20elaborate%20on%20the%20issues%20you%20had%20with%20drive%20mappings%20dropping%20and%20what%20you%20did%20to%20fix%20them%3F%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1567163%22%20slang%3D%22en-US%22%3ERe%3A%20Windows%202016%20Server%20stops%20DNS%20DHCP%20to%20Windows%2010%20PC's%20randomly%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1567163%22%20slang%3D%22en-US%22%3E%3CP%3EI'd%20agree%20it%20could%20be%20many%20things.%20First%20clue%20is%20the%20firewalls%20being%20turned%20off.%20This%20shouldn't%20be%20necessary%20assuming%20NLA%20detects%20the%20network%20correctly%20and%20all%20get%20the%20%3CSTRONG%3EDomain%3C%2FSTRONG%3E%20firewall%20profile.%20So%20if%20that's%20not%20happening%20then%20other%20things%20are%20likely%20broken%20as%20well.%20If%20you%20wanted%20more%20assistance%20then%20please%20run%3B%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3EDcdiag%20%2Fv%20%2Fc%20%2Fd%20%2Fe%20%2Fs%3A%25computername%25%20%26gt%3Bc%3A%5Cdcdiag.log%3C%2FLI%3E%0A%3CLI%3Erepadmin%20%2Fshowrepl%20%26gt%3BC%3A%5Crepl.txt%3C%2FLI%3E%0A%3CLI%3Eipconfig%20%2Fall%20%26gt%3B%20C%3A%5Cdc1.txt%3C%2FLI%3E%0A%3CLI%3Eipconfig%20%2Fall%20%26gt%3B%20C%3A%5Cdc2.txt%3C%2FLI%3E%0A%3CLI%3E(etc.%20as%20other%20DC's%20exist)%3C%2FLI%3E%0A%3CLI%3Eipconfig%20%2Fall%20%26gt%3B%20C%3A%5Cproblemworkstation.txt%3CBR%20%2F%3E%3CBR%20%2F%3Ethen%20put%20%3CU%3Eunzipped%3C%2FU%3E%20text%20files%20up%20on%20%3CA%20href%3D%22https%3A%2F%2Fonedrive.live.com%2Fabout%2Fen-us%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3EOneDrive%3C%2FA%3E%20and%20share%20a%20link.%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1567702%22%20slang%3D%22en-US%22%3ERe%3A%20Windows%202016%20Server%20stops%20DNS%20DHCP%20to%20Windows%2010%20PC's%20randomly%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1567702%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F383653%22%20target%3D%22_blank%22%3E%40HidMov%3C%2FA%3EThanks%20for%20taking%20the%20time%20to%20try%20and%20help.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CEM%3E1.%20When%20PC1%20is%20unable%20to%20ping%20google.com%2C%20can%20it%20ping%20the%20DC%20by%20IP%20and%20by%20name%20as%20well%20at%20the%20same%20time%3F%3C%2FEM%3E%3C%2FP%3E%3CP%3EA%3A%20It%20can%20ping%20the%20DC%20by%20IP%20only.%20Not%20by%20name.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CEM%3E2.%20When%20PC1%20is%20unable%20to%20ping%20google.com%2C%20can%20it%20ping%20an%20external%20IP%20(i.e.%208.8.8.8)%20during%20that%20time%3F%20(I%20suspect%20yes%20based%20on%20what%20you've%20already%20written%2C%20but%20good%20to%20check)%3C%2FEM%3E%3C%2FP%3E%3CP%3EA%3A%20I%20will%20double%20check%2C%20but%20I%20believe%20I%20did%20ping%208.8.8.8%20successfully.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CEM%3E3.%20During%20the%20DNS%2FDHCP%20outage%2C%20can%20you%20do%20a%20NSLOOKUP%20to%20google.com%20if%20you%20use%20public%20DNS%20(i.e.%208.8.8.8)%20and%20does%20it%20resolve%3F%3C%2FEM%3E%3C%2FP%3E%3CP%3EA%3A%20I%20am%20pretty%20sure%20yes%20-%20but%20will%20get%20the%20exact%20answer%20next%20time%20it%20happens.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CEM%3E4.%20Is%20there%20anything%20in%20the%20event%20logs%20of%20the%20either%20the%20server%20or%20the%20client%20PCs%3F%20I'd%20be%20keen%20to%20see%20if%20the%20DNS%20and%20DHCP%20services%20suddenly%20stop.%3C%2FEM%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHere%20is%20Windows%20System%20Event%20Viewer%20on%20PC1%20showing%20when%20approximately%20things%20fell%20apart%20(nobody%20was%20in%20the%20office.)%20Before%205%3A37pm%20things%20were%20working%2C%20then%20DNS%20stopped%20which%20all%20the%20other%20errors%20have%20to%20do%20with%20DNS%20resolution.%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22PcComputerGuy_0-1596642721831.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F210428i0F4E6F028FCFFF8A%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20title%3D%22PcComputerGuy_0-1596642721831.png%22%20alt%3D%22PcComputerGuy_0-1596642721831.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3ELogs%20under%20Apps%20and%20Services%20%26gt%3B%20MS%20%26gt%3B%20Windows%20%26gt%3B%20DNS%20Client%20Events%20is%20empty%20(shows%20disabled).%20I%20have%20enabled%20it%20now.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EEvent%20Viewer%20on%20DC%20(DNS-Server%20log)%20Shows%20no%20errors%20or%20issues%2C%20just%20information.%20No%20Entries%20after%203%3A10PM.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CEM%3E5.%20Is%20it%20possible%20to%20use%20another%20DNS%20server%3C%2FEM%3E%3C%2FP%3E%3CP%3EA%3A%20It's%20possible%2C%20but%20then%20we%20would%20end%20up%20with%20issues%20of%20internal%20resources%20stop%20working%20(but%20internet%20would%20work).%20I%20set%20it%20to%20use%20ONLY%20the%20DC%20to%20try%20and%20narrow%20down%20the%20issue.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CEM%3E6.%20What%20DNS%20does%20the%20DC%20forward%20onto%2C%20or%20is%20it%20using%20root%20hints%3F%3C%2FEM%3E%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22PcComputerGuy_1-1596643419600.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F210432iD0533EB843A5D4E5%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20title%3D%22PcComputerGuy_1-1596643419600.png%22%20alt%3D%22PcComputerGuy_1-1596643419600.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22PcComputerGuy_2-1596643447867.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F210433iE51A8413F4296BD2%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20title%3D%22PcComputerGuy_2-1596643447867.png%22%20alt%3D%22PcComputerGuy_2-1596643447867.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3EDoes%20that%20answer%20your%20question%3F%20(Forgive%20me%2C%20I%20rarely%20deal%20with%20Active%20Directory%20or%20Windows%20servers)%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CEM%3E7.%20When%20the%20PC%20cannot%20resolve%2C%20can%20the%20server%20ping%20domain%2FIP%20of%20the%20client%20in%20question%3F%3C%2FEM%3E%3C%2FP%3E%3CP%3EA%3A%20I'll%20get%20that%20info.%20I%20don't%20know.%20I%20think%20I%20pinged%20from%20.15%20(PC2)%20to%20.14%20(PC1)%20-%20but%20will%20verify%20when%20it%20happens%20again.%3CBR%20%2F%3E%3CBR%20%2F%3E%3CBR%20%2F%3EAn%20incomplete%20answer%20-%20but%20I%20wanted%20to%20respond%20with%20the%20info%20I%20have%2Fknow%20and%20will%20get%20the%20other%20info%20as%20soon%20as%20it%20drops%20again.%20Thank%20you%20again%20for%20taking%20the%20time%20to%20respond%3B%20I%20really%20appreciate%20your%20help.%3CBR%20%2F%3E%3CBR%20%2F%3EAlso%20-%20No%20AV%20Software%20other%20than%20Windows%20Defender%20installed%20on%20any%20machines.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1568475%22%20slang%3D%22en-US%22%3ERe%3A%20Windows%202016%20Server%20stops%20DNS%20DHCP%20to%20Windows%2010%20PC's%20randomly%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1568475%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F383653%22%20target%3D%22_blank%22%3E%40HidMov%3C%2FA%3EMore%20complete%20info%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E1.%20When%20PC1%20is%20unable%20to%20ping%20google.com%2C%20can%20it%20ping%20the%20DC%20by%20IP%20and%20by%20name%20as%20well%20at%20the%20same%20time%3F%3C%2FP%3E%3CP%3EA%3A%20Cannot%20ping%20DC%20by%20domain.%20Can%20ping%20by%20netbios%20name%2C%20or%20by%20IP.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E2.%20When%20PC1%20is%20unable%20to%20ping%20google.com%2C%20can%20it%20ping%20an%20external%20IP%20(i.e.%208.8.8.8)%20during%20that%20time%3F%20(I%20suspect%20yes%20based%20on%20what%20you've%20already%20written%2C%20but%20good%20to%20check)%3C%2FP%3E%3CP%3EA%3A%20Yes%20-%20verified.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E3.%20During%20the%20DNS%2FDHCP%20outage%2C%20can%20you%20do%20a%20NSLOOKUP%20to%20google.com%20if%20you%20use%20public%20DNS%20(i.e.%208.8.8.8)%20and%20does%20it%20resolve%3F%3C%2FP%3E%3CP%3EA%3A%20Yes%20it%20does%20(using%20192.168.1.1%20-%20the%20router)%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E5.%20Is%20it%20possible%20to%20use%20another%20DNS%20server%3C%2FP%3E%3CP%3EA%3A%20When%20adding%20192.168.1.1%20-%20then%20I%20can%20ping%20public%20addresses.%20I%20cannot%20ping%20the%20DC%20via%20domain%20name%2C%20I%20can%20ping%20via%20netbios%20name.%3C%2FP%3E%3CP%3E7.%20When%20the%20PC%20cannot%20resolve%2C%20can%20the%20server%20ping%20domain%2FIP%20of%20the%20client%20in%20question%3F%3C%2FP%3E%3CP%3EA%3A%20Yes%20Server%20can%20ping%20domain%2FIP%20of%20client.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1568740%22%20slang%3D%22en-US%22%3ERe%3A%20Windows%202016%20Server%20stops%20DNS%20DHCP%20to%20Windows%2010%20PC's%20randomly%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1568740%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F51719%22%20target%3D%22_blank%22%3E%40Dave%20Patrick%3C%2FA%3EThank%20you%20for%20taking%20the%20time%20to%20try%20and%20help.%20I've%20seen%20your%20name%20around%20the%20forums%20as%20I've%20been%20researching%20-%20and%20appreciate%20your%20time%20you%20put%20in%20to%20help%20others.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHere%20are%20the%20requested%20(and%20some%20additional)%20reports%2Flogs%2Fitems.%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2F1drv.ms%2Fu%2Fs!AratUArbLL6_8TenF8jW3_ovco80%3Fe%3DPE1c8a%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2F1drv.ms%2Fu%2Fs!AratUArbLL6_8TenF8jW3_ovco80%3Fe%3DPE1c8a%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1568748%22%20slang%3D%22en-US%22%3ERe%3A%20Windows%202016%20Server%20stops%20DNS%20DHCP%20to%20Windows%2010%20PC's%20randomly%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1568748%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F51719%22%20target%3D%22_blank%22%3E%40Dave%20Patrick%3C%2FA%3EAlso%20-%20%3CSTRONG%3Ethere%20is%20only%201%20DC%2Fserver%20here%3C%2FSTRONG%3E.%20I%20don't%20know%20what%20happened%20before%20they%20called%20me%20in%20to%20replace%203%20computers%20in%20January%20-%20but%20perhaps%20(inferring%20from%20logs)%20there%20was%20another%20server%20that%20no%20longer%20exists.%3CBR%20%2F%3E%3CBR%20%2F%3EThanks%20again%20for%20any%20input%2Fsuggestions%20you%20may%20have.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1569164%22%20slang%3D%22en-US%22%3ERe%3A%20Windows%202016%20Server%20stops%20DNS%20DHCP%20to%20Windows%2010%20PC's%20randomly%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1569164%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F749740%22%20target%3D%22_blank%22%3E%40PcComputerGuy%3C%2FA%3E%26nbsp%3Bthanks%20for%20the%20answers%20and%20the%20details%20-%20will%20try%20to%20take%20a%20look%20at%20this%20in%20the%20morning%20when%20I%20get%20a%20bit%20of%20time%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1569171%22%20slang%3D%22en-US%22%3ERe%3A%20Windows%202016%20Server%20stops%20DNS%20DHCP%20to%20Windows%2010%20PC's%20randomly%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1569171%22%20slang%3D%22en-US%22%3E%3CP%3ESuzi%20is%20multi-homed%20plus%20appears%20there%20may%20be%20an%20IPv6%20DHCP%20server%20that%20if%20not%20configured%20correctly%20is%20going%20to%20be%20problematic.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThe%20domain%20controller%20reports%20kcc_ds_connect_failures%20failed%20with%20error%208453%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fsupport.microsoft.com%2Fen-us%2Fhelp%2F2022387%2Factive-directory-replication-error-8453-replication-access-was-denied%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fsupport.microsoft.com%2Fen-us%2Fhelp%2F2022387%2Factive-directory-replication-error-8453-replication-access-was-denied%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EI'd%20check%20the%20system%20event%20log%20for%20error%20details%20%22Replication%20access%20was%20denied%22%3C%2FP%3E%0A%3CP%3EThere%20were%20some%20other%20test%20failures%20that%20may%20be%20the%20result%20of%20not%20running%20with%20elevated%20credentials%2C%20but%20check%20the%20system%20event%20log%20and%20work%20to%20clean%20up%20all%20errors.%3CBR%20%2F%3E%3CBR%20%2F%3EIf%20problems%20persist%20after%20fixes%20then%20put%20up%20a%20new%20set%20of%20files%20to%20look%20at.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1569174%22%20slang%3D%22en-US%22%3ERe%3A%20Windows%202016%20Server%20stops%20DNS%20DHCP%20to%20Windows%2010%20PC's%20randomly%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1569174%22%20slang%3D%22en-US%22%3E%3CP%3EI%20didn't%20see%20remnants%20of%20failed%20or%20removed%20domain%20controllers%20but%20you%20can%20easily%20check%20for%20and%20remove%20them%20following%20along%20here.%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fwindows-server%2Fidentity%2Fad-ds%2Fdeploy%2Fad-ds-metadata-cleanup%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fwindows-server%2Fidentity%2Fad-ds%2Fdeploy%2Fad-ds-metadata-cleanup%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1569930%22%20slang%3D%22es-ES%22%3ERe%3A%20Windows%202016%20Server%20stops%20DNS%20DHCP%20to%20Windows%2010%20PC's%20randomly%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1569930%22%20slang%3D%22es-ES%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F749740%22%20target%3D%22_blank%22%3E%40PcComputerGuy%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHello!!%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIf%20you%20don't%20have%20many%20reservations%20defined%20in%20DHCP%2C%20I%20recommend%20that%20you%20delete%20the%20DHCP%20Ambito%20and%20recreate%20it%2C%20especially%20if%20it%20comes%20from%20a%20migration%20from%20another%20DHCP.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EA%20greeting%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Occasional Contributor

Hope someone here can help - I've been struggling with this one for some time.

 

I have a client that brought me in to install new Windows 10 machines for them. When we did this - we discovered we had a ton of issues - mostly revolving around map drives disconnecting.

 

Troubleshooting further today I've discovered that the server will stop responding to DNS AND DHCP queries to a random machine. I'm pretty certain it's not an issue with the computer itself, as all 3 computers will at different times have the same issue.

So at this very moment...

 

PC1 will not get DNS responses from the 2016 AD server. (ping google.com = could not find host google.com).

PC1 - ipconfig /renew = unable to contact your DHCP server.

PC1 - I *CAN* remote in using AnyDesk, therefore it does have internet connectivity. Currently remoted into this machine. Obviously I can't browse the web though.

 

PC2 ping google.com = works

PC2 ipconfig /renew = works.

 

Firewall is OFF for both PC's.

Currently PC1 is the problem, but it could be PC2 tomorrow.

 

IPConfig for both machines has

IP (192.168.1.14 PC1, 192.168.1.15 PC2)

DNS: 192.168.1.254 (AD 2016 Server) (no other DNS servers)

DHCP Server: 192.168.1.254

Gateway: 192.168.1.1

 

Server is Static IP

192.168.1.254

DNS: 192.168.1.254 (single entry)
Firewall Off on Server

 

PC1 WAS working a few hours ago, as was PC2. It seems like the server just decides to stop responding to requests from a machine at random. Rebooting PC1 Resolves the issue (But again, this can happen on PC2).

Another note - as Windows 10 seems to be involved in the breakdown - we have Win7 running in VirtualBox on each of the computers. Running in VBox Win7 Guest (win10 host) - and things work pretty reliably.

Any ideas or help would be very appreciated.

 

10 Replies
Highlighted

@PcComputerGuy 

 

Sounds like this could be a whole bunch of things. Thing's I'd look at to try and narrow down where along the chain the issue is

 

1. When PC1 is unable to ping google.com, can it ping the DC by IP and by name as well at the same time?

2. When PC1 is unable to ping google.com, can it ping an external IP (i.e. 8.8.8.8) during that time? (I suspect yes based on what you've already written, but good to check)

3. During the DNS/DHCP outage, can you do a NSLOOKUP to google.com if you use public DNS (i.e. 8.8.8.8) and does it resolve?

4. Is there anything in the event logs of the either the server or the client PCs? I'd be keen to see if the DNS and DHCP services suddenly stop.

5. Is it possible to use another DNS server 

6. What DNS does the DC forward onto, or is it using root hints? 

7. When the PC cannot resolve, can the server ping domain/IP of the client in question? 

 

Certainly a strange one. Can you elaborate on the issues you had with drive mappings dropping and what you did to fix them? 

Highlighted

I'd agree it could be many things. First clue is the firewalls being turned off. This shouldn't be necessary assuming NLA detects the network correctly and all get the Domain firewall profile. So if that's not happening then other things are likely broken as well. If you wanted more assistance then please run;

  • Dcdiag /v /c /d /e /s:%computername% >c:\dcdiag.log
  • repadmin /showrepl >C:\repl.txt
  • ipconfig /all > C:\dc1.txt
  • ipconfig /all > C:\dc2.txt
  • (etc. as other DC's exist)
  • ipconfig /all > C:\problemworkstation.txt

    then put unzipped text files up on OneDrive and share a link.

 

 

Highlighted

@HidMovThanks for taking the time to try and help.

 

1. When PC1 is unable to ping google.com, can it ping the DC by IP and by name as well at the same time?

A: It can ping the DC by IP only. Not by name.

 

2. When PC1 is unable to ping google.com, can it ping an external IP (i.e. 8.8.8.8) during that time? (I suspect yes based on what you've already written, but good to check)

A: I will double check, but I believe I did ping 8.8.8.8 successfully.

 

3. During the DNS/DHCP outage, can you do a NSLOOKUP to google.com if you use public DNS (i.e. 8.8.8.8) and does it resolve?

A: I am pretty sure yes - but will get the exact answer next time it happens.

 

4. Is there anything in the event logs of the either the server or the client PCs? I'd be keen to see if the DNS and DHCP services suddenly stop.

 

Here is Windows System Event Viewer on PC1 showing when approximately things fell apart (nobody was in the office.) Before 5:37pm things were working, then DNS stopped which all the other errors have to do with DNS resolution.

PcComputerGuy_0-1596642721831.png

Logs under Apps and Services > MS > Windows > DNS Client Events is empty (shows disabled). I have enabled it now.

 

Event Viewer on DC (DNS-Server log) Shows no errors or issues, just information. No Entries after 3:10PM.

 

5. Is it possible to use another DNS server

A: It's possible, but then we would end up with issues of internal resources stop working (but internet would work). I set it to use ONLY the DC to try and narrow down the issue.

 

6. What DNS does the DC forward onto, or is it using root hints?

PcComputerGuy_1-1596643419600.png

PcComputerGuy_2-1596643447867.png

Does that answer your question? (Forgive me, I rarely deal with Active Directory or Windows servers)

 

7. When the PC cannot resolve, can the server ping domain/IP of the client in question?

A: I'll get that info. I don't know. I think I pinged from .15 (PC2) to .14 (PC1) - but will verify when it happens again.


An incomplete answer - but I wanted to respond with the info I have/know and will get the other info as soon as it drops again. Thank you again for taking the time to respond; I really appreciate your help.

Also - No AV Software other than Windows Defender installed on any machines.

Highlighted

@HidMovMore complete info:

 

1. When PC1 is unable to ping google.com, can it ping the DC by IP and by name as well at the same time?

A: Cannot ping DC by domain. Can ping by netbios name, or by IP.

 

2. When PC1 is unable to ping google.com, can it ping an external IP (i.e. 8.8.8.8) during that time? (I suspect yes based on what you've already written, but good to check)

A: Yes - verified.

 

3. During the DNS/DHCP outage, can you do a NSLOOKUP to google.com if you use public DNS (i.e. 8.8.8.8) and does it resolve?

A: Yes it does (using 192.168.1.1 - the router)

 

5. Is it possible to use another DNS server

A: When adding 192.168.1.1 - then I can ping public addresses. I cannot ping the DC via domain name, I can ping via netbios name.

7. When the PC cannot resolve, can the server ping domain/IP of the client in question?

A: Yes Server can ping domain/IP of client.

Highlighted

@Dave PatrickThank you for taking the time to try and help. I've seen your name around the forums as I've been researching - and appreciate your time you put in to help others.

 

Here are the requested (and some additional) reports/logs/items.

https://1drv.ms/u/s!AratUArbLL6_8TenF8jW3_ovco80?e=PE1c8a

 

Highlighted

@Dave PatrickAlso - there is only 1 DC/server here. I don't know what happened before they called me in to replace 3 computers in January - but perhaps (inferring from logs) there was another server that no longer exists.

Thanks again for any input/suggestions you may have.

Highlighted

@PcComputerGuy thanks for the answers and the details - will try to take a look at this in the morning when I get a bit of time

Highlighted

Suzi is multi-homed plus appears there may be an IPv6 DHCP server that if not configured correctly is going to be problematic.

 

The domain controller reports kcc_ds_connect_failures failed with error 8453
https://support.microsoft.com/en-us/help/2022387/active-directory-replication-error-8453-replication...

 

I'd check the system event log for error details "Replication access was denied"

There were some other test failures that may be the result of not running with elevated credentials, but check the system event log and work to clean up all errors.

If problems persist after fixes then put up a new set of files to look at.

 

 

 

Highlighted

I didn't see remnants of failed or removed domain controllers but you can easily check for and remove them following along here. 

https://docs.microsoft.com/en-us/windows-server/identity/ad-ds/deploy/ad-ds-metadata-cleanup

 

 

 

Highlighted

@PcComputerGuy 

 

Hola !!

 

Si no tienes muchas reservas definidas en el DHCP, te recomiendo que borres el Ambito DHCP y lo vuelvas a crear, especialmente si viene de una migración de otro DHCP.

 

Un saludo,