TechTalkz.com Logo

Go Back   TechTalkz.com Technology & Computer Troubleshooting Forums > Tech Support Archives > Microsoft > Windows Server 2003

Notices

Broken delegated domain

Windows Server 2003


Reply
 
Thread Tools Display Modes
Old 26-06-2008, 06:03 AM   #11
Paul Bergson [MVP-DS]
Guest
 
Posts: n/a
Re: Broken delegated domain

See previous post on this. I made the mistake of looking for mnpower at the
root of my domain, when I was looking backwards. It was an erroneous
message created by dcdiag and a new zone created by a multi-function device.
It was so obvious I couldn't see it.

--
Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4



Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.

"Kevin D. Goodknecht Sr. [MVP]" <.US> wrote in message
news:.gbl...
>
> In news:OKa$.gbl,
> Paul Bergson [MVP-DS] <> wrote:
>> I regularly run diagnostics and the dcdiag /test:dns reports that I
>> have a broken delegated domain, yet I have never delegated this
>> (There are a couple of other admins).
>>
>> I thought I understood this but I am down right stumped, it has to be
>> something relatively simple but I sure am missing it. I don't have
>> any sub-zones delegated, at least none that I can find. Everything
>> is clean. DC is pointing at itself and another for dns services, AD
>> integrated, forwards all internet requests to ISP.
>>
>>
>> TEST: Delegations (Del)
>> Error: DNS server: dcxxx.mnpower.com. IP:192.168.1.2 [Broken
>> delegated domain mnpower.com.mnpower.com.]

>
> Do you have a a Forward Lookup zone named mnpower.com.mnpower.com?
> Do you also have one named mnpower.com?
> What is the Active Directory domain name?
> What domains are listed in your DNS Suffix search list in your ipconfig
> /all?
>
> I could make a good guess as to what is going on, and why you are seeing
> this, if I knew the answers to my questions, I wouldn't need to guess.
>
> --
> Best regards,
> Kevin D. Goodknecht Sr. [MVP]
> Hope This Helps
>
> ===================================
> When responding to posts, please "Reply to Group"
> via your newsreader so that others may learn and
> benefit from your issue, to respond directly to
> me remove the nospam. from my email address.
> ===================================
>
>
>
> ===================================
> Use Outlook Express?... Get OE_Quotefix:
> It will strip signature out and more
>
> ===================================
> Keep a back up of your OE settings and folders
> with OEBackup:
>
> ===================================
>



  Reply With Quote
Old 26-06-2008, 06:16 AM   #12
Chris Dent [MVP]
Guest
 
Posts: n/a
Re: Broken delegated domain


Hi Paul,

It's a bit of an odd one, and I can't quite see how it would happen. But, it
looks like you're missing a period from one of the NS Records.

For example, if you were to somehow have an NS Record like this (without the
terminating period):

mnpower.com NS somenameserver.domain.com.

Instead of (with the terminating period):

mnpower.com. NS somenameserver.domain.com.

The Name Server would add the current zone name as a suffix (because the
record is relative not absolute). Then it would give you a broken delegation
error because the target zone doesn't exist (I assume it's checking the
target there).

--
Chris Dent
MVP Directory Services

"Paul Bergson [MVP-DS]" <> wrote in message
news:.gbl...
> Wish it was that simple.
>
> --
> Paul Bergson
> MVP - Directory Services
> MCTS, MCT, MCSE, MCSA, Security+, BS CSci
> 2008, 2003, 2000 (Early Achiever), NT4
>
>
>
> Please no e-mails, any questions should be posted in the NewsGroup
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
>
> "Jorge de Almeida Pinto [MVP - DS]"
> <SubstituteThisWithMyFullNameSeparatedByDots@gmail .com> wrote in message
> news:.gbl...
>> Broken
>> delegated domain mnpower.com.mnpower.com
>>
>> your domain name is listed twice in the domain name.
>>
>> check your dns config
>>
>> --
>>
>> Cheers,
>> (HOPEFULLY THIS INFORMATION HELPS YOU!)
>>
>> # Jorge de Almeida Pinto # MVP Identity & Access - Directory Services #
>>
>> BLOG (WEB-BASED)-->
>> BLOG (RSS-FEEDS)-->
>> ------------------------------------------------------------------------------------------
>> * How to ask a question -->
>> ------------------------------------------------------------------------------------------
>> * This posting is provided "AS IS" with no warranties and confers no
>> rights!
>> * Always test ANY suggestion in a test environment before implementing!
>> ------------------------------------------------------------------------------------------
>> #################################################
>> #################################################
>> ------------------------------------------------------------------------------------------
>> "Paul Bergson [MVP-DS]" <> wrote in message
>> news:OKa$.gbl...
>>>I regularly run diagnostics and the dcdiag /test:dns reports that I have
>>>a broken delegated domain, yet I have never delegated this (There are a
>>>couple of other admins).
>>>
>>> I thought I understood this but I am down right stumped, it has to be
>>> something relatively simple but I sure am missing it. I don't have any
>>> sub-zones delegated, at least none that I can find. Everything is
>>> clean. DC is pointing at itself and another for dns services, AD
>>> integrated, forwards all internet requests to ISP.
>>>
>>>
>>> TEST: Delegations (Del)
>>> Error: DNS server: dcxxx.mnpower.com. IP:192.168.1.2 [Broken
>>> delegated domain mnpower.com.mnpower.com.]
>>>
>>> --
>>> Paul Bergson
>>> MVP - Directory Services
>>> MCTS, MCT, MCSE, MCSA, Security+, BS CSci
>>> 2008, 2003, 2000 (Early Achiever), NT4
>>>
>>>
>>>
>>> Please no e-mails, any questions should be posted in the NewsGroup
>>> This posting is provided "AS IS" with no warranties, and confers no
>>> rights.
>>>
>>>

>>

>
>



  Reply With Quote
Old 26-06-2008, 06:17 AM   #13
Kevin D. Goodknecht Sr. [MVP]
Guest
 
Posts: n/a
Re: Broken delegated domain


In news:OKa$.gbl,
Paul Bergson [MVP-DS] <> wrote:
> I regularly run diagnostics and the dcdiag /test:dns reports that I
> have a broken delegated domain, yet I have never delegated this
> (There are a couple of other admins).
>
> I thought I understood this but I am down right stumped, it has to be
> something relatively simple but I sure am missing it. I don't have
> any sub-zones delegated, at least none that I can find. Everything
> is clean. DC is pointing at itself and another for dns services, AD
> integrated, forwards all internet requests to ISP.
>
>
> TEST: Delegations (Del)
> Error: DNS server: dcxxx.mnpower.com. IP:192.168.1.2 [Broken
> delegated domain mnpower.com.mnpower.com.]


Do you have a a Forward Lookup zone named mnpower.com.mnpower.com?
Do you also have one named mnpower.com?
What is the Active Directory domain name?
What domains are listed in your DNS Suffix search list in your ipconfig
/all?

I could make a good guess as to what is going on, and why you are seeing
this, if I knew the answers to my questions, I wouldn't need to guess.

--
Best regards,
Kevin D. Goodknecht Sr. [MVP]
Hope This Helps

===================================
When responding to posts, please "Reply to Group"
via your newsreader so that others may learn and
benefit from your issue, to respond directly to
me remove the nospam. from my email address.
===================================



===================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more

===================================
Keep a back up of your OE settings and folders
with OEBackup:

===================================


  Reply With Quote
Old 26-06-2008, 06:21 AM   #14
Paul Bergson [MVP-DS]
Guest
 
Posts: n/a
Re: Broken delegated domain

Got it fixed, it was so simple it is embarrassing. DCDIAG incorrectly
reported an error when there really wasn't one. A multi-function print
device (A new version we are trialing) generated an incorrect host record,
creating its own domain within our domain.

Sigh...

Like I said it was totally embarrassing once it was located.

--
Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4



Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.

"Chris Dent [MVP]" <.uk> wrote in message
news:.gbl...
>
> Hi Paul,
>
> It's a bit of an odd one, and I can't quite see how it would happen. But,
> it looks like you're missing a period from one of the NS Records.
>
> For example, if you were to somehow have an NS Record like this (without
> the terminating period):
>
> mnpower.com NS somenameserver.domain.com.
>
> Instead of (with the terminating period):
>
> mnpower.com. NS somenameserver.domain.com.
>
> The Name Server would add the current zone name as a suffix (because the
> record is relative not absolute). Then it would give you a broken
> delegation error because the target zone doesn't exist (I assume it's
> checking the target there).
>
> --
> Chris Dent
> MVP Directory Services
>
> "Paul Bergson [MVP-DS]" <> wrote in message
> news:.gbl...
>> Wish it was that simple.
>>
>> --
>> Paul Bergson
>> MVP - Directory Services
>> MCTS, MCT, MCSE, MCSA, Security+, BS CSci
>> 2008, 2003, 2000 (Early Achiever), NT4
>>
>>
>>
>> Please no e-mails, any questions should be posted in the NewsGroup
>> This posting is provided "AS IS" with no warranties, and confers no
>> rights.
>>
>> "Jorge de Almeida Pinto [MVP - DS]"
>> <SubstituteThisWithMyFullNameSeparatedByDots@gmail .com> wrote in message
>> news:.gbl...
>>> Broken
>>> delegated domain mnpower.com.mnpower.com
>>>
>>> your domain name is listed twice in the domain name.
>>>
>>> check your dns config
>>>
>>> --
>>>
>>> Cheers,
>>> (HOPEFULLY THIS INFORMATION HELPS YOU!)
>>>
>>> # Jorge de Almeida Pinto # MVP Identity & Access - Directory Services #
>>>
>>> BLOG (WEB-BASED)-->
>>> BLOG (RSS-FEEDS)-->
>>> ------------------------------------------------------------------------------------------
>>> * How to ask a question -->
>>> ------------------------------------------------------------------------------------------
>>> * This posting is provided "AS IS" with no warranties and confers no
>>> rights!
>>> * Always test ANY suggestion in a test environment before implementing!
>>> ------------------------------------------------------------------------------------------
>>> #################################################
>>> #################################################
>>> ------------------------------------------------------------------------------------------
>>> "Paul Bergson [MVP-DS]" <> wrote in message
>>> news:OKa$.gbl...
>>>>I regularly run diagnostics and the dcdiag /test:dns reports that I have
>>>>a broken delegated domain, yet I have never delegated this (There are a
>>>>couple of other admins).
>>>>
>>>> I thought I understood this but I am down right stumped, it has to be
>>>> something relatively simple but I sure am missing it. I don't have any
>>>> sub-zones delegated, at least none that I can find. Everything is
>>>> clean. DC is pointing at itself and another for dns services, AD
>>>> integrated, forwards all internet requests to ISP.
>>>>
>>>>
>>>> TEST: Delegations (Del)
>>>> Error: DNS server: dcxxx.mnpower.com. IP:192.168.1.2 [Broken
>>>> delegated domain mnpower.com.mnpower.com.]
>>>>
>>>> --
>>>> Paul Bergson
>>>> MVP - Directory Services
>>>> MCTS, MCT, MCSE, MCSA, Security+, BS CSci
>>>> 2008, 2003, 2000 (Early Achiever), NT4
>>>>
>>>>
>>>>
>>>> Please no e-mails, any questions should be posted in the NewsGroup
>>>> This posting is provided "AS IS" with no warranties, and confers no
>>>> rights.
>>>>
>>>>
>>>

>>
>>

>
>



  Reply With Quote
Old 26-06-2008, 06:21 AM   #15
Paul Bergson [MVP-DS]
Guest
 
Posts: n/a
Re: Broken delegated domain

See previous post on this. I made the mistake of looking for mnpower at the
root of my domain, when I was looking backwards. It was an erroneous
message created by dcdiag and a new zone created by a multi-function device.
It was so obvious I couldn't see it.

--
Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4



Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.

"Kevin D. Goodknecht Sr. [MVP]" <.US> wrote in message
news:.gbl...
>
> In news:OKa$.gbl,
> Paul Bergson [MVP-DS] <> wrote:
>> I regularly run diagnostics and the dcdiag /test:dns reports that I
>> have a broken delegated domain, yet I have never delegated this
>> (There are a couple of other admins).
>>
>> I thought I understood this but I am down right stumped, it has to be
>> something relatively simple but I sure am missing it. I don't have
>> any sub-zones delegated, at least none that I can find. Everything
>> is clean. DC is pointing at itself and another for dns services, AD
>> integrated, forwards all internet requests to ISP.
>>
>>
>> TEST: Delegations (Del)
>> Error: DNS server: dcxxx.mnpower.com. IP:192.168.1.2 [Broken
>> delegated domain mnpower.com.mnpower.com.]

>
> Do you have a a Forward Lookup zone named mnpower.com.mnpower.com?
> Do you also have one named mnpower.com?
> What is the Active Directory domain name?
> What domains are listed in your DNS Suffix search list in your ipconfig
> /all?
>
> I could make a good guess as to what is going on, and why you are seeing
> this, if I knew the answers to my questions, I wouldn't need to guess.
>
> --
> Best regards,
> Kevin D. Goodknecht Sr. [MVP]
> Hope This Helps
>
> ===================================
> When responding to posts, please "Reply to Group"
> via your newsreader so that others may learn and
> benefit from your issue, to respond directly to
> me remove the nospam. from my email address.
> ===================================
>
>
>
> ===================================
> Use Outlook Express?... Get OE_Quotefix:
> It will strip signature out and more
>
> ===================================
> Keep a back up of your OE settings and folders
> with OEBackup:
>
> ===================================
>



  Reply With Quote
Reply

Thread Tools
Display Modes



< Windows Help - MS Office Help - Hardware Support >


New To Site? Need Help?

All times are GMT +5.5. The time now is 12:32 AM.


vBulletin, Copyright ©2000 - 2009, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO
Copyright © 2005-2009, TechTalkz.com. All Rights Reserved - Privacy Policy
Valid XHTML 1.0 Transitional