Validation Error in Dns Dns Validation Error Please Try Again Later

Windows Server DNS forwarders failed to validate

Posted past aolvera943

I have seen similar posts here but null seems to be working for me.

I can ping any number of public dns servers without issues from our dns server but the forwarder section fails to validate.

I accept restarted the service, checked the logs and tried irresolute the hosts dns addresses by flipping the loop back and the host ip as mentioned by another user only still nil.

This is driving me nuts.

22 Replies

Can yous post the output of this.
Delight put the output in the text box </> it makes it easy to read
Text
```
                      dcdiag /test:dns /dnsall /v                    
```
Was this post helpful? thumb_up thumb_down

aolvera943

Text

                        C:\Users\Administrator>dcdiag /test:dns /dnsall /v  Directory Server Diagnosis  Performing initial setup:    Trying to discover home server...    * Verifying that the local machine WVPADC01, is a Directory Server.    Home Server = WVPADC01    * Connecting to directory service on server WVPADC01.    * Identified Advertising Wood.    Collecting AD specific global information    * Collecting site info.    Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=example,DC=com,LDAP_SCOPE_SUBTREE,(objectCategory=ntDSSiteSettings),.......    The previous telephone call succeeded    Iterating through the sites    Looking at base site object: CN=NTDS Site Settings,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=instance,DC=com    Getting ISTG and options for the site    * Identifying all servers.    Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=example,DC=com,LDAP_SCOPE_SUBTREE,(objectClass=ntDSDsa),.......    The previous telephone call succeeded....    The previous call succeeded    Iterating through the list of servers    Getting information for the server CN=NTDS Settings,CN=WVPADC01,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=example,DC=com    objectGuid obtained    InvocationID obtained    dnsHostname obtained    site info obtained    All the info for the server nerveless    Getting information for the server CN=NTDS Settings,CN=WVPADC02,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=case,DC=com    objectGuid obtained    InvocationID obtained    dnsHostname obtained    site info obtained    All the info for the server nerveless    * Identifying all NC cantankerous-refs.    * Found 2 DC(s). Testing 1 of them.    Washed gathering initial info.  Doing initial required tests     Testing server: Default-First-Site-Name\WVPADC01       Starting test: Connectivity          * Active Directory LDAP Services Bank check          Determining IP4 connectivity          * Active Directory RPC Services Check          ......................... WVPADC01 passed exam Connectivity  Doing chief tests     Testing server: Default-Beginning-Site-Name\WVPADC01       Test omitted by user request: Advertising       Test omitted by user asking: CheckSecurityError       Test omitted by user asking: CutoffServers       Test omitted by user request: FrsEvent       Test omitted by user request: DFSREvent       Test omitted by user asking: SysVolCheck       Examination omitted by user request: KccEvent       Test omitted by user request: KnowsOfRoleHolders       Examination omitted by user request: MachineAccount       Exam omitted by user request: NCSecDesc       Test omitted past user request: NetLogons       Test omitted by user request: ObjectsReplicated       Test omitted by user request: OutboundSecureChannels       Test omitted by user request: Replications       Exam omitted by user request: RidManager       Test omitted by user request: Services       Test omitted by user request: SystemLog       Exam omitted by user request: Topology       Test omitted by user request: VerifyEnterpriseReferences       Test omitted past user request: VerifyReferences       Examination omitted by user request: VerifyReplicas        Starting test: DNS           DNS Tests are running and not hung. Please wait a few minutes...          Run across DNS test in enterprise tests section for results          ......................... WVPADC01 passed test DNS     Running partition tests on : ForestDnsZones       Test omitted by user request: CheckSDRefDom       Test omitted past user request: CrossRefValidation     Running division tests on : DomainDnsZones       Exam omitted by user request: CheckSDRefDom       Test omitted by user request: CrossRefValidation     Running sectionalisation tests on : Schema       Test omitted by user request: CheckSDRefDom       Test omitted by user request: CrossRefValidation     Running partition tests on : Configuration       Exam omitted past user request: CheckSDRefDom       Examination omitted by user request: CrossRefValidation     Running partition tests on : example       Test omitted by user request: CheckSDRefDom       Test omitted by user request: CrossRefValidation     Running enterprise tests on : example.com       Starting test: DNS          Examination results for domain controllers:              DC: WVPADC01.example.com             Domain: instance.com                  Exam: Authentication (Auth)                   Hallmark test: Successfully completed                 Examination: Basic (Basc)                   The OS Microsoft Windows Server 2022 Standard (Service Pack level: 0.0) is supported.                   NETLOGON service is running                   kdc service is running                   DNSCACHE service is running                   DNS service is running                   DC is a DNS server                   Network adapters information:                   Adapter [00000014] Microsoft Hyper-V Network Adapter:                      MAC address is 00:xv:5D:01:F1:21                      IP Address is static                      IP address: x.0.1.63                      DNS servers:                         127.0.0.1 (wvpadc01.example.com.) [Valid]                         10.0.ane.63 (wvpadc01.instance.com.) [Valid]                   Adapter [00000017] Microsoft Hyper-5 Network Adapter:                      MAC accost is 00:xv:5D:01:F1:24                      IP Address is static                      IP address: ten.0.thirty.64                      DNS servers:                         127.0.0.ane (wvpadc01.example.com.) [Valid]                         10.0.30.64 (wvpadc01.example.com.) [Valid]                   The A host record(s) for this DC was institute                   The SOA record for the Active Directory zone was establish                   The Active Directory zone on this DC/DNS server was constitute main                   Root zone on this DC/DNS server was not constitute                 Test: Forwarders/Root hints (Forw)                   Recursion is enabled                   Forwarders Information:                      1.1.one.one (<proper noun unavailable>) [Invalid (unreachable)]                      208.67.220.220 (<name unavailable>) [Valid]                      208.67.222.222 (<name unavailable>) [Valid]                      viii.8.viii.8 (<name unavailable>) [Invalid (unreachable)]                 TEST: Delegations (Del)                   Delegation information for the zone: example.com.                      Delegated domain name: _msdcs.example.com.                         DNS server: wvpadc01.instance.com. IP:x.0.1.63 [Valid]                         DNS server: wvpadc01.example.com. IP:10.0.30.64 [Valid]                      Delegated domain name: corp.example.com.                         Alert: Delegation of DNS server wvpadc01.example.com. is broken on IP:10.0.1.63                         Alert: Delegation of DNS server wvpadc01.example.com. is cleaved on IP:10.0.30.64                         Error: DNS server: wvpadc01.case.com. IP:10.0.30.64 [Broken delegation]                 Test: Dynamic update (Dyn)                   Examination record dcdiag-test-tape added successfully in zone example.com                   Warning: Failed to delete the exam record dcdiag-test-record in zone example.com                   [Error details: 9505 (Type: Win32 - Clarification: Unsecured DNS parcel.)]                 TEST: Records registration (RReg)                   Network Adapter [00000014] Microsoft Hyper-V Network Adapter:                      Matching CNAME record institute at DNS server x.0.1.63:                      ce410359-2895-4950-8825-42d20cd236ea._msdcs.example.com                       Matching A tape found at DNS server 10.0.1.63:                      WVPADC01.instance.com                       Matching  SRV record found at DNS server 10.0.1.63:                      _ldap._tcp.example.com                       Matching  SRV record found at DNS server 10.0.1.63:                      _ldap._tcp.df392d8c-a66a-4ad8-851f-d57fbf488720.domains._msdcs.instance.com                       Matching  SRV record found at DNS server 10.0.one.63:                      _kerberos._tcp.dc._msdcs.example.com                       Matching  SRV record plant at DNS server 10.0.1.63:                      _ldap._tcp.dc._msdcs.example.com                       Matching  SRV record found at DNS server 10.0.i.63:                      _kerberos._tcp.example.com                       Matching  SRV record plant at DNS server 10.0.1.63:                      _kerberos._udp.case.com                       Matching  SRV record found at DNS server 10.0.1.63:                      _kpasswd._tcp.case.com                       Matching  SRV record found at DNS server 10.0.1.63:                      _ldap._tcp.Default-Get-go-Site-Proper name._sites.case.com                       Matching  SRV tape institute at DNS server 10.0.1.63:                      _kerberos._tcp.Default-Starting time-Site-Proper noun._sites.dc._msdcs.example.com                       Matching  SRV record found at DNS server 10.0.1.63:                      _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.example.com                       Matching  SRV record found at DNS server 10.0.1.63:                      _kerberos._tcp.Default-First-Site-Name._sites.example.com                       Matching  SRV record found at DNS server 10.0.1.63:                      _ldap._tcp.gc._msdcs.example.com                       Matching A tape found at DNS server x.0.1.63:                      gc._msdcs.example.com                       Matching  SRV record found at DNS server x.0.1.63:                      _gc._tcp.Default-Start-Site-Proper name._sites.example.com                       Matching  SRV tape found at DNS server 10.0.i.63:                      _ldap._tcp.Default-Starting time-Site-Name._sites.gc._msdcs.case.com                       Matching  SRV record found at DNS server x.0.1.63:                      _ldap._tcp.pdc._msdcs.example.com                       Matching CNAME record constitute at DNS server ten.0.1.63:                      ce410359-2895-4950-8825-42d20cd236ea._msdcs.case.com                       Matching A record constitute at DNS server 10.0.1.63:                      WVPADC01.example.com                       Matching  SRV record found at DNS server ten.0.1.63:                      _ldap._tcp.instance.com                       Matching  SRV record found at DNS server 10.0.1.63:                      _ldap._tcp.df392d8c-a66a-4ad8-851f-d57fbf488720.domains._msdcs.instance.com                       Matching  SRV record found at DNS server 10.0.i.63:                      _kerberos._tcp.dc._msdcs.example.com                       Matching  SRV record establish at DNS server 10.0.1.63:                      _ldap._tcp.dc._msdcs.example.com                       Matching  SRV record found at DNS server 10.0.1.63:                      _kerberos._tcp.case.com                       Matching  SRV record constitute at DNS server 10.0.1.63:                      _kerberos._udp.example.com                       Matching  SRV record found at DNS server 10.0.1.63:                      _kpasswd._tcp.case.com                       Matching  SRV record found at DNS server ten.0.1.63:                      _ldap._tcp.Default-Get-go-Site-Name._sites.case.com                       Matching  SRV record plant at DNS server x.0.one.63:                      _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.example.com                       Matching  SRV tape plant at DNS server 10.0.1.63:                      _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.example.com                       Matching  SRV record institute at DNS server x.0.1.63:                      _kerberos._tcp.Default-First-Site-Name._sites.example.com                       Matching  SRV tape institute at DNS server 10.0.1.63:                      _ldap._tcp.gc._msdcs.example.com                       Matching A tape found at DNS server 10.0.1.63:                      gc._msdcs.example.com                       Matching  SRV tape plant at DNS server 10.0.1.63:                      _gc._tcp.Default-Beginning-Site-Name._sites.example.com                       Matching  SRV record institute at DNS server 10.0.1.63:                      _ldap._tcp.Default-Beginning-Site-Name._sites.gc._msdcs.instance.com                       Matching  SRV record found at DNS server 10.0.1.63:                      _ldap._tcp.pdc._msdcs.instance.com                    Network Adapter [00000017] Microsoft Hyper-V Network Adapter:                      Matching CNAME tape found at DNS server 10.0.30.64:                      ce410359-2895-4950-8825-42d20cd236ea._msdcs.instance.com                       Matching A record constitute at DNS server 10.0.xxx.64:                      WVPADC01.case.com                       Matching  SRV record found at DNS server 10.0.xxx.64:                      _ldap._tcp.example.com                       Matching  SRV record plant at DNS server 10.0.xxx.64:                      _ldap._tcp.df392d8c-a66a-4ad8-851f-d57fbf488720.domains._msdcs.case.com                       Matching  SRV record found at DNS server 10.0.30.64:                      _kerberos._tcp.dc._msdcs.instance.com                       Matching  SRV record found at DNS server 10.0.30.64:                      _ldap._tcp.dc._msdcs.instance.com                       Matching  SRV record plant at DNS server 10.0.30.64:                      _kerberos._tcp.example.com                       Matching  SRV tape found at DNS server 10.0.30.64:                      _kerberos._udp.example.com                       Matching  SRV record found at DNS server ten.0.xxx.64:                      _kpasswd._tcp.example.com                       Matching  SRV record establish at DNS server 10.0.xxx.64:                      _ldap._tcp.Default-First-Site-Proper noun._sites.instance.com                       Matching  SRV record found at DNS server 10.0.30.64:                      _kerberos._tcp.Default-Offset-Site-Name._sites.dc._msdcs.case.com                       Matching  SRV record found at DNS server 10.0.30.64:                      _ldap._tcp.Default-Showtime-Site-Name._sites.dc._msdcs.example.com                       Matching  SRV tape found at DNS server x.0.thirty.64:                      _kerberos._tcp.Default-First-Site-Name._sites.instance.com                       Matching  SRV record found at DNS server 10.0.thirty.64:                      _ldap._tcp.gc._msdcs.example.com                       Matching A record plant at DNS server 10.0.30.64:                      gc._msdcs.example.com                       Matching  SRV record found at DNS server ten.0.30.64:                      _gc._tcp.Default-Get-go-Site-Name._sites.example.com                       Matching  SRV record found at DNS server ten.0.30.64:                      _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.example.com                       Matching  SRV tape found at DNS server 10.0.thirty.64:                      _ldap._tcp.pdc._msdcs.example.com                       Matching CNAME record found at DNS server 10.0.30.64:                      ce410359-2895-4950-8825-42d20cd236ea._msdcs.case.com                       Matching A tape found at DNS server 10.0.30.64:                      WVPADC01.example.com                       Matching  SRV record found at DNS server ten.0.xxx.64:                      _ldap._tcp.example.com                       Matching  SRV record constitute at DNS server 10.0.30.64:                      _ldap._tcp.df392d8c-a66a-4ad8-851f-d57fbf488720.domains._msdcs.instance.com                       Matching  SRV record plant at DNS server x.0.30.64:                      _kerberos._tcp.dc._msdcs.case.com                       Matching  SRV record found at DNS server 10.0.30.64:                      _ldap._tcp.dc._msdcs.example.com                       Matching  SRV record constitute at DNS server 10.0.30.64:                      _kerberos._tcp.example.com                       Matching  SRV record establish at DNS server 10.0.30.64:                      _kerberos._udp.example.com                       Matching  SRV tape found at DNS server 10.0.xxx.64:                      _kpasswd._tcp.case.com                       Matching  SRV record found at DNS server 10.0.xxx.64:                      _ldap._tcp.Default-First-Site-Proper noun._sites.case.com                       Matching  SRV record found at DNS server 10.0.30.64:                      _kerberos._tcp.Default-Showtime-Site-Name._sites.dc._msdcs.instance.com                       Matching  SRV record found at DNS server 10.0.30.64:                      _ldap._tcp.Default-Offset-Site-Proper noun._sites.dc._msdcs.example.com                       Matching  SRV record institute at DNS server x.0.30.64:                      _kerberos._tcp.Default-First-Site-Proper noun._sites.instance.com                       Matching  SRV record establish at DNS server 10.0.thirty.64:                      _ldap._tcp.gc._msdcs.example.com                       Matching A tape institute at DNS server x.0.30.64:                      gc._msdcs.case.com                       Matching  SRV record found at DNS server x.0.xxx.64:                      _gc._tcp.Default-First-Site-Proper name._sites.case.com                       Matching  SRV record found at DNS server 10.0.30.64:                      _ldap._tcp.Default-Offset-Site-Name._sites.gc._msdcs.instance.com                       Matching  SRV tape found at DNS server 10.0.30.64:                      _ldap._tcp.pdc._msdcs.instance.com                  Examination: External proper name resolution (Ext)                   Error: Cyberspace proper noun www.microsoft.com cannot be resolved           Summary of exam results for DNS servers used by the higher up domain controllers:              DNS server: 1.i.1.one (<name unavailable>)                1 test failure on this DNS server                PTR record query for the 1.0.0.127.in-addr.arpa. failed on the DNS server 1.1.one.1               [Fault details: 1460 (Blazon: Win32 - Description: This operation returned because the timeout period expired.)]              DNS server: 10.0.1.63 (wvpadc01.example.com.)                ane test failure on this DNS server                Proper noun resolution is functional._ldap._tcp SRV record for the forest root domain is registered                DNS delegation for the domain  _msdcs.case.com. is operational on IP 10.0.1.63                 DNS delegation for the domain corp.example.com. is cleaved on IP x.0.1.63                 [Mistake details: 9002 (Type: Win32 - Description: DNS server failure.)]              DNS server: 10.0.30.64 (wvpadc01.case.com.)                1 test failure on this DNS server                Name resolution is functional._ldap._tcp SRV record for the forest root domain is registered                DNS delegation for the domain  _msdcs.instance.com. is operational on IP 10.0.30.64                 DNS delegation for the domain corp.example.com. is broken on IP 10.0.30.64                 [Fault details: 9002 (Type: Win32 - Clarification: DNS server failure.)]              DNS server: 8.8.viii.8 (<proper name unavailable>)                1 examination failure on this DNS server                PTR record query for the 1.0.0.127.in-addr.arpa. failed on the DNS server viii.8.eight.eight               [Mistake details: 1460 (Blazon: Win32 - Description: This operation returned because the timeout period expired.)]              DNS server: 208.67.220.220 (<name unavailable>)                All tests passed on this DNS server              DNS server: 208.67.222.222 (<proper noun unavailable>)                All tests passed on this DNS server           Summary of DNS examination results:                                              Auth Basc Forw Del  Dyn  RReg Ext             _________________________________________________________________             Domain: instance.com                WVPADC01                     Pass PASS PASS FAIL WARN PASS FAIL           ......................... case.com failed test DNS

Was this post helpful? thumb_up thumb_down

I omitted the domain proper noun for reasons. Later looking a piddling scrap closer at the box its on, it seems to have more than only forrard resolution problems.

Information technology actually took some finagling to go this off and posted here because I couldn't reach shared storage from it. Odd that I cant reach a local resource but it volition ping an external dns server merely fine.

Was this post helpful? thumb_up thumb_down
Why is the DC multihomed? That will cause all sorts of issues.
It too appears you have IPv6 inbound or disabled? Is that true?
If you can post ipconfig /all likewise

Was this post helpful? thumb_up thumb_down
I recollect the multihome is from someone trying to setup a dissimilar interface for dhcp serving.

IPv6 is disabled on all interfaces.

Was this post helpful? thumb_up thumb_down
I call back the multihome is from someone trying to setup a different interface for dhcp serving.

IPv6 is disabled on all interfaces.

Was this post helpful? thumb_up thumb_down
aolvera943 wrote:

I think the multihome is from someone trying to setup a different interface for dhcp serving.

IPv6 is disabled on all interfaces.

That's non how that should work. IP helpers are needed there. Disabling IPv6 even if information technology is non used will also cause other issues. If this is the only dc just use loopback and non the ip equally well.
I would suggest removing the second IP interface that is not needed. DCs should not be multihomed if possible.

Was this mail helpful? thumb_up thumb_down
What forwarders are yous trying to use ?

Was this post helpful? thumb_up thumb_down
Thanks for the advice, I removed the other interface, set dns address to just the loop back and re-enabled ipv6.

Issue is unchanged. Forwarders are still failing to resolve.

Was this post helpful? thumb_up thumb_down
Originally information technology has been prepare to OpenDns.

I added 1.1.one.1 and googles 8.8.8.viii just to see if they would resolve but then far nothing.

Was this post helpful? thumb_up thumb_down
aolvera943 wrote:

Originally information technology has been gear up to OpenDns.

I added one.1.i.ane and googles viii.8.8.8 merely to meet if they would resolve but so far nil.

Is your firewall blocking outbound 53?

Was this post helpful? thumb_up thumb_down
Ports are open up for outbound port 53

Was this post helpful? thumb_up thumb_down
From the DC have y'all tried
Text
```
                      nslookup google.com eight.8.eight.eight                    
```
Wire shark the request and see what happens.

At this point it looks similar a network issue. Are the old routes still present from the second IP?

Road Print to check, If the sometime route has a lower metric that could cause the failure.

Next would be to run into if the request goes out the firewall and comes dorsum. Firewall logs should show that. if it goes out and back, and then is it making it back to the DC? Is there a missing internal route from the firewall to the internal network?

Was this post helpful? thumb_up thumb_down
I did still have a left over static road from a different at present removed connectedness. I removed the route and gave information technology another become but still outcome persists.

Nslookup for google gives 2 dns fourth dimension out errors but comes back with a not-authoritative response.

In wireshark I am seeing a response from viii.8.8.8 for my query

Was this mail helpful? thumb_up thumb_down
aolvera943 wrote:

I did yet take a left over static route from a different now removed connection. I removed the route and gave it another go but still result persists.

Nslookup for google gives 2 dns time out errors just comes back with a non-administrative response.

In wireshark I am seeing a response from 8.8.8.8 for my query

Have you rebooted since removing that route and the second IP? Endeavour that and run the DCdiag exam from above.

Was this post helpful? thumb_up thumb_down
I idea I had just I did it anyway. On reboot my static ip was cleared oddly. I reassigned information technology and restarted the dns service.

Issue persists. The forwarders yet are not validating. The fqdn is listed simply the validation yet says timeout.

This is nuts.

Still though your help is very much appreciated.

Was this post helpful? thumb_up thumb_down
aolvera943 wrote:

I thought I had but I did it anyway. On reboot my static ip was cleared oddly. I reassigned it and restarted the dns service.

Upshot persists. The forwarders still are non validating. The fqdn is listed but the validation yet says timeout.

This is nuts.

Still though your help is very much appreciated.

Sounds like something yet wrong with the network.

Tin can yous post the DCdiag over again and ipconfig /all and route print

Was this post helpful? thumb_up thumb_down
Just for kicks I installed the dns service on another box and it validates only fine. Same subnet as well so I don't think this is a network event but something must exist miss configured on that install.

Was this postal service helpful? thumb_up thumb_down
Well not the firewall or switch anyway

Was this mail helpful? thumb_up thumb_down

aolvera943

Justin1250 wrote:

aolvera943 wrote:

I thought I had but I did it anyway. On reboot my static ip was cleared oddly. I reassigned it and restarted the dns service.

Issue persists. The forwarders however are non validating. The fqdn is listed simply the validation still says timeout.

This is nuts.

Still though your help is very much appreciated.

Sounds like something still wrong with the network.

Can y'all post the DCdiag once more and ipconfig /all and road print

Text

                          Windows IP Configuration     Host Name . . . . . . . . . . . . : WVPADC01    Chief Dns Suffix  . . . . . . . : example.com    Node Type . . . . . . . . . . . . : Hybrid    IP Routing Enabled. . . . . . . . : No    WINS Proxy Enabled. . . . . . . . : No    DNS Suffix Search List. . . . . . : example.com  Ethernet adapter Npcap Loopback Adapter:     Connexion-specific DNS Suffix  . :    Description . . . . . . . . . . . : Npcap Loopback Adapter    Physical Accost. . . . . . . . . : 02-00-4C-4F-4F-50    DHCP Enabled. . . . . . . . . . . : Yep    Autoconfiguration Enabled . . . . : Yeah    Link-local IPv6 Address . . . . . : fe80::5d23:31db:5152:c3f8%ii(Preferred)    Autoconfiguration IPv4 Address. . : 169.254.195.248(Preferred)    Subnet Mask . . . . . . . . . . . : 255.255.0.0    Default Gateway . . . . . . . . . :    DHCPv6 IAID . . . . . . . . . . . : 637665356    DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-24-9C-0E-2C-00-xv-5D-01-F1-1C    DNS Servers . . . . . . . . . . . : fec0:0:0:ffff::1%1                                        fec0:0:0:ffff::ii%1                                        fec0:0:0:ffff::3%ane    NetBIOS over Tcpip. . . . . . . . : Enabled  Ethernet adapter Ethernet v:     Connection-specific DNS Suffix  . : example.com    Description . . . . . . . . . . . : Microsoft Hyper-5 Network Adapter #5    Physical Address. . . . . . . . . : 00-15-5D-01-F1-21    DHCP Enabled. . . . . . . . . . . : No    Autoconfiguration Enabled . . . . : Yes    IPv4 Address. . . . . . . . . . . : 10.0.1.63(Preferred)    Subnet Mask . . . . . . . . . . . : 255.255.255.0    Default Gateway . . . . . . . . . : 10.0.ane.1    DNS Servers . . . . . . . . . . . : 127.0.0.1    NetBIOS over Tcpip. . . . . . . . : Enabled    Connectedness-specific DNS Suffix Search List :                                        example.com   =========================================================================== Interface List   2...02 00 4c 4f 4f 50 ......Npcap Loopback Adapter   9...00 15 5d 01 f1 21 ......Microsoft Hyper-V Network Adapter #5   1...........................Software Loopback Interface one ===========================================================================  IPv4 Route Table =========================================================================== Active Routes: Network Destination        Netmask          Gateway       Interface  Metric           0.0.0.0          0.0.0.0         ten.0.ane.one        10.0.1.63    291          ten.0.ane.0    255.255.255.0         On-link         10.0.i.63    291         10.0.ane.63  255.255.255.255         On-link         x.0.1.63    291        ten.0.1.255  255.255.255.255         On-link         10.0.1.63    291         127.0.0.0        255.0.0.0         On-link         127.0.0.i    331         127.0.0.i  255.255.255.255         On-link         127.0.0.1    331   127.255.255.255  255.255.255.255         On-link         127.0.0.1    331       169.254.0.0      255.255.0.0         On-link   169.254.195.248    281   169.254.195.248  255.255.255.255         On-link   169.254.195.248    281   169.254.255.255  255.255.255.255         On-link   169.254.195.248    281         224.0.0.0        240.0.0.0         On-link         127.0.0.ane    331         224.0.0.0        240.0.0.0         On-link   169.254.195.248    281         224.0.0.0        240.0.0.0         On-link         ten.0.1.63    291   255.255.255.255  255.255.255.255         On-link         127.0.0.1    331   255.255.255.255  255.255.255.255         On-link   169.254.195.248    281   255.255.255.255  255.255.255.255         On-link         x.0.one.63    291 =========================================================================== Persistent Routes:   Network Accost          Netmask  Gateway Address  Metric           0.0.0.0          0.0.0.0         10.0.1.1  Default ===========================================================================  IPv6 Route Table =========================================================================== Active Routes:  If Metric Network Destination      Gateway   1    331 ::one/128                  On-link   2    281 fe80::/64                On-link   2    281 fe80::5d23:31db:5152:c3f8/128                                     On-link   i    331 ff00::/8                 On-link   2    281 ff00::/8                 On-link =========================================================================== Persistent Routes:   None         Starting test: DNS           DNS Tests are running and not hung. Please wait a few minutes...          See DNS exam in enterprise tests section for results          ......................... WVPADC01 passed test DNS     Running partition tests on : ForestDnsZones       Exam omitted by user asking: CheckSDRefDom       Test omitted by user request: CrossRefValidation     Running sectionalisation tests on : DomainDnsZones       Test omitted past user request: CheckSDRefDom       Test omitted by user request: CrossRefValidation     Running partition tests on : Schema       Test omitted by user request: CheckSDRefDom       Exam omitted by user asking: CrossRefValidation     Running sectionalisation tests on : Configuration       Test omitted by user request: CheckSDRefDom       Test omitted past user asking: CrossRefValidation     Running division tests on : example       Test omitted past user request: CheckSDRefDom       Test omitted past user request: CrossRefValidation     Running enterprise tests on : instance.com       Starting examination: DNS          Exam results for domain controllers:              DC: WVPADC01.example.com             Domain: example.com                  TEST: Authentication (Auth)                   Hallmark test: Successfully completed                 TEST: Basic (Basc)                   The OS Microsoft Windows Server 2022 Standard (Service Pack level: 0.0) is supported.                   NETLOGON service is running                   kdc service is running                   DNSCACHE service is running                   DNS service is running                   DC is a DNS server                   Network adapters information:                   Adapter [00000014] Microsoft Hyper-V Network Adapter:                      MAC accost is 00:xv:5D:01:F1:21                      IP Address is static                      IP accost: 10.0.1.63                      DNS servers:                         127.0.0.1 (wvpadc01.instance.com.) [Valid]                   The A host record(s) for this DC was found                   The SOA tape for the Agile Directory zone was constitute                   The Active Directory zone on this DC/DNS server was found chief                   Root zone on this DC/DNS server was not found                 TEST: Forwarders/Root hints (Forw)                   Recursion is enabled                   Forwarders Information:                      1.ane.i.1 (<proper noun unavailable>) [Invalid (unreachable)]                      208.67.220.220 (<name unavailable>) [Valid]                      208.67.222.222 (<proper name unavailable>) [Valid]                      8.viii.8.viii (<name unavailable>) [Invalid (unreachable)]                 Test: Delegations (Del)                   Delegation information for the zone: example.com.                      Delegated domain name: _msdcs.example.com.                         DNS server: wvpadc01.example.com. IP:x.0.1.63 [Valid]                      Delegated domain proper noun: corp.example.com.                         Alert: Delegation of DNS server wvpadc01.instance.com. is broken on IP:ten.0.1.63                         Mistake: DNS server: wvpadc01.example.com. IP:x.0.1.63 [Broken delegation]                 Exam: Dynamic update (Dyn)                   Test record dcdiag-test-tape added successfully in zone case.com                   Warning: Failed to delete the test tape dcdiag-exam-record in zone instance.com                   [Fault details: 9505 (Type: Win32 - Description: Unsecured DNS packet.)]                 TEST: Records registration (RReg)                   Network Adapter [00000014] Microsoft Hyper-V Network Adapter:                      Matching CNAME tape found at DNS server 10.0.1.63:                      ce410359-2895-4950-8825-42d20cd236ea._msdcs.case.com                       Matching A record found at DNS server 10.0.i.63:                      WVPADC01.instance.com                       Matching  SRV tape found at DNS server 10.0.i.63:                      _ldap._tcp.example.com                       Matching  SRV tape plant at DNS server x.0.ane.63:                      _ldap._tcp.df392d8c-a66a-4ad8-851f-d57fbf488720.domains._msdcs.case.com                       Matching  SRV tape found at DNS server 10.0.1.63:                      _kerberos._tcp.dc._msdcs.example.com                       Matching  SRV record plant at DNS server 10.0.1.63:                      _ldap._tcp.dc._msdcs.example.com                       Matching  SRV record found at DNS server 10.0.1.63:                      _kerberos._tcp.example.com                       Matching  SRV record found at DNS server ten.0.1.63:                      _kerberos._udp.example.com                       Matching  SRV record found at DNS server 10.0.1.63:                      _kpasswd._tcp.instance.com                       Matching  SRV record found at DNS server 10.0.1.63:                      _ldap._tcp.Default-First-Site-Name._sites.example.com                       Matching  SRV record found at DNS server x.0.1.63:                      _kerberos._tcp.Default-First-Site-Proper noun._sites.dc._msdcs.example.com                       Matching  SRV tape institute at DNS server 10.0.i.63:                      _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.example.com                       Matching  SRV record found at DNS server 10.0.1.63:                      _kerberos._tcp.Default-First-Site-Name._sites.example.com                       Matching  SRV tape found at DNS server ten.0.ane.63:                      _ldap._tcp.gc._msdcs.example.com                       Matching A tape institute at DNS server x.0.ane.63:                      gc._msdcs.example.com                       Matching  SRV record found at DNS server 10.0.1.63:                      _gc._tcp.Default-First-Site-Name._sites.example.com                       Matching  SRV record found at DNS server 10.0.1.63:                      _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.example.com                       Matching  SRV record found at DNS server 10.0.ane.63:                      _ldap._tcp.pdc._msdcs.example.com                  Exam: External name resolution (Ext)                   Error: Internet name www.microsoft.com cannot exist resolved           Summary of examination results for DNS servers used by the above domain controllers:              DNS server: i.1.one.1 (<name unavailable>)                1 test failure on this DNS server                PTR record query for the 1.0.0.127.in-addr.arpa. failed on the DNS server 1.i.ane.1               [Fault details: 1460 (Blazon: Win32 - Description: This operation returned because the timeout period expired.)]              DNS server: ten.0.i.63 (wvpadc01.case.com.)                1 test failure on this DNS server                Name resolution is functional._ldap._tcp SRV record for the forest root domain is registered                DNS delegation for the domain  _msdcs.example.com. is operational on IP 10.0.1.63                 DNS delegation for the domain corp.example.com. is broken on IP x.0.ane.63                 [Mistake details: 9002 (Type: Win32 - Description: DNS server failure.)]              DNS server: 8.8.8.8 (<proper name unavailable>)                one examination failure on this DNS server                PTR record query for the 1.0.0.127.in-addr.arpa. failed on the DNS server 8.8.8.viii               [Error details: 1460 (Blazon: Win32 - Description: This performance returned because the timeout menses expired.)]              DNS server: 208.67.220.220 (<proper noun unavailable>)                All tests passed on this DNS server              DNS server: 208.67.222.222 (<proper noun unavailable>)                All tests passed on this DNS server           Summary of DNS test results:                                              Auth Basc Forw Del  Dyn  RReg Ext             _________________________________________________________________             Domain: case.com                WVPADC01                     PASS PASS PASS Fail WARN Pass Fail           ......................... instance.com failed examination DNS

Was this post helpful? thumb_up thumb_down

Is there anything on the windows firewall? Have you tried deleting the forwarders and re-adding them?
Also set up the dns server on the IPv6 interface to ::1

Are yous bonding the interface in hyper-5 interface?

You can try resetting the network stack

Also check the windows sub system

The other server is skillful news, unless there is an explicit deny or something like information technology.
Text
```
                      netah int ipv4 reset reset.log sfc /scannow                    
```
Was this post helpful? thumb_up thumb_down
Justin1250 wrote:

Is there anything on the windows firewall? Take you tried deleting the forwarders and re-adding them?
Also set the dns server on the IPv6 interface to ::1

Are you bonding the interface in hyper-v interface?

You can try resetting the network stack

Also check the windows sub organization

The other server is good news, unless at that place is an explicit deny or something like it.
Text

netah int ipv4 reset reset.log sfc /scannow
Windows firewall is turned off correct now. I take tried deleting the forwarders, restarting dns, re-adding different or same forwarders. also deleting and so rebooting. All of that I did yesterday merely I will requite information technology some other shot today.

The interface is not bonded. I have tried moving to a different vswitch on a different interface but no luck.

I did endeavour resetting the ip stack terminal night. I will do the sfc scan today.

Something else strange started happening. The server is now processing requests for google domain addresses. Something it couldn't practise after the upshot started.

Information technology still wont process addresses for whatever other domain I have tried but addresses like youtube, the play shop and google itself, I go good reply's from the dns server to the client in nslookup. It's possible these are buried and possibly earlier the server wasn't replying at all. Trivial hard to tell since at the very least it has even so been replying to requests for entries in its own lookup zones.

Was this post helpful? thumb_up thumb_down

Read these adjacent...

Block org-wide internal emails betwixt a certain time
Cloud Computing & SaaS
Hi all, non certain if this is the right place to postal service this but hopefully I tin become some pointers or help :)We are a full Office 365 business firm using Exchange Online. One of the higher ups has asked me to see how to become about setting the championship of this post in plac...
Security Groups
Security
i apply Logmein to access computers, when accessing, Logmein asks for either the domain password, or the local password to connect to the reckoner to . I have 2 non It people that take and need access to the local admin password and so they can use this characteristic...
New Responsive Superhead ad coming to Spiceworks
Beta
While I know that ads are not your favorite bailiwick, nosotros always want to practise our best to be upfront with all of y'all about the changes nosotros're making to Spiceworks. We will be adding a new ad type to the Spiceworks website chosen the Responsive Superheader that...
Snap! Quick Assist, NIS2, symmetron, Super Bloom Blood Moon, & an angry It pro
Spiceworks Originals
Your daily dose of tech news, in brief. You need to hear this. Welcome to Monday, everyone! So far, information technology is a fairly repose one and here'due south hoping it stays that manner. Windows admins are so bellyaching by Quick Assist moving to Microsoft Store Micro...
Spark! Pro Series - 16th May 2022
Spiceworks Originals
Equally Monday dawns one time again, the Spark! is here to illuminate, inform and entertain. If you like information technology, spice it upward. If you lot don't, permit me know and I'll try and improve next time. Never likewise old for constructive criticism...