I have an AD with DNS integrated. Last week I changed my dc to an new server, but the DNS Server have occurred warning very often. The error ID is almost the same, 4521. Because my system is using chinese, So the message is not attached.

Any suggest will be helpful!

1) What OS?
2) How did you change the DC?
3) What is the text (in English) of the error message?

Anthony,
http://www.airdesk.com


"Eviltonight" <eviltonight@hotmail.com> wrote in message
news:#PgtsUM6JHA.3860@TK2MSFTNGP05.phx.gbl...

Quote:

I have an AD with DNS integrated. Last week I changed my dc to an new server, but the DNS Server have occurred warning very often. The error ID is almost the same, 4521. Because my system is using chinese, So the message is not attached. Any suggest will be helpful!

1) Windows 2003 sp2
2) I install the new server and transfer the fsmo to the new server.
3)ID 4521 It means
When DNS server try to load zone from AD . it have an error 9002. DNS server will try to reload this zone in the next time. this may cause by AD load higher, and it maybe the temp situation.

The other message ID means this warning produce too much(or very quickly).

"Anthony [MVP]" <anthony@no-reply.com> дÈëÏûÏ¢ news:eciu4iN6JHA.1416@TK2MSFTNGP04.phx.gbl...

Quote:

1) What OS? 2) How did you change the DC? 3) What is the text (in English) of the error message? Anthony, http://www.airdesk.com "Eviltonight" <eviltonight@hotmail.com> wrote in message news:#PgtsUM6JHA.3860@TK2MSFTNGP05.phx.gbl... I have an AD with DNS integrated. Last week I changed my dc to an new server, but the DNS Server have occurred warning very often. The error ID is almost the same, 4521. Because my system is using chinese, So the message is not attached. Any suggest will be helpful!

Hello St.Liu,

Check this articles:
http://www.eventid.net/display.asp?eventid=4521&eventno=8953&source=DNS&phase=1

http://technet.microsoft.com/en-us/library/cc735851(WS.10).aspx

Do you use AD integrated zones? Are they complete on the new server with
all records in the zones as on the old one? Please post an unedited ipconfig
/all, doesn't matter with the language, hopefully the numbers are readable
for us.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

Quote:

1) Windows 2003 sp2 2) I install the new server and transfer the fsmo to the new server. 3)ID 4521 It means When DNS server try to load zone from AD . it have an error 9002. DNS server will try to reload this zone in the next time. this may cause by AD load higher, and it maybe the temp situation. The other message ID means this warning produce too much(or very quickly). "Anthony [MVP]" <anthony@no-reply.com> ???? news:eciu4iN6JHA.1416@TK2MSFTNGP04.phx.gbl... 1) What OS? 2) How did you change the DC? 3) What is the text (in English) of the error message? Anthony, http://www.airdesk.com "Eviltonight" <eviltonight@hotmail.com> wrote in message news:#PgtsUM6JHA.3860@TK2MSFTNGP05.phx.gbl... I have an AD with DNS integrated. Last week I changed my dc to an new server, but the DNS Server have occurred warning very often. The error ID is almost the same, 4521. Because my system is using chinese, So the message is not attached. Any suggest will be helpful!

St.Liu,
for 3) what is the exact text? Is it referring to the Root zone (".")? If
so, delete it
Hope that helps,
Anthony.
http://www.airdesk.com


"St.Liu" <eviltonight@hotmail.com> wrote in message
news:uVye3rN6JHA.1424@TK2MSFTNGP02.phx.gbl...

Quote:

1) Windows 2003 sp2 2) I install the new server and transfer the fsmo to the new server. 3)ID 4521 It means When DNS server try to load zone from AD . it have an error 9002. DNS server will try to reload this zone in the next time. this may cause by AD load higher, and it maybe the temp situation. The other message ID means this warning produce too much(or very quickly). "Anthony [MVP]" <anthony@no-reply.com> дÈëÏûÏ¢ news:eciu4iN6JHA.1416@TK2MSFTNGP04.phx.gbl... 1) What OS? 2) How did you change the DC? 3) What is the text (in English) of the error message? Anthony, http://www.airdesk.com "Eviltonight" <eviltonight@hotmail.com> wrote in message news:#PgtsUM6JHA.3860@TK2MSFTNGP05.phx.gbl... I have an AD with DNS integrated. Last week I changed my dc to an new server, but the DNS Server have occurred warning very often. The error ID is almost the same, 4521. Because my system is using chinese, So the message is not attached. Any suggest will be helpful!

C:\Documents and Settings\Admin>ipconfig /all

Windows IP Configuration

Host Name . . . . . . . . . . . . : server3
Primary Dns Suffix . . . . . . . : tlgd.com
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : tlgd.com

Ethernet adapter 本地连接 2:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Broadcom BCM5708C NetXtreme II GigE (NDIS
VBD Client) #2
Physical Address. . . . . . . . . : 00-24-E8-4C-57-23
DHCP Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 10.0.0.5
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 10.0.0.1
DNS Servers . . . . . . . . . . . : 10.0.0.5
202.96.64.68



"Meinolf Weber [MVP-DS]" 写入消� news:ff16fb662704b8cbb71adbef1118@msnews.microsoft.com...

Quote:

Hello St.Liu, Check this articles: http://www.eventid.net/display.asp?eventid=4521&eventno=8953&source=DNS&phase=1 http://technet.microsoft.com/en-us/library/cc735851(WS.10).aspx Do you use AD integrated zones? Are they complete on the new server with all records in the zones as on the old one? Please post an unedited ipconfig /all, doesn't matter with the language, hopefully the numbers are readable for us. Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights. ** Please do NOT email, only reply to Newsgroups ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm 1) Windows 2003 sp2 2) I install the new server and transfer the fsmo to the new server. 3)ID 4521 It means When DNS server try to load zone from AD . it have an error 9002. DNS server will try to reload this zone in the next time. this may cause by AD load higher, and it maybe the temp situation. The other message ID means this warning produce too much(or very quickly). "Anthony [MVP]" <anthony@no-reply.com> ???? news:eciu4iN6JHA.1416@TK2MSFTNGP04.phx.gbl... 1) What OS? 2) How did you change the DC? 3) What is the text (in English) of the error message? Anthony, http://www.airdesk.com "Eviltonight" <eviltonight@hotmail.com> wrote in message news:#PgtsUM6JHA.3860@TK2MSFTNGP05.phx.gbl... I have an AD with DNS integrated. Last week I changed my dc to an new server, but the DNS Server have occurred warning very often. The error ID is almost the same, 4521. Because my system is using chinese, So the message is not attached. Any suggest will be helpful!

yes ,it referring to the Root zone ".", but I can't find there have this zone.

"Anthony [MVP]" <anthony@no-reply.com> дÈëÏûÏ¢ news:u2KqRrQ6JHA.1372@TK2MSFTNGP05.phx.gbl...

Quote:

St.Liu, for 3) what is the exact text? Is it referring to the Root zone (".")? If so, delete it Hope that helps, Anthony. http://www.airdesk.com "St.Liu" <eviltonight@hotmail.com> wrote in message news:uVye3rN6JHA.1424@TK2MSFTNGP02.phx.gbl... 1) Windows 2003 sp2 2) I install the new server and transfer the fsmo to the new server. 3)ID 4521 It means When DNS server try to load zone from AD . it have an error 9002. DNS server will try to reload this zone in the next time. this may cause by AD load higher, and it maybe the temp situation. The other message ID means this warning produce too much(or very quickly). "Anthony [MVP]" <anthony@no-reply.com> дÈëÏûÏ¢ news:eciu4iN6JHA.1416@TK2MSFTNGP04.phx.gbl... 1) What OS? 2) How did you change the DC? 3) What is the text (in English) of the error message? Anthony, http://www.airdesk.com "Eviltonight" <eviltonight@hotmail.com> wrote in message news:#PgtsUM6JHA.3860@TK2MSFTNGP05.phx.gbl... I have an AD with DNS integrated. Last week I changed my dc to an new server, but the DNS Server have occurred warning very often. The error ID is almost the same, 4521. Because my system is using chinese, So the message is not attached. Any suggest will be helpful!

yes it's AD integrated zones

"Meinolf Weber [MVP-DS]" 写入消� news:ff16fb662704b8cbb71adbef1118@msnews.microsoft.com...

Quote:

Hello St.Liu, Check this articles: http://www.eventid.net/display.asp?eventid=4521&eventno=8953&source=DNS&phase=1 http://technet.microsoft.com/en-us/library/cc735851(WS.10).aspx Do you use AD integrated zones? Are they complete on the new server with all records in the zones as on the old one? Please post an unedited ipconfig /all, doesn't matter with the language, hopefully the numbers are readable for us. Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights. ** Please do NOT email, only reply to Newsgroups ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm 1) Windows 2003 sp2 2) I install the new server and transfer the fsmo to the new server. 3)ID 4521 It means When DNS server try to load zone from AD . it have an error 9002. DNS server will try to reload this zone in the next time. this may cause by AD load higher, and it maybe the temp situation. The other message ID means this warning produce too much(or very quickly). "Anthony [MVP]" <anthony@no-reply.com> ???? news:eciu4iN6JHA.1416@TK2MSFTNGP04.phx.gbl... 1) What OS? 2) How did you change the DC? 3) What is the text (in English) of the error message? Anthony, http://www.airdesk.com "Eviltonight" <eviltonight@hotmail.com> wrote in message news:#PgtsUM6JHA.3860@TK2MSFTNGP05.phx.gbl... I have an AD with DNS integrated. Last week I changed my dc to an new server, but the DNS Server have occurred warning very often. The error ID is almost the same, 4521. Because my system is using chinese, So the message is not attached. Any suggest will be helpful!

"St.Liu" <eviltonight@hotmail.com> wrote in message
news:%23gJewOW6JHA.1432@TK2MSFTNGP02.phx.gbl...

Quote:

C:\Documents and Settings\Admin>ipconfig /all Windows IP Configuration Host Name . . . . . . . . . . . . : server3 Primary Dns Suffix . . . . . . . : tlgd.com Node Type . . . . . . . . . . . . : Hybrid IP Routing Enabled. . . . . . . . : No WINS Proxy Enabled. . . . . . . . : No DNS Suffix Search List. . . . . . : tlgd.com Ethernet adapter 本地连接 2: Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Broadcom BCM5708C NetXtreme II GigE (NDIS VBD Client) #2 Physical Address. . . . . . . . . : 00-24-E8-4C-57-23 DHCP Enabled. . . . . . . . . . . : No IP Address. . . . . . . . . . . . : 10.0.0.5 Subnet Mask . . . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . . . . : 10.0.0.1 DNS Servers . . . . . . . . . . . : 10.0.0.5 202.96.64.68

Hello St.Liu,

The first thing I see is to remove the ISP's DNS server from your config as
soon as possible. I'm not sure if you are familiar with the way AD works and
how it relies on DNS, but DNS is it's backbone. AD DCs, member servers and
clients all find DCs by querying DNS. If they query an ISP's DNS server, the
ISP has no information about your DCs. I can offer a more elaborate
response, but in summary, you should remove the 202.96.64.68 address.

To offer efficient internet access, you can use that DNS address as a
Forwarder. Read the following article on how to configure a Forwarder:

323380 - HOW TO: Configure DNS for Internet Access in Windows Server 2003
(How to configure a forwarder):
http://support.microsoft.com/d/id?=323380

After doing that, run the following, then restart your machine and post any
event log errors afterwards.

ipconfig /all
net stop netlogon
net start netlogon


--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSA Messaging, MCT
Microsoft Certified Trainer
aceman@mvps.RemoveThisPart.org

For urgent issues, you may want to contact Microsoft PSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

"Efficiency is doing things right; effectiveness is doing the right
things." - Peter F. Drucker
http://twitter.com/acefekay

"St.Liu" <eviltonight@hotmail.com> wrote in message
news:%23gJewOW6JHA.1432@TK2MSFTNGP02.phx.gbl...

Quote:

C:\Documents and Settings\Admin>ipconfig /all Windows IP Configuration

St.Liu,

I forgot to mention, it is imperative to make sure the DHCP Client Service
on all machines is running. This service, despite the name, is actually the
DNS Registration service and the DNS Resolver service on all machines,
whether the machine is a DC, client, with a static IP config or a DHCP
client. It is an important service and without it, resolution and
registration will fail.

Thanks,

Ace

I have delete the ISP's DNS, and configure the forward.
then I restart the netlogon service.
but there still have the warning of ID 4521.

by the way, I have to delete the root zone "."

"Ace Fekay [Microsoft Certified Trainer]" <aceman@mvps.RemoveThisPart.org> дÈëÏûÏ¢ news:u2dAhpW6JHA.3856@TK2MSFTNGP05.phx.gbl...

Quote:

"St.Liu" <eviltonight@hotmail.com> wrote in message news:%23gJewOW6JHA.1432@TK2MSFTNGP02.phx.gbl... C:\Documents and Settings\Admin>ipconfig /all Windows IP Configuration Host Name . . . . . . . . . . . . : server3 Primary Dns Suffix . . . . . . . : tlgd.com Node Type . . . . . . . . . . . . : Hybrid IP Routing Enabled. . . . . . . . : No WINS Proxy Enabled. . . . . . . . : No DNS Suffix Search List. . . . . . : tlgd.com Ethernet adapter 本地连接 2: Connection-specific DNS Suffix . : Description . . . . . . . . . . . : Broadcom BCM5708C NetXtreme II GigE (NDIS VBD Client) #2 Physical Address. . . . . . . . . : 00-24-E8-4C-57-23 DHCP Enabled. . . . . . . . . . . : No IP Address. . . . . . . . . . . . : 10.0.0.5 Subnet Mask . . . . . . . . . . . : 255.255.255.0 Default Gateway . . . . . . . . . : 10.0.0.1 DNS Servers . . . . . . . . . . . : 10.0.0.5 202.96.64.68 Hello St.Liu, The first thing I see is to remove the ISP's DNS server from your config as soon as possible. I'm not sure if you are familiar with the way AD works and how it relies on DNS, but DNS is it's backbone. AD DCs, member servers and clients all find DCs by querying DNS. If they query an ISP's DNS server, the ISP has no information about your DCs. I can offer a more elaborate response, but in summary, you should remove the 202.96.64.68 address. To offer efficient internet access, you can use that DNS address as a Forwarder. Read the following article on how to configure a Forwarder: 323380 - HOW TO: Configure DNS for Internet Access in Windows Server 2003 (How to configure a forwarder): http://support.microsoft.com/d/id?=323380 After doing that, run the following, then restart your machine and post any event log errors afterwards. ipconfig /all net stop netlogon net start netlogon -- Ace This posting is provided "AS-IS" with no warranties or guarantees and confers no rights. Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSA Messaging, MCT Microsoft Certified Trainer aceman@mvps.RemoveThisPart.org For urgent issues, you may want to contact Microsoft PSS directly. Please check http://support.microsoft.com for regional support phone numbers. "Efficiency is doing things right; effectiveness is doing the right things." - Peter F. Drucker http://twitter.com/acefekay

"St.Liu" <eviltonight@hotmail.com> wrote in message
news:ufWmPqX6JHA.3860@TK2MSFTNGP05.phx.gbl...

Quote:

I have delete the ISP's DNS, and configure the forward. then I restart the netlogon service. but there still have the warning of ID 4521. by the way, I have to delete the root zone "."

I thought in your response to Anthony that you said you didn't have a Root
zone? Yes, you must delete the root zone in order to create a Forwarder. A
root zone is not needed in your scenario.

The 4521 indicates either one of three things:
AD zone is corrupt
A root zone exists
The DHCP Client Service is disabled.

Is the DHCP Client service running on the DCs?

Ace

A root zone exists. No, because I can create a forwarder.
The DHCP client service is enabled.

but the "AD zone is corrupt" how to find out?

"Ace Fekay [Microsoft Certified Trainer]" <aceman@mvps.RemoveThisPart.org> дÈëÏûÏ¢ news:OUgZNXY6JHA.2656@TK2MSFTNGP05.phx.gbl...

Quote:

"St.Liu" <eviltonight@hotmail.com> wrote in message news:ufWmPqX6JHA.3860@TK2MSFTNGP05.phx.gbl... I have delete the ISP's DNS, and configure the forward. then I restart the netlogon service. but there still have the warning of ID 4521. by the way, I have to delete the root zone "." I thought in your response to Anthony that you said you didn't have a Root zone? Yes, you must delete the root zone in order to create a Forwarder. A root zone is not needed in your scenario. The 4521 indicates either one of three things: AD zone is corrupt A root zone exists The DHCP Client Service is disabled. Is the DHCP Client service running on the DCs? Ace

"St.Liu" <eviltonight@hotmail.com> wrote in message
news:OKS2IjY6JHA.1432@TK2MSFTNGP02.phx.gbl...

Quote:

A root zone exists. No, because I can create a forwarder. The DHCP client service is enabled. but the "AD zone is corrupt" how to find out?

Read the following, please:
http://eventid.net/display.asp?eventid=4521&eventno=8953&source=DNS&phase=1

There is a mention on how to reinstall an AD Integrated zone. The link they
provide is for eventid.net, but it is a Microsoft KB,294328, which can be
accessed at:
http://support.microsoft.com/kb/294328

For other KB links mentioned in the article, just substitute the number in
the above format.

Ace

There are some knowledgebase articles on how to delete the root zone.
First is to use the DNS mmc if you can.
If not, have a look in Active Directory. Open ADUC, Select View | Advanced
Features. Go to System\MicrosoftDNS. Delete the "." zone in there,
Hope that helps,
Anthony
http://www.airdesk.com


"St.Liu" <eviltonight@hotmail.com> wrote in message
news:eH3ccPW6JHA.4892@TK2MSFTNGP06.phx.gbl...

Quote:

yes ,it referring to the Root zone ".", but I can't find there have this zone. "Anthony [MVP]" <anthony@no-reply.com> дÈëÏûÏ¢ news:u2KqRrQ6JHA.1372@TK2MSFTNGP05.phx.gbl... St.Liu, for 3) what is the exact text? Is it referring to the Root zone (".")? If so, delete it Hope that helps, Anthony. http://www.airdesk.com "St.Liu" <eviltonight@hotmail.com> wrote in message news:uVye3rN6JHA.1424@TK2MSFTNGP02.phx.gbl... 1) Windows 2003 sp2 2) I install the new server and transfer the fsmo to the new server. 3)ID 4521 It means When DNS server try to load zone from AD . it have an error 9002. DNS server will try to reload this zone in the next time. this may cause by AD load higher, and it maybe the temp situation. The other message ID means this warning produce too much(or very quickly). "Anthony [MVP]" <anthony@no-reply.com> дÈëÏûÏ¢ news:eciu4iN6JHA.1416@TK2MSFTNGP04.phx.gbl... 1) What OS? 2) How did you change the DC? 3) What is the text (in English) of the error message? Anthony, http://www.airdesk.com "Eviltonight" <eviltonight@hotmail.com> wrote in message news:#PgtsUM6JHA.3860@TK2MSFTNGP05.phx.gbl... I have an AD with DNS integrated. Last week I changed my dc to an new server, but the DNS Server have occurred warning very often. The error ID is almost the same, 4521. Because my system is using chinese, So the message is not attached. Any suggest will be helpful!