I have a Windows DC that is "freezing" every day and has to be rebooted (VM) in order to even login. Going through the System logs I see several errors with the following;
The dynamic registration of the DNS record '_ldap._tcp.dc._msdcs.usd385.org.
600 IN SRV 0 100 389 AD1.usd385.org.' failed on the following DNS server:
DNS server IP address: 199.191.128.106
Returned Response Code (RCODE): 5
Returned Status Code: 9017
For computers and users to locate this domain controller, this record must be
registered in DNS.
USER ACTION
Determine what might have caused this failure, resolve the problem, and
initiate registration of the DNS records by the domain controller. To
determine what might have caused this failure, run DCDiag.exe. To learn more
about DCDiag.exe, see Help and Support Center. To initiate registration of
the DNS records by this domain controller, run 'nltest.exe /dsregdns' from
the command prompt on the domain controller or restart Net Logon service.
Or, you can manually add this record to DNS, but it is not recommended.
ADDITIONAL DATA
Error Value: DNS bad key.
The IP address 199.191.128.106 resolves to dbru.br.ns.els-gms.att.net which is obviously outside our local network and belongs to our ISP. Can anyone provide some tips on how to exclude this IP address from being registered by DNS? I'm not sure that this is causing the "freezing" issue, but it seems like a good place to start.
Thanks in advance for the help.