Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have a Windows 2003 domain and just added a new DC that runs 2008 R2. I updated the schema accordingly for both forest and domain levels. I also made sure to run /rodcprep at the time I did this. I have a branch office with a 2008 R2 file/print server that is a read-only domain controller (DC).

The one problem I have been having is with AD-integrated DNS records updates. In the data center, we had to make an IP address change on a particular server. All our other sites' DCs (2003) updated the record fine. The 2008 R2 DC in the data center also updates its record fine. However, the RODC in the branch office does not.

So if I nslookup the target server on a 2003 DC, the IP address is correct. Same with the 2008 R2 DC in the data center. But an nslookup on the branch office RODC still pulls in the old IP address.

Moreover, any new records we've created (e.g., just added a new terminal server) do not get updated on the branch RODC either.

Is there something simple I'm missing? How do I get the RODC to sync its AD-integrated DNS records with the rest of my world?

Thank you in advance for your responses.

Mike

share|improve this question
add comment

2 Answers

RoDC DNS replication isn't a whole lot different than DNS replication for other domain controller computers (see the entry in the table titled "Read-only domain controller support" here for details), though you do need to have at least one Windows Server 2008-based DNS server hosting a writable copy of the zone (see the "Note" in the section titled "DNS updates for clients that are located in an RODC site" in this document for details). It sounds like you've got a writable Windows Server 2008 DNS server (the one in the data center), though, so that shouldn't be your issue. That W2K8 DNS server computer in the data center does have an "NS" record published in the DNS, doesn't it?

Are you sure you're getting replication to the RoDC machine? I'm getting the feeling that it's not receiving replication at all. A quick check w/ REPLMON (from the Windwos Support Tools) or your favorite replication monitor would let you know the last time the directory partitions it hosts were updated.

share|improve this answer
    
Yeah, I run dcdiag /test:Replications on the remote branch RODC and it shows last replication being over a month ago (when I first deployed it). That's odd - I wonder how I got it going in the first place and wonder what I missed putting in to keep it replicating... –  Mike M Dec 3 '09 at 15:00
    
Hmm... a good guess, then. The "Directory Service" event logs on the RoDC should be complaining about lack of replication and should give you some idea of what's going on. There can be a variety of causes for the replication failure, but nothing too hard to sort out. Once you get that taken care of I think you'll find that things work as you expect them to. –  Evan Anderson Dec 3 '09 at 16:25
    
Ha! Missing site link... –  Mike M Dec 4 '09 at 14:17
add comment

Yeah, after some careful reviewing of the event logs (and running dcdiag again), I recognized that we were missing a site link between the two locations in Active Direcory Sites & Services. Once that was recreated, it looks like replication is happening freely.

Damn, AD can be as simple as it is difficult sometimes.

Thanks again for your help.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.