Quantcast
Channel: Network Infrastructure Servers forum
Viewing all articles
Browse latest Browse all 5877

DNSCMD is partially blocked after upgrading to Windows Server 2008 R2 domain controllers - Why?

$
0
0

Having some trouble with DNSCMD.EXE utility that is provided with Windows Server 2008 R2. With some options get an expected result. Other DNSCMD options print a line feed in the command window but no error and no expected results.

I suspect the problem has something to do with the fact that others in our company recently upgraded some domain controllers to Windows Server 2008 R2.

I can run commands locally on one of our Windows Server 2008 R2 domain controllers (Active Directory is at the 2003 level). The problem is when I attempt to run DNSCMD on a client (the source computer).

Examples that work:

   dnscmd.exe server1.my.com /enumzones

   dnscmd.exe server1.my.com /statistics

Examples that do not work:

   dnscmd.exe server1.my.com /info

   dnscmd.exe server1.my.com /zoneinfo

   dnscmd.exe server1.my.com /zoneexport

I am a domain administrator and both the source (Windows 7 Enterprise) and target (Windows Server 2008 R2 domain controller running DNS service) are in a single domain. I can run the Administrative Tool "DNS Manager" GUI remotely, no errors.

The following output from DNSCMD when run locally on a domain controller may offer some insight into the problem:

C:\>dnscmd /info
Query result:
Server info
        server name              = server1.my.com
        version                  = 1DB10106 (6.1 build 7601)
        DS container             = cn=MicrosoftDNS,cn=System,DC=my,DC=com
        forest name              = my.com
        domain name              = my.com
        builtin forest partition = ForestDnsZones.my.com
        builtin domain partition = DomainDnsZones.my.com
        read only DC             = 0
        last scavenge cycle      = not since restart (0)
  Configuration:
        dwLogLevel               = 00000000
        dwDebugLevel             = 00000000
        dwRpcProtocol            = 00000005
        dwNameCheckFlag          = 00000002
        cAddressAnswerLimit      = 0
        dwRecursionRetry         = 3
        dwRecursionTimeout       = 8
        dwDsPollingInterval      = 180
  Configuration Flags:
        fBootMethod                  = 3
        fAdminConfigured             = 1
        fAllowUpdate                 = 1
        fDsAvailable                 = 1
        fAutoReverseZones            = 1
        fAutoCacheUpdate             = 0
        fSlave                       = 0
        fNoRecursion                 = 0
        fRoundRobin                  = 1
        fStrictFileParsing           = 0
        fLooseWildcarding            = 0
        fBindSecondaries             = 0
        fWriteAuthorityNs            = 0
        fLocalNetPriority            = 1
  Aging Configuration:
        ScavengingInterval           = 0
        DefaultAgingState            = 0
        DefaultRefreshInterval       = 168
        DefaultNoRefreshInterval     = 168
  ServerAddresses:
        Ptr          = 00000000002FC510
        MaxCount     = 1
        AddrCount    = 1
                Addr[0] => af=2, salen=16, [sub=0, flag=00000000] p=13568, addr=aaa.bbb.254.54
  ListenAddresses:
        NULL IP Array.
  Forwarders:
        Ptr          = 0000000000308E10
        MaxCount     = 5
        AddrCount    = 5
                Addr[0] => af=2, salen=16, [sub=0, flag=00000000] p=13568, addr=xxx.xxx.14.18
                Addr[1] => af=2, salen=16, [sub=0, flag=00000000] p=13568, addr=yyy.yyy.108.100
                Addr[2] => af=2, salen=16, [sub=0, flag=00000000] p=13568, addr=zzz.zzz.163.100
                Addr[3] => af=2, salen=16, [sub=0, flag=00000000] p=13568, addr=vvv.vvv.1.10
                Addr[4] => af=2, salen=16, [sub=0, flag=00000000] p=13568, addr=uuu.uuu.1.19
        forward timeout  = 3
        slave            = 0
Command completed successfully.

C:\>dnscmd /info /rpcauthlevel
Query result:
Dword:  5 (00000005)
Command completed successfully.

C:\>dnscmd /info /rpcprotocol
Query result:
Dword:  5 (00000005)
Command completed successfully.

C:\>dnscmd /info /enableglobalqueryblocklist
Query result:
Dword:  1 (00000001)
Command completed successfully.
Why won't DNSCMD work from a target computer in our domain? Help please?



P.S. My original question "How to consistently get output from DNSCMD.EXE tool?" (http://social.technet.microsoft.com/Forums/en-US/winserverNIS/thread/a1889413-41d1-45c3-9b28-d8ae8c4cffde) is marked asanswered by the moderator, but the question is not answered! So I am starting this new thread.


Viewing all articles
Browse latest Browse all 5877

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>