This problem has been ongoing and evolving. I will try to include as much information as I can. Running SBS 2008 (Reporting itself as Windows Server Standard FE, Service Pack 2) with about 65 computers.
I have been slowly addressing many errors that had accumulated over time with this machine. I had been leaving DNS issues until last because A) it had been working, and B) DNS isn't one of my strong points.
At some point, one of my coworkers recreated the _msdcs entry under mydomain.local in the Forward lookup Zone. Around that time we started getting Event ID 4010 "Unable to create resource record" for multiple entries (including _kerberos._tcpip.dc._msdcs.mydomain.local, basically all the entries under _msdcs.mydomain.local.) and Event 5781, NETLOGON
---
Dynamic registration or deletion of one or more DNS records associated with DNS domain 'mydomain.local.' failed. These records are used by other computers to locate this server as a domain controller (if the specified domain is an Active Directory domain) or as an LDAP server (if the specified domain is an application partition).
Possible causes of failure include:
- TCP/IP properties of the network connections of this computer contain wrong IP address(es) of the preferred and alternate DNS servers
- Specified preferred and alternate DNS servers are not running
- DNS server(s) primary for the records to be registered is not running
- Preferred or alternate DNS servers are configured with wrong root hints
- Parent DNS zone contains incorrect delegation to the child zone authoritative for the DNS records that failed registration
USER ACTION
Fix possible misconfiguration(s) specified above and initiate registration or deletion of the DNS records by running 'nltest.exe /dsregdns' from the command prompt on the domain controller or by restarting Net Logon service on the domain controller.
---
I have checked all of the things it suggests I check.
Upon investigating, _msdcs.mydomain.local was missing entirely. I manually recreated it, and restarted NETLOGON. This seems to have recreated all the missing entries below _msdcs.mydomain.local, but I am still getting these two errors in event viewer.
I believe that related to the above is my recent inability to connect machines to this domain. When I try, I get the following message.
"The following error occured attempting to join the domain 'mydomain.local'. The RPC Protocol sequence is not supported"
This happens if I use Connect Computer, or attempt to do it manually.
I have seen some references that suggest reinstalling the DNS role will help, which I am willing to do if it will fix things, but I'd love to hear someone elses experiences with trying this before I attempt it myself.
I am including an ipconfig /all output as this seems to be a standard thing to ask for.
---
Windows IP Configuration
Host Name . . . . . . . . . . . . : SERVERSBS08
Primary Dns Suffix . . . . . . . : mydomain.local
Node Type . . . . . . . . . . . . : Broadcast
IP Routing Enabled. . . . . . . . : Yes
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : mydomain.local
Ethernet adapter Local Area Connection:
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Broadcom BCM5709C NetXtreme II GigE (NDIS VBD Client)
Physical Address. . . . . . . . . : 00-24-E8-79-BD-1D
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Link-local IPv6 Address . . . . . : fe80::2a8f:29ac:e1fa:588f%10(Preferred)
Link-local IPv6 Address . . . . . : fe80::9cd7:67c9:9aee:6bb8%10(Preferred)
IPv4 Address. . . . . . . . . . . : 10.18.87.5(Preferred)
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 10.18.87.1
DHCPv6 IAID . . . . . . . . . . . : 218113256
DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-12-47-03-50-00-24-E8-79-BD-1D
DNS Servers . . . . . . . . . . . : fe80::2a8f:29ac:e1fa:588f%10
10.18.87.5
NetBIOS over Tcpip. . . . . . . . : Enabled
Ethernet adapter Local Area Connection 2:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Broadcom BCM5709C NetXtreme II GigE (NDIS VBD Client) #2
Physical Address. . . . . . . . . : 00-24-E8-79-BD-1F
DHCP Enabled. . . . . . . . . . . : Yes
Autoconfiguration Enabled . . . . : Yes
Tunnel adapter Local Area Connection* 8:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : isatap.{4D94AF07-C7C2-44FA-A53A-D262635B1B8E}
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
Tunnel adapter Local Area Connection* 9:
Media State . . . . . . . . . . . : Media disconnected
Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : isatap.{674D7FCF-B328-415A-99D9-AC9CAFD76C06}
Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
DHCP Enabled. . . . . . . . . . . : No
Autoconfiguration Enabled . . . . : Yes
---
domain name changed, everything else is unedited.