I have a Windows2003SP2 server running as DC and DNS server (AD integrated). I’m getting daily error messages from the Netlogon service that various DNS entries can’t be dynamically updated. I’ve searched Technet and run all the tests that I can find. dcdiag tests fine except for the error messages. The recommendations in the error message don’t seem to change anything. The clients aren’t seeing this as a problem (yet), with the possible exception of some slow browse times (seconds, not minutes). If I run nslookup on the server, I get a “can’t find server name” error. The server is static IP with its own address and that of the other DC in the DNS property (the other DC, which is set up identically, as far as I can tell, is not experiencing any of these problems). nslookup works fine from the clients. The only thing I can see wrong with my DNS zone is that the gc entries for the problem server are missing, although when I look in AD Sites & Services, the server is designated as a gc server.
Any ideas?
