DC1 & DC2 are Domain Controllers and DNS Servers. I haven't restored or changed anything recently. I restarted DC1 this morning.
DC1:
DC1 is giving Event ID 4010 and saying it can't create a resource record for xxxxxxx-xxxx-xxxx-xxxxxxxxxxxx in _msdcs.domain.com. When I check DNS the folder for _msdcs.domain.com it's grey and has no content other than a (same as parent folder) record.
repadmin /showrepl says replication is working - Last attempt at <time after the Event 4010> was successful.
DC2:
DC2 shows a full set of content for the same folder, with dc, domains, gc and pdc folders. It is not presenting the Event 4010 messages.
repadmin /showrepl says replication is working - Last attempt at <time after the Event 4010> was successful.
Question:
I've been reading posts about similar issues but I haven't managed to completely convinvce myself of the correct response on my part. I suspect that
repadmin /replicate dc1 dc2 dc=_msdcs,DC=domain,DC=com
will replicate the _msdcs zone from the server with the full set to the one with the problem.
Another option seems to be to delete both folders and restart the Netlogon service on both machines.
Suggestions gratefully received.
Thanks.
Everything we hear is an opinion, not a fact. Everything we see is a perspective, not the truth.