Quantcast
Channel: Directory Services forum
Viewing all articles
Browse latest Browse all 31638

Cannot determine cause of Event ID 7062

$
0
0

I've been having a problem for quite some time with multiple Event 7062 errors and cannot determine what I've done to cause the problem.  I've searched through the forums but I'm obviously missing something.  I'm stuck and could really use some help.

My setup is pretty simple: 1 domain, 2 domain controllers running Windows Server 2008 R2 Enterprise

Error Details:
Log Name:      DNS Server
Source:        Microsoft-Windows-DNS-Server-Service
Date:          4/30/2013 7:31:35 AM
Event ID:      7062
Task Category: None
Level:         Warning
Keywords:      Classic
User:          N/A
Computer:      asdstldc1.asdsoftware.com
Description:
The DNS server encountered a packet addressed to itself on IP address 192.168.0.34. The packet is for the DNS name "asdsoftware.com.". The packet will be discarded. This condition usually indicates a configuration error.
 
Check the following areas for possible self-send configuration errors:
  1) Forwarders list. (DNS servers should not forward to themselves).
  2) Master lists of secondary zones.
  3) Notify lists of primary zones.
  4) Delegations of subzones.  Must not contain NS record for this DNS server unless subzone is also on this server.
  5) Root hints.
 
Example of self-delegation:
  -> This DNS server dns1.example.microsoft.com is the primary for the zone example.microsoft.com.
  -> The example.microsoft.com zone contains a delegation of bar.example.microsoft.com to dns1.example.microsoft.com,
  (bar.example.microsoft.com NS dns1.example.microsoft.com)
  -> BUT the bar.example.microsoft.com zone is NOT on this server.
 
Note, you should make this delegation check (with nslookup or DNS manager) both on this DNS server and on the server(s) you delegated the subzone to. It is possible that the delegation was done correctly, but that the primary DNS for the subzone, has any incorrect NS record pointing back at this server. If this incorrect NS record is cached at this server, then the self-send could result.  If found, the subzone DNS server admin should remove the offending NS record.
 
You can use the DNS server debug logging facility to track down the cause of this problem.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-DNS-Server-Service" Guid="{71A551F5-C893-4849-886B-B5EC8502641E}" EventSourceName="DNS" />
    <EventID Qualifiers="32768">7062</EventID>
    <Version>0</Version>
    <Level>3</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2013-04-30T12:31:35.000000000Z" />
    <EventRecordID>2824</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>DNS Server</Channel>
    <Computer>asdstldc1.asdsoftware.com</Computer>
    <Security />
  </System>
  <EventData Name="DNS_EVENT_SELF_SEND">
    <Data Name="param1">192.168.0.34</Data>
    <Data Name="param2">asdsoftware.com.</Data>
    <Binary>50250000</Binary>
  </EventData>
</Event>

IP Config Information:
C:\Users\asd_admin>ipconfig /allcompartments /all

Windows IP Configuration


==============================================================================
Network Information for Compartment 1 (ACTIVE)
==============================================================================
   Host Name . . . . . . . . . . . . : asdstldc1
   Primary Dns Suffix  . . . . . . . : asdsoftware.com
   Node Type . . . . . . . . . . . . : Hybrid
   IP Routing Enabled. . . . . . . . : No
   WINS Proxy Enabled. . . . . . . . : No
   DNS Suffix Search List. . . . . . : asdsoftware.com

Ethernet adapter Local Area Connection 4:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Broadcom BCM5708C NetXtreme II GigE (NDIS VBD Client) #86
   Physical Address. . . . . . . . . : 00-19-B9-ED-6D-76
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes
   Link-local IPv6 Address . . . . . : fe80::fd52:e3bb:47b2:221f%16(Preferred)
   IPv4 Address. . . . . . . . . . . : 192.168.0.34(Preferred)
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 192.168.0.238
   DHCPv6 IAID . . . . . . . . . . . : 369105337
   DHCPv6 Client DUID. . . . . . . . : 00-01-00-01-15-C4-03-7A-00-19-B9-ED-6D-74
   DNS Servers . . . . . . . . . . . : ::1
                                       192.168.0.34
                                       192.168.0.37
   NetBIOS over Tcpip. . . . . . . . : Enabled

Tunnel adapter Local Area Connection* 12:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes

Tunnel adapter isatap.{76AA76EB-8820-41E1-B1E1-9CFBA0A3290F}:

   Media State . . . . . . . . . . . : Media disconnected
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Microsoft ISATAP Adapter #2
   Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
   DHCP Enabled. . . . . . . . . . . : No
   Autoconfiguration Enabled . . . . : Yes

DCDIAG Results:

Directory Server Diagnosis


Performing initial setup:

   Trying to find home server...

   * Verifying that the local machine asdstldc1, is a Directory Server.
   Home Server = asdstldc1

   * Connecting to directory service on server asdstldc1.

   * Identified AD Forest.
   Collecting AD specific global data
   * Collecting site info.

   Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=asdsoftware,DC=com,LDAP_SCOPE_SUBTREE,(objectCategory=ntDSSiteSettings),.......
   The previous call succeeded
   Iterating through the sites
   Looking at base site object: CN=NTDS Site Settings,CN=ASDSTL,CN=Sites,CN=Configuration,DC=asdsoftware,DC=com
   Getting ISTG and options for the site
   * Identifying all servers.

   Calling ldap_search_init_page(hld,CN=Sites,CN=Configuration,DC=asdsoftware,DC=com,LDAP_SCOPE_SUBTREE,(objectClass=ntDSDsa),.......
   The previous call succeeded....
   The previous call succeeded
   Iterating through the list of servers
   Getting information for the server CN=NTDS Settings,CN=ASDSTLDC1,CN=Servers,CN=ASDSTL,CN=Sites,CN=Configuration,DC=asdsoftware,DC=com
   objectGuid obtained
   InvocationID obtained
   dnsHostname obtained
   site info obtained
   All the info for the server collected
   Getting information for the server CN=NTDS Settings,CN=ASDSTLDC3,CN=Servers,CN=ASDSTL,CN=Sites,CN=Configuration,DC=asdsoftware,DC=com
   objectGuid obtained
   InvocationID obtained
   dnsHostname obtained
   site info obtained
   All the info for the server collected
   * Identifying all NC cross-refs.

   * Found 2 DC(s). Testing 1 of them.

   Done gathering initial info.


Doing initial required tests

  
   Testing server: ASDSTL\ASDSTLDC1

      Starting test: Connectivity

         * Active Directory LDAP Services Check
         Determining IP4 connectivity
         * Active Directory RPC Services Check
         ......................... ASDSTLDC1 passed test Connectivity

 

Doing primary tests

  
   Testing server: ASDSTL\ASDSTLDC1

      Starting test: Advertising

         The DC ASDSTLDC1 is advertising itself as a DC and having a DS.
         The DC ASDSTLDC1 is advertising as an LDAP server
         The DC ASDSTLDC1 is advertising as having a writeable directory
         The DC ASDSTLDC1 is advertising as a Key Distribution Center
         The DC ASDSTLDC1 is advertising as a time server
         The DS ASDSTLDC1 is advertising as a GC.
         ......................... ASDSTLDC1 passed test Advertising

      Test omitted by user request: CheckSecurityError

      Test omitted by user request: CutoffServers

      Starting test: FrsEvent

         * The File Replication Service Event log test
         ......................... ASDSTLDC1 passed test FrsEvent

      Starting test: DFSREvent

         The DFS Replication Event Log.
         Skip the test because the server is running FRS.

         ......................... ASDSTLDC1 passed test DFSREvent

      Starting test: SysVolCheck

         * The File Replication Service SYSVOL ready test
         File Replication Service's SYSVOL is ready
         ......................... ASDSTLDC1 passed test SysVolCheck

      Starting test: KccEvent

         * The KCC Event log test
         Found no KCC errors in "Directory Service" Event log in the last 15 minutes.
         ......................... ASDSTLDC1 passed test KccEvent

      Starting test: KnowsOfRoleHolders

         Role Schema Owner = CN=NTDS Settings,CN=ASDSTLDC3,CN=Servers,CN=ASDSTL,CN=Sites,CN=Configuration,DC=asdsoftware,DC=com
         Role Domain Owner = CN=NTDS Settings,CN=ASDSTLDC3,CN=Servers,CN=ASDSTL,CN=Sites,CN=Configuration,DC=asdsoftware,DC=com
         Role PDC Owner = CN=NTDS Settings,CN=ASDSTLDC3,CN=Servers,CN=ASDSTL,CN=Sites,CN=Configuration,DC=asdsoftware,DC=com
         Role Rid Owner = CN=NTDS Settings,CN=ASDSTLDC3,CN=Servers,CN=ASDSTL,CN=Sites,CN=Configuration,DC=asdsoftware,DC=com
         Role Infrastructure Update Owner = CN=NTDS Settings,CN=ASDSTLDC3,CN=Servers,CN=ASDSTL,CN=Sites,CN=Configuration,DC=asdsoftware,DC=com
         ......................... ASDSTLDC1 passed test KnowsOfRoleHolders

      Starting test: MachineAccount

         Checking machine account for DC ASDSTLDC1 on DC ASDSTLDC1.
         * SPN found :LDAP/asdstldc1.asdsoftware.com/asdsoftware.com
         * SPN found :LDAP/asdstldc1.asdsoftware.com
         * SPN found :LDAP/ASDSTLDC1
         * SPN found :LDAP/asdstldc1.asdsoftware.com/ASD_NT
         * SPN found :LDAP/2cb07e4d-a57b-479b-8183-f4d9b2ca44a0._msdcs.asdsoftware.com
         * SPN found :E3514235-4B06-11D1-AB04-00C04FC2DCD2/2cb07e4d-a57b-479b-8183-f4d9b2ca44a0/asdsoftware.com
         * SPN found :HOST/asdstldc1.asdsoftware.com/asdsoftware.com
         * SPN found :HOST/asdstldc1.asdsoftware.com
         * SPN found :HOST/ASDSTLDC1
         * SPN found :HOST/asdstldc1.asdsoftware.com/ASD_NT
         * SPN found :GC/asdstldc1.asdsoftware.com/asdsoftware.com
         ......................... ASDSTLDC1 passed test MachineAccount

      Starting test: NCSecDesc

         * Security Permissions check for all NC's on DC ASDSTLDC1.
         * Security Permissions Check for

           DC=DomainDnsZones,DC=asdsoftware,DC=com
            (NDNC,Version 3)
         * Security Permissions Check for

           DC=ForestDnsZones,DC=asdsoftware,DC=com
            (NDNC,Version 3)
         * Security Permissions Check for

           CN=Schema,CN=Configuration,DC=asdsoftware,DC=com
            (Schema,Version 3)
         * Security Permissions Check for

           CN=Configuration,DC=asdsoftware,DC=com
            (Configuration,Version 3)
         * Security Permissions Check for

           DC=asdsoftware,DC=com
            (Domain,Version 3)
         ......................... ASDSTLDC1 passed test NCSecDesc

      Starting test: NetLogons

         * Network Logons Privileges Check
         Verified share \\ASDSTLDC1\netlogon
         Verified share \\ASDSTLDC1\sysvol
         ......................... ASDSTLDC1 passed test NetLogons

      Starting test: ObjectsReplicated

         ASDSTLDC1 is in domain DC=asdsoftware,DC=com
         Checking for CN=ASDSTLDC1,OU=Domain Controllers,DC=asdsoftware,DC=com in domain DC=asdsoftware,DC=com on 1 servers
            Object is up-to-date on all servers.
         Checking for CN=NTDS Settings,CN=ASDSTLDC1,CN=Servers,CN=ASDSTL,CN=Sites,CN=Configuration,DC=asdsoftware,DC=com in domain CN=Configuration,DC=asdsoftware,DC=com on 1 servers
            Object is up-to-date on all servers.
         ......................... ASDSTLDC1 passed test ObjectsReplicated

      Test omitted by user request: OutboundSecureChannels

      Starting test: Replications

         * Replications Check
         * Replication Latency Check
            DC=DomainDnsZones,DC=asdsoftware,DC=com
               Latency information for 7 entries in the vector were ignored.
                  7 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC). 
            DC=ForestDnsZones,DC=asdsoftware,DC=com
               Latency information for 7 entries in the vector were ignored.
                  7 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC). 
            CN=Schema,CN=Configuration,DC=asdsoftware,DC=com
               Latency information for 10 entries in the vector were ignored.
                  10 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC). 
            CN=Configuration,DC=asdsoftware,DC=com
               Latency information for 10 entries in the vector were ignored.
                  10 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC). 
            DC=asdsoftware,DC=com
               Latency information for 10 entries in the vector were ignored.
                  10 were retired Invocations.  0 were either: read-only replicas and are not verifiably latent, or dc's no longer replicating this nc.  0 had no latency information (Win2K DC). 
         ......................... ASDSTLDC1 passed test Replications

      Starting test: RidManager

         * Available RID Pool for the Domain is 8109 to 1073741823
         * ASDSTLDC3.asdsoftware.com is the RID Master
         * DsBind with RID Master was successful
         * rIDAllocationPool is 4609 to 5108
         * rIDPreviousAllocationPool is 4609 to 5108
         * rIDNextRID: 4673
         ......................... ASDSTLDC1 passed test RidManager

      Starting test: Services

         * Checking Service: EventSystem
         * Checking Service: RpcSs
         * Checking Service: NTDS
         * Checking Service: DnsCache
         * Checking Service: DFSR
         * Checking Service: IsmServ
         * Checking Service: kdc
         * Checking Service: SamSs
         * Checking Service: LanmanServer
         * Checking Service: LanmanWorkstation
         * Checking Service: w32time
            Invalid service type: w32time on ASDSTLDC1, current value

            WIN32_OWN_PROCESS, expected value WIN32_SHARE_PROCESS

         * Checking Service: NETLOGON
         ......................... ASDSTLDC1 failed test Services

      Starting test: SystemLog

         * The System Event log test
         Found no errors in "System" Event log in the last 60 minutes.
         ......................... ASDSTLDC1 passed test SystemLog

      Test omitted by user request: Topology

      Test omitted by user request: VerifyEnterpriseReferences

      Starting test: VerifyReferences

         The system object reference (serverReference)

         CN=ASDSTLDC1,OU=Domain Controllers,DC=asdsoftware,DC=com and backlink

         on

         CN=ASDSTLDC1,CN=Servers,CN=ASDSTL,CN=Sites,CN=Configuration,DC=asdsoftware,DC=com

         are correct.
         The system object reference (serverReferenceBL)

         CN=WIN-8M339CI5M1I,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=asdsoftware,DC=com

         and backlink on

         CN=NTDS Settings,CN=ASDSTLDC1,CN=Servers,CN=ASDSTL,CN=Sites,CN=Configuration,DC=asdsoftware,DC=com

         are correct.
         The system object reference (frsComputerReferenceBL)

         CN=WIN-8M339CI5M1I,CN=Domain System Volume (SYSVOL share),CN=File Replication Service,CN=System,DC=asdsoftware,DC=com

         and backlink on

         CN=ASDSTLDC1,OU=Domain Controllers,DC=asdsoftware,DC=com are correct.
         ......................... ASDSTLDC1 passed test VerifyReferences

      Test omitted by user request: VerifyReplicas

  
      Test omitted by user request: DNS

      Test omitted by user request: DNS

  
   Running partition tests on : DomainDnsZones

      Starting test: CheckSDRefDom

         ......................... DomainDnsZones passed test CheckSDRefDom

      Starting test: CrossRefValidation

         ......................... DomainDnsZones passed test

         CrossRefValidation

  
   Running partition tests on : ForestDnsZones

      Starting test: CheckSDRefDom

         ......................... ForestDnsZones passed test CheckSDRefDom

      Starting test: CrossRefValidation

         ......................... ForestDnsZones passed test

         CrossRefValidation

  
   Running partition tests on : Schema

      Starting test: CheckSDRefDom

         ......................... Schema passed test CheckSDRefDom

      Starting test: CrossRefValidation

         ......................... Schema passed test CrossRefValidation

  
   Running partition tests on : Configuration

      Starting test: CheckSDRefDom

         ......................... Configuration passed test CheckSDRefDom

      Starting test: CrossRefValidation

         ......................... Configuration passed test CrossRefValidation

  
   Running partition tests on : asdsoftware

      Starting test: CheckSDRefDom

         ......................... asdsoftware passed test CheckSDRefDom

      Starting test: CrossRefValidation

         ......................... asdsoftware passed test CrossRefValidation

  
   Running enterprise tests on : asdsoftware.com

      Test omitted by user request: DNS

      Test omitted by user request: DNS

      Starting test: LocatorCheck

         GC Name: \\asdstldc1.asdsoftware.com

         Locator Flags: 0xe00033fc
         PDC Name: \\ASDSTLDC3.asdsoftware.com
         Locator Flags: 0xe00031f9
         Time Server Name: \\asdstldc1.asdsoftware.com
         Locator Flags: 0xe00033fc
         Preferred Time Server Name: \\asdstldc1.asdsoftware.com
         Locator Flags: 0xe00033fc
         KDC Name: \\asdstldc1.asdsoftware.com
         Locator Flags: 0xe00033fc
         ......................... asdsoftware.com passed test LocatorCheck

      Starting test: Intersite

         Skipping site ASDSTL, this site is outside the scope provided by the

         command line arguments provided.
         ......................... asdsoftware.com passed test Intersite

 

Please let me know if there are any additional details/tests that I can provide. I greatly appreciate your time,

John


Viewing all articles
Browse latest Browse all 31638

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>