Forum Discussion
BenTheITGuy
Feb 09, 2025Copper Contributor
BPA Errors: DNS can't resolve GC, Kerberos, PDC Resource Record, etc.
Hello,
I've been poking around this for hours now and could use another set of eyes.
This server has been the PDC for quite some time but I discovered the last people that managed this place, didn't demote the old 2008R2 server (thankfully it still existed virtualized).
So I was able to do a graceful demotion of that and removed it from the domain. I'm now trying to resolve some other errors in that come up in the BPA scan... All reference DNS and I just can't figure this out. I've been beating head against the wall trying to understand what's happening,
This is MS Server Standard 2022 only 1 DC and DNS. (yeah I know, don't get me started, but it's a really small office)...
Would love some suggestions.
Thanks!
- L_Youtell_974Iron Contributor
Did you check if sysvol, netlogon exist on the active directory ? I suppose you have the right DNS IP on your card network ? Did you check the DNS in the DNS manager ?
- BenTheITGuyCopper Contributor
Not sure what you're meaning by the sysvol and netlogon exist on the Active Directory...
Yep I've switch between the loopback address or the actual IP of the server on the network card itself... The IP seems to work better.
In DNS manager I have
- DC1
- _mcdcs.mydomain
- mydomain
- the _msdcs folder/delegation was missing here, but I was able to recreate it
- L_Youtell_974Iron Contributor
When you delete a DC you have to be sure in the DNS manager you clean everything and you have the right IP DNS.
In the DNS manager, on the node of your domain, you do right clic and you selected Properties and you check the Name Servers. You do the same thing with the reverse search.What you can do to check your DNS is to execute the commande line below on your DC.
DCDIAG /TEST:DNS /V /E
- DC1