DNSAPI Error and corrupt DNS records

We are seeing a LOT of the following types of errors:

Event Type: Warning
Event Source: DnsApi
Event Category: None
Event ID: 11166
Date: 7/13/2006
Time: 7:08:07 PM
User: N/A
Computer: VHADENSCANNER2
Description:
The system failed to register host (A) resource records (RRs) for network
adapter
with settings:

Adapter Name : {ADF57614-E5FC-4BE1-8A8F-BD4C37CE90AD}
Host Name : vhadenscanner2
Primary Domain Suffix : v19.med.va.gov
DNS server list :
10.153.3.50, 10.153.4.50
Sent update to server : 10.153.3.50
IP Address(es) :
10.153.6.44

The cause seems to be something causing the server's security entry on the
DNS record (ServerName$) to be corrupt or unresolved (instead of the name,
you see a GUID string). This is not just happening with servers, but, with
workstations, too.

While we can individually correct this by deleting the DNS record, then
running ipconfig /registerdns, we need to be able to do a search for records
with this problem, then fix them all remotely.

Also, of course, we'd like to find out what's causing this. What we THINK
might be happening is that we are going through a migration from 2K to XP,
and, in many cases the computer is being upgraded in place, ending up with
the same name, but, different OS. The procedure is to pull off the profiles
and other identity information, remove the computer from the Domain, upgrade
the OS (using Ghost, or, for older computers, replacing the hard drive with a
new, larger one, with a Ghost image), then placing the computer back on the
Domain. We're thinking this is somehow not being reflected properly in DNS,
so, since the "old" computer is gone, you see the GUID, rather than
ServerName$ in the DNS Security settings.

Any ideas?

Thanks!

In news:BA783BBB-6644-4B96-BEA2-(E-Mail Removed),
Bill Bradley <(E-Mail Removed)> stated, which I
commented on below:
> We are seeing a LOT of the following types of errors:
>
> Event Type: Warning
> Event Source: DnsApi
> Event Category: None
> Event ID: 11166
> Date: 7/13/2006
> Time: 7:08:07 PM
> User: N/A
> Computer: VHADENSCANNER2
> Description:
> The system failed to register host (A) resource records (RRs) for
> network adapter
> with settings:
>
> Adapter Name : {ADF57614-E5FC-4BE1-8A8F-BD4C37CE90AD}
> Host Name : vhadenscanner2
> Primary Domain Suffix : v19.med.va.gov
> DNS server list :
> 10.153.3.50, 10.153.4.50
> Sent update to server : 10.153.3.50
> IP Address(es) :
> 10.153.6.44
>
> The cause seems to be something causing the server's security entry
> on the DNS record (ServerName$) to be corrupt or unresolved (instead
> of the name, you see a GUID string). This is not just happening with
> servers, but, with workstations, too.
>
> While we can individually correct this by deleting the DNS record,
> then running ipconfig /registerdns, we need to be able to do a search
> for records with this problem, then fix them all remotely.
>
> Also, of course, we'd like to find out what's causing this. What we
> THINK might be happening is that we are going through a migration
> from 2K to XP, and, in many cases the computer is being upgraded in
> place, ending up with the same name, but, different OS. The
> procedure is to pull off the profiles and other identity information,
> remove the computer from the Domain, upgrade the OS (using Ghost, or,
> for older computers, replacing the hard drive with a new, larger one,
> with a Ghost image), then placing the computer back on the Domain.
> We're thinking this is somehow not being reflected properly in DNS,
> so, since the "old" computer is gone, you see the GUID, rather than
> ServerName$ in the DNS Security settings.
>
> Any ideas?
>
> Thanks!

Info on it:
http://www.eventid.net/display.asp?e...DnsApi&phase=1

Are these machines DHCP based or static? If DHCP, and the DHCP server is on
a DC, we can assign DHCP ownership of the record as well as set scavenging
of old records.

Here's more info on it. It's a suggestion, and may work. I usually configure
this anyway on a DHCP server that is a DC.

317590 - HOW TO Configure DNS Dynamic Update in Windows 2000 and
DNSUpdateProxy Group:
http://support.microsoft.com/?id=317590

816592 - How to configure DNS dynamic updates in Windows Server 2003:
http://support.microsoft.com/kb/816592/

Follow up discussion on the DNSUpdateProxy-Group:
http://msmvps.com/ulfbsimonweidner/a.../26/39841.aspx

--
Ace
Innovative IT Concepts, Inc
Willow Grove, PA

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
Microsoft MVP - Directory Services
Microsoft Certified Trainer

Having difficulty reading or finding responses to your post?
Instead of the website you're using, I suggest to use OEx (Outlook Express
or any other newsreader), and configure a news account, pointing to
news.microsoft.com. This is a direct link to the Microsoft Public
Newsgroups. It is FREE and requires NO ISP's Usenet account. OEx allows you
to easily find, track threads, cross-post, sort by date, poster's name,
watched threads or subject.
It's easy:

How to Configure OEx for Internet News
http://support.microsoft.com/?id=171164

Infinite Diversities in Infinite Combinations
Assimilation Imminent. Resistance is Futile
"Very funny Scotty. Now, beam down my clothes."

The only constant in life is change...

Thanks. I'll check this out.

But...will it fix the fact that the computer account is not "right" on the
record?
"Ace Fekay [MVP]" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> In news:BA783BBB-6644-4B96-BEA2-(E-Mail Removed),
> Bill Bradley <(E-Mail Removed)> stated, which I
> commented on below:
>> We are seeing a LOT of the following types of errors:
>>
>> Event Type: Warning
>> Event Source: DnsApi
>> Event Category: None
>> Event ID: 11166
>> Date: 7/13/2006
>> Time: 7:08:07 PM
>> User: N/A
>> Computer: VHADENSCANNER2
>> Description:
>> The system failed to register host (A) resource records (RRs) for
>> network adapter
>> with settings:
>>
>> Adapter Name : {ADF57614-E5FC-4BE1-8A8F-BD4C37CE90AD}
>> Host Name : vhadenscanner2
>> Primary Domain Suffix : v19.med.va.gov
>> DNS server list :
>> 10.153.3.50, 10.153.4.50
>> Sent update to server : 10.153.3.50
>> IP Address(es) :
>> 10.153.6.44
>>
>> The cause seems to be something causing the server's security entry
>> on the DNS record (ServerName$) to be corrupt or unresolved (instead
>> of the name, you see a GUID string). This is not just happening with
>> servers, but, with workstations, too.
>>
>> While we can individually correct this by deleting the DNS record,
>> then running ipconfig /registerdns, we need to be able to do a search
>> for records with this problem, then fix them all remotely.
>>
>> Also, of course, we'd like to find out what's causing this. What we
>> THINK might be happening is that we are going through a migration
>> from 2K to XP, and, in many cases the computer is being upgraded in
>> place, ending up with the same name, but, different OS. The
>> procedure is to pull off the profiles and other identity information,
>> remove the computer from the Domain, upgrade the OS (using Ghost, or,
>> for older computers, replacing the hard drive with a new, larger one,
>> with a Ghost image), then placing the computer back on the Domain.
>> We're thinking this is somehow not being reflected properly in DNS,
>> so, since the "old" computer is gone, you see the GUID, rather than
>> ServerName$ in the DNS Security settings.
>>
>> Any ideas?
>>
>> Thanks!
>
> Info on it:
> http://www.eventid.net/display.asp?e...DnsApi&phase=1
>
> Are these machines DHCP based or static? If DHCP, and the DHCP server is
> on a DC, we can assign DHCP ownership of the record as well as set
> scavenging of old records.
>
> Here's more info on it. It's a suggestion, and may work. I usually
> configure this anyway on a DHCP server that is a DC.
>
> 317590 - HOW TO Configure DNS Dynamic Update in Windows 2000 and
> DNSUpdateProxy Group:
> http://support.microsoft.com/?id=317590
>
> 816592 - How to configure DNS dynamic updates in Windows Server 2003:
> http://support.microsoft.com/kb/816592/
>
> Follow up discussion on the DNSUpdateProxy-Group:
> http://msmvps.com/ulfbsimonweidner/a.../26/39841.aspx
>
> --
> Ace
> Innovative IT Concepts, Inc
> Willow Grove, PA
>
> This posting is provided "AS-IS" with no warranties or guarantees and
> confers no rights.
>
> Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
> Microsoft MVP - Directory Services
> Microsoft Certified Trainer
>
> Having difficulty reading or finding responses to your post?
> Instead of the website you're using, I suggest to use OEx (Outlook Express
> or any other newsreader), and configure a news account, pointing to
> news.microsoft.com. This is a direct link to the Microsoft Public
> Newsgroups. It is FREE and requires NO ISP's Usenet account. OEx allows
> you to easily find, track threads, cross-post, sort by date, poster's
> name, watched threads or subject.
> It's easy:
>
> How to Configure OEx for Internet News
> http://support.microsoft.com/?id=171164
>
> Infinite Diversities in Infinite Combinations
> Assimilation Imminent. Resistance is Futile
> "Very funny Scotty. Now, beam down my clothes."
>
> The only constant in life is change...
>
>

In news:(E-Mail Removed),
Bill Bradley <(E-Mail Removed)> stated, which I commented on below:
> Thanks. I'll check this out.
>
> But...will it fix the fact that the computer account is not "right"
> on the record?

It's basically because the computer account has changed due to the upgrades
and/or migration. As you;ve found, as soon as you do that, the error comes
about. If DHCP owns the record, it will update it for you instead of the
workstation, which the new account doesn;t really "own" it any longer.

Try it out and let me know.

Ace