DNS Site Records Are Not Properly Removed After Dcpromo

When you create a new site, you may have a situation where at the time you created the site it did not contain domain controllers. The following event is displayed in Event Viewer: This is expected behavior and allows domain controllers from other sites to function as domain controllers for your newly created site, based on the most efficient cost figure.

After you bring up a domain controller in your newly created site, the following event is logged on the domain controller that was temporarily covering your newly created site: This event notifies you that the new domain controller that you just brought up in your new site is now identified as the domain controller for the new site. However, if you review the DNS SRV records, the domain controller in the other site that was temporarily covering your new site is still listed as a domain controller in your newly created site.

This behavior occurs because Netlogon did not clean up the old records.

After Event ID 5785 is logged, Netlogon should remove the records so that only the domain controllers that are created in the new site reflect that their location is in that site, and any domain controllers that were temporarily covering this site are removed so that clients are not validated by a domain controller that is at another site.

To resolve this issue, manually delete the DNS SRV records.

Microsoft has confirmed this to be a problem in Microsoft Windows 2000.