Active Directory does not replicate when DNS lookup is not successful

View products that this article applies to.

This article was previously published under Q319202

Expand all | Collapse all

SYMPTOMS

When you try to replicate changes between replica partners in Active Directory directory service Sites and Services, you may receive the following error message:

The following error occurred during the attempt to synchronize the domain controllers.
The naming context is in the process of being removed or is not replicated from the specified server.

An event ID message that is similar to the following may also be logged in the System event log:

Event ID: 1265
Source: NTDS KCC
Type: Warning
Category: Knowledge Consistency

The attempt to establish a replication link with parameters

Partition: DC=yourinfo,DC=yourinfo,DC=yourinfo,DC=com Source DSA DN: CN=NTDS Settings,CN=NT5-PCI-20,CN=Servers,CN=GSCIntranet,CN=Sites,CN=Configuration,DC=child,DC=yourdomain,DC=com
Source DSA Address:
YourDomainController. YourDomain.com
Inter-site Transport (if any):

failed with the following status:

The DSA operation is unable to proceed because of a DNS lookup failure. The record data is the status code. This operation will be retried.

Back to the top

CAUSE

This issue occurs because the DNS Database does not have a service (SRV) resource record for the YourDomainController.YourDomain.com domain controller.

Back to the top

RESOLUTION

To resolve this issue, follow these steps:

Ping the Domain Controller. To do so, type pingYourDomainController.YourDomain.com at the command prompt, and then press ENTER.

If you receive a reply that the ping request could not find the host, the domain controller's SRV record is not populated in the DNS Database.
Check the configuration of DNS and make sure that Allow Dynamic Updates is enabled. To do this, follow these steps:
1. Click Start, point to Programs, click Administrative Tools, and then click DNS.
2. Expand the DNS folder.
3. Expand the Forward Lookup Zones folder.
4. Right-click the folder, and then click Properties.
5. In the Allow Dynamic Updates box, click Yes.
6. Click OK.
7. Stop and then restart DNS.
Stop and then restart the Netlogon service on YourDomainController.

By doing this, you force the domain controller to register the appropriate SRV records. The change is then replicated to DNS.

Back to the top

STATUS

Microsoft has confirmed this to be a problem in Microsoft Windows 2000.

Back to the top

MORE INFORMATION

For additional information about how to set up Domain Name System for Active Directory, click the following article number to view the article in the Microsoft Knowledge Base:

237675 (http://support.microsoft.com/kb/237675/ ) Setting Up the Domain Name System for Active Directory

Back to the top