Article ID: 816587 - Last Review: December 3, 2007 - Revision: 7.4

How to verify that SRV DNS records have been created for a domain controller

View products that this article applies to.

System TipThis article applies to a different operating system than the one you are using. Article content that may not be relevant to you is disabled.

For a Microsoft Windows 2000 version of this article, see 241515 (http://support.microsoft.com/kb/241515/EN-US/ ) .

Expand all | Collapse all

SUMMARY

This article describes how to verify Service Location (SRV) locator resource records for a domain controller after you install the Active Directory directory service.

Back to the top

The SRV record is a Domain Name System (DNS) resource record that is used to identify computers that host specific services. SRV resource records are used to locate domain controllers for Active Directory. To verify SRV locator resource records for a domain controller, use one of the following methods.

DNS Manager

After you install Active Directory on a server running the Microsoft DNS service, you can use the DNS Management Console to verify that the appropriate zones and resource records are created for each DNS zone.

Active Directory creates its SRV records in the following folders, where Domain_Name is the name of your domain:

Forward Lookup Zones/Domain_Name/_msdcs/dc/_sites/Default-First-Site-Name/_tcp Forward Lookup Zones/Domain_Name/_msdcs/dc/_tcp

In these locations, an SRV record should appear for the following services:

_kerberos
_ldap

Netlogon.dns

If you are using non-Microsoft DNS servers to support Active Directory, you can verify SRV locator resource records by viewing Netlogon.dns. Netlogon.dns is located in the %systemroot%\System32\Config folder. You can use a text editor, such as Microsoft Notepad, to view this file.

The first record in the file is the domain controller's Lightweight Directory Access Protocol (LDAP) SRV record. This record should appear similar to the following:

_ldap._tcp.Domain_Name

Nslookup

Nslookup is a command-line tool that displays information you can use to diagnose Domain Name System (DNS) infrastructure.
To use Nslookup to verify the SRV records, follow these steps:

On your DNS, click Start, and then click Run.
In the Open box, type cmd.
Type nslookup, and then press ENTER.
Type set type=all, and then press ENTER.
Type _ldap._tcp.dc._msdcs.Domain_Name, where Domain_Name is the name of your domain, and then press ENTER.

Nslookup returns one or more SRV service location records that appear in the following format, where Server_Name is the host name of a domain controller, and where Domain_Name is the domain the domain controller belongs to, and Server_IP_Address is the domain controller's Internet Protocol (IP) address:

Server: localhost
Address:  127.0.0.1
_ldap._tcp.dc._msdcs.Domain_Name
SRV service location:
	priority	= 0
	weight		= 100
	port		= 389
	srv hostname	= Server_Name.Domain_NameServer_Name.Domain_Name		internet address = Server_IP_Address

Back to the top

REFERENCES

For more information about the SRV records that are registered by Netlogon, please see the "SRV Records Registered by NetLogon" section in the TechNet document How DNS Support for Active Directory Works. To view this document, visit the following Microsoft web site:

http://technet2.microsoft.com/windowsserver/en/library/9D62E91D-75C3-4A77-AE93-A8804E9FF2A11033.mspx (http://technet2.microsoft.com/windowsserver/en/library/9D62E91D-75C3-4A77-AE93-A8804E9FF2A11033.mspx)

Back to the top