Posted On March 3, 2021

Resolving DNS Delegation Error: IP: [Missing glue A record]

kimconnect 0 comments
blog.KimConnect.com >> Windows >> Resolving DNS Delegation Error: IP: [Missing glue A record]

Sample Output of DNS diagnostics:

PS C:\Windows\system32> dcdiag /test:dns /s:TEST-DC01

Directory Server Diagnosis

Performing initial setup:
   * Identified AD Forest.
   Done gathering initial info.

Doing initial required tests

   Testing server: Default-First-Site-Name\TEST-DC01
      Starting test: Connectivity
         ......................... TEST-DC01 passed test Connectivity

Doing primary tests

   Testing server: Default-First-Site-Name\TEST-DC01

      Starting test: DNS

         DNS Tests are running and not hung. Please wait a few minutes...
         ......................... TEST-DC01 passed test DNS

   Running partition tests on : DomainDnsZones

   Running partition tests on : ForestDnsZones

   Running partition tests on : Schema

   Running partition tests on : Configuration

   Running partition tests on : kimconnect

   Running enterprise tests on : kimconnect.com
      Starting test: DNS
         Test results for domain controllers:

            DC: TEST-DC01.kimconnect.com
            Domain: kimconnect.com


               TEST: Delegations (Del)
                  Error: DNS server: DC007.kimconnect.com. IP:<Unavailable> [Missing glue A record]
                  Error: DNS server: DC008.kimconnect.com. IP:<Unavailable> [Missing glue A record]

         Summary of DNS test results:

                                            Auth Basc Forw Del  Dyn  RReg Ext
            _________________________________________________________________
            Domain: kimconnect.com
               TEST-DC01                  PASS PASS PASS FAIL PASS PASS n/a

         ......................... kimconnect.com failed test DNS

If you run into this error, use this script to install RSAT:

dcdiag /test:dns

dcdiag : The term 'dcdiag' is not recognized as the name of a cmdlet, function, script file, or operable program.
Check the spelling of the name, or if a path was included, verify that the path is correct and try again.
At line:1 char:1
+ dcdiag /test:dns
+ ~~~~~~
    + CategoryInfo          : ObjectNotFound: (dcdiag:String) [], CommandNotFoundException
    + FullyQualifiedErrorId : CommandNotFoundException

Resolution:

Search DNS management console for stale records and remove them accordingly. Here’s a screenshot of an example:

Sample Output of a DNS zone refresh:

$dnsServer=$env:computername
$zone=$env:USERDNSDOMAIN
dnscmd $dnsServer /zonerefresh $zone

DNS Server NS01.KIMCONNECT.COM forced refresh of zone KIMCONNECT.COM:
Status = 0 (0x00000000)
Command completed successfully.

Leave a Reply

Your email address will not be published. Required fields are marked *

Related Post

An Exercise in Discover Whether an Active Directory Account Has RDP Access to Windows Bastion Hosts

Check Computers: $computernames='RDPSERVER01','RDPSERVER02','RDPSERVER03' invoke-command -computername $computernames {get-localgroupmember 'remote desktop users'}|select PSComputername,Name # Sample output PS…

GPO Logon Banner

Update: this information is outdated. Use this link for the current method of creating Logon…

PowerShell: Script to Obtain List of Sites and Associated Domain Controllers

Script: if (!(get-module -name "ActiveDirectory") ){Add-WindowsFeature RSAT-AD-PowerShell; import-module -name "ActiveDirectory" -DisableNameChecking | out-null }$sites=(Get-ADDomainController -filter…
Other project: DragonCoin.com