none
BPA DNS errors RRS feed

  • Question

  • I have DNS issues on the LAN that I am trying to diagnose.

    When I run the "Best Practices Analyser" it reported a number of DNS issues. Below is a summary of the BPA DNS errors and I also get a warning for every IPv4 root hint.

    Title:
    DNS: DNS servers on Local Area Connection should include the loopback address, but not as the first entry.

    Severity:
    Error


    Title:
    DNS: At least one name server in the list of root hints must respond to queries for the root zone.

    Severity:
    Error


    Title:
    DNS: Local Area Connection should be configured to use both a preferred and an alternate DNS server

    Severity:
    Warning

    Title:
    DNS: Root hint server 128.8.10.90 must respond to NS queries for the root zone.

    Severity:
    Warning

    Interestingly I cannot ping the root hint servers but I do get a response from 8.8.8.8 & www.google.com's IP

    C:\Users\administrator.ABC>ping 128.8.10.90

    Pinging 128.8.10.90 with 32 bytes of data:
    Request timed out.
    Request timed out.
    Request timed out.
    Request timed out.

    Ping statistics for 128.8.10.90:
        Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),

    C:\Users\administrator.ABC>nslookup www.google.com
    DNS request timed out.
        timeout was 2 seconds.
    Server:  UnKnown
    Address:  fda8:6c3:ce53:a890:1100::11

    DNS request timed out.
        timeout was 2 seconds.
    DNS request timed out.
        timeout was 2 seconds.
    Name:    www.google.com
    Addresses:  2404:6800:4006:806::2004
              216.58.199.68


    C:\Users\administrator.ABC>ping 216.58.199.68

    Pinging 216.58.199.68 with 32 bytes of data:
    Reply from 216.58.199.68: bytes=32 time=94ms TTL=57
    Reply from 216.58.199.68: bytes=32 time=93ms TTL=57
    Reply from 216.58.199.68: bytes=32 time=93ms TTL=57
    Reply from 216.58.199.68: bytes=32 time=94ms TTL=57

    Ping statistics for 216.58.199.68:
        Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
    Approximate round trip times in milli-seconds:
        Minimum = 93ms, Maximum = 94ms, Average = 93ms

    C:\Users\administrator.ABC>ping 8.8.8.8

    Pinging 8.8.8.8 with 32 bytes of data:
    Reply from 8.8.8.8: bytes=32 time=95ms TTL=57
    Reply from 8.8.8.8: bytes=32 time=95ms TTL=57
    Reply from 8.8.8.8: bytes=32 time=94ms TTL=57
    Reply from 8.8.8.8: bytes=32 time=95ms TTL=57

    Ping statistics for 8.8.8.8:
        Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
    Approximate round trip times in milli-seconds:
        Minimum = 94ms, Maximum = 95ms, Average = 94ms

    C:\Users\administrator.ABC>ipconfig /all

    Windows IP Configuration

       Host Name . . . . . . . . . . . . : server
       Primary Dns Suffix  . . . . . . . : int.mydomain.com
       Node Type . . . . . . . . . . . . : Broadcast
       IP Routing Enabled. . . . . . . . : No
       WINS Proxy Enabled. . . . . . . . : No
       DNS Suffix Search List. . . . . . : int.mydomain.com

    Ethernet adapter Local Area Connection:

       Connection-specific DNS Suffix  . :
       Description . . . . . . . . . . . : Intel(R) PRO/1000 MT Network Connection #2
       Physical Address. . . . . . . . . : 52-54-00-03-25-A1
       DHCP Enabled. . . . . . . . . . . : No
       Autoconfiguration Enabled . . . . : Yes
       IPv6 Address. . . . . . . . . . . : fda8:6c3:ce53:a890:1100::11(Preferred)
       IPv6 Address. . . . . . . . . . . : fda8:6c3:ce53:a890:b0aa:f546:5329:9e7f(Preferred)
       Link-local IPv6 Address . . . . . : fe80::b0aa:f546:5329:9e7f%12(Preferred)
       IPv4 Address. . . . . . . . . . . : 192.1.1.11(Preferred)
       Subnet Mask . . . . . . . . . . . : 255.255.255.0
       Default Gateway . . . . . . . . . : fda8:6c3:ce53:a890:7000::254
                                           192.1.1.254
       DNS Servers . . . . . . . . . . . : fda8:6c3:ce53:a890:1100::11
                                           ::1
                                           192.1.1.11
                                           127.0.0.1
       NetBIOS over Tcpip. . . . . . . . : Enabled

    Tunnel adapter isatap.{F5421EBE-C03C-46C7-8498-AA02F55959E3}:

       Media State . . . . . . . . . . . : Media disconnected
       Connection-specific DNS Suffix  . :
       Description . . . . . . . . . . . : Microsoft ISATAP Adapter
       Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
       DHCP Enabled. . . . . . . . . . . : No
       Autoconfiguration Enabled . . . . : Yes

    Tunnel adapter 6TO4 Adapter:

       Media State . . . . . . . . . . . : Media disconnected
       Connection-specific DNS Suffix  . :
       Description . . . . . . . . . . . : Microsoft 6to4 Adapter
       Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
       DHCP Enabled. . . . . . . . . . . : No
       Autoconfiguration Enabled . . . . : Yes

    Tunnel adapter Teredo Tunneling Pseudo-Interface:

       Media State . . . . . . . . . . . : Media disconnected
       Connection-specific DNS Suffix  . :
       Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
       Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
       DHCP Enabled. . . . . . . . . . . : No
       Autoconfiguration Enabled . . . . : Yes

    C:\Users\administrator.ABC>

    Wednesday, May 18, 2016 9:08 PM

Answers

  • DNS: DNS servers on Local Area Connection should include the loopback address, but not as the first entry.

    I believe it is referring to the IPv6 settings. Please make your IPv6 settings dynamically configured and that should fix it (This includes removing ::1 from being your DNS server in IPv6).

    DNS: Local Area Connection should be configured to use both a preferred and an alternate DNS server

    I believe it is also referring to IPv6. Otherwise, you can ignore it if this is the only DC/DNS server you have.

    DNS: Root hint server 128.8.10.90 must respond to NS queries for the root zone.

    See that: https://technet.microsoft.com/en-us/library/ff807382(v=ws.10).aspx


    This posting is provided AS IS with no warranties or guarantees , and confers no rights.

    Ahmed MALEK

    My Website Link

    My Linkedin Profile

    My MVP Profile

    Wednesday, May 18, 2016 11:43 PM

All replies

  • DNS: DNS servers on Local Area Connection should include the loopback address, but not as the first entry.

    I believe it is referring to the IPv6 settings. Please make your IPv6 settings dynamically configured and that should fix it (This includes removing ::1 from being your DNS server in IPv6).

    DNS: Local Area Connection should be configured to use both a preferred and an alternate DNS server

    I believe it is also referring to IPv6. Otherwise, you can ignore it if this is the only DC/DNS server you have.

    DNS: Root hint server 128.8.10.90 must respond to NS queries for the root zone.

    See that: https://technet.microsoft.com/en-us/library/ff807382(v=ws.10).aspx


    This posting is provided AS IS with no warranties or guarantees , and confers no rights.

    Ahmed MALEK

    My Website Link

    My Linkedin Profile

    My MVP Profile

    Wednesday, May 18, 2016 11:43 PM
  • Hi Dercni,

    Agree with X.Here is the link for your reference:

    How to disable IPv6 or its components in Windows

    https://support.microsoft.com/en-us/kb/929852

    ________________________________________
    Best Regards,
    Cartman
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.

    Thursday, May 19, 2016 1:16 AM
  • Thank you for the help and my apologies for this delayed response as I have been on leave.

    As suggested I have set IPv6 to be dynamic however the BPA DNS errors remain. This was where i originally started and set Ipv6 to static in the hope of resolving.

    C:\Users\administrator.ABC>ipconfig /all

    Windows IP Configuration

       Host Name . . . . . . . . . . . . : server
       Primary Dns Suffix  . . . . . . . : int.mydomain.com
       Node Type . . . . . . . . . . . . : Broadcast
       IP Routing Enabled. . . . . . . . : No
       WINS Proxy Enabled. . . . . . . . : No
       DNS Suffix Search List. . . . . . : int.mydomain.com

    Ethernet adapter Local Area Connection:

       Connection-specific DNS Suffix  . :
       Description . . . . . . . . . . . : Intel(R) PRO/1000 MT Network Connection #2
       Physical Address. . . . . . . . . : 52-54-00-03-25-A1
       DHCP Enabled. . . . . . . . . . . : No
       Autoconfiguration Enabled . . . . : Yes
       IPv6 Address. . . . . . . . . . . : fda8:6c3:ce53:a890:b0aa:f546:5329:9e7f(Preferred)
       Link-local IPv6 Address . . . . . : fe80::b0aa:f546:5329:9e7f%12(Preferred)
       IPv4 Address. . . . . . . . . . . : 192.1.1.11(Preferred)
       Subnet Mask . . . . . . . . . . . : 255.255.255.0
       Default Gateway . . . . . . . . . : 192.1.1.254
       DNS Servers . . . . . . . . . . . : 192.1.1.11
                                           127.0.0.1
       NetBIOS over Tcpip. . . . . . . . : Enabled

    Tunnel adapter isatap.{F5421EBE-C03C-46C7-8498-AA02F55959E3}:

       Media State . . . . . . . . . . . : Media disconnected
       Connection-specific DNS Suffix  . :
       Description . . . . . . . . . . . : Microsoft ISATAP Adapter
       Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
       DHCP Enabled. . . . . . . . . . . : No
       Autoconfiguration Enabled . . . . : Yes

    Tunnel adapter 6TO4 Adapter:

       Media State . . . . . . . . . . . : Media disconnected
       Connection-specific DNS Suffix  . :
       Description . . . . . . . . . . . : Microsoft 6to4 Adapter
       Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
       DHCP Enabled. . . . . . . . . . . : No
       Autoconfiguration Enabled . . . . : Yes

    Tunnel adapter Teredo Tunneling Pseudo-Interface:

       Media State . . . . . . . . . . . : Media disconnected
       Connection-specific DNS Suffix  . :
       Description . . . . . . . . . . . : Teredo Tunneling Pseudo-Interface
       Physical Address. . . . . . . . . : 00-00-00-00-00-00-00-E0
       DHCP Enabled. . . . . . . . . . . : No
       Autoconfiguration Enabled . . . . : Yes

    C:\Users\administrator.ABC>

    Sunday, June 5, 2016 11:28 AM
  • Hi Dercni,

    If you need to use IPv6,please Prefer IPv4 over IPv6 in prefix policies.Check my link above.

    If you don't need to use it,just disable it.

    ________________________________________
    Best Regards,
    Cartman
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.

    Monday, June 6, 2016 7:02 AM
  • Thanks for the help Cartman, 2 quick questions regarding the link:

    1) "Important Internet Protocol version 6 (IPv6) is a mandatory part of Windows Vista and later versions of Windows. We do not recommend that you disable IPv6 or its components."

    2) At the end it does not state it applies to 2008R2

    Monday, June 6, 2016 11:18 AM
  • Hi,

    >>1) "Important Internet Protocol version 6 (IPv6) is a mandatory part of Windows Vista and later versions of Windows. We do not recommend that you disable IPv6 or its components."

    If you don't have any service or application rely on IPv6,you could disable it.

    >>2) At the end it does not state it applies to 2008R2

    If it doesn't work,check this:

    Resolving Internet connectivity issues after World IPv6 Launch (June 6, 2012)

    https://support.microsoft.com/en-us/kb/2533454

    ________________________________________
    Best Regards,
    Cartman
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact tnmff@microsoft.com.

    Tuesday, June 7, 2016 6:28 AM