I can not see DNS records inside DNS zones in secondary domain controller

Question

Hi all,
I have two Domain Controller inside company.
Both of them are Windows 2016 DataCenter and they are installed in English Language.

Today I noted this issue:

On the first domain controller, inside DNS I can see all records inside the DNS zones.
On the second domain controller, inside DNS I see just DNS zones but inside domain zone there aren't DNS record, there are just the NameServer record!

After that I tried to the first domain controller, using DNS console, to connect to the second domain controller.
In this case I can see all DNS zones and records properly

What can I do?

Thanks
Federico

Answer 1

There seems to be some sort of corruption on this server. As a work-around it sounds like you can just use the newly created MSC but in my opinion I'd replace that domain controller ASAP.

I'd use dcdiag / repadmin tools to verify health correcting all errors found before starting any operations. Then stand up the new one for replacement, patch it fully, license it, join existing domain, add active directory domain services, promote it also making it a GC (recommended), transfer FSMO roles over (optional), transfer pdc emulator role (optional), use dcdiag / repadmin tools to again verify health, when all is good you can decommission / demote old one.

--please don't forget to upvote and Accept as answer if the reply is helpful--

Answer 2

Something here may help.
https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/dns-records-not-present

--please don't forget to upvote and Accept as answer if the reply is helpful--

Answer 3

Hi,

Before going further, did you confirm that both the 2 DCs are working well and the replication status between DCs is good?
Following command can be tested:
Dcdiag /v >c:\dcdiag1.log
Repadmin /showrepl >C:\repl.txt
Repadmin /showreps *

Best Regards,

Answer 4

Just checking if there's any progress or updates?

--please don't forget to upvote and Accept as answer if the reply is helpful--

Answer 5

Hi @Fan Fan ,
I have tried to execute command in CMD.

I have attached output to this post.

Finally I have this error on both domain controller:

*C:\Windows\system32>Repadmin /showreps *
LDAP error 81 (Server Down) Win32 Err 58.*

What can I do?

107091-dcdiag1-first-dc.log
107060-dcdiag1-second-dc.log
107101-repl-first-dc.txt
107082-repl-second-dc.txt

Finally, just to share more information about this issue, here some pictures.

This picture is about DNS record in DNS Zone in DC02

This picture is about DNS records in DNS Zone of DC02 from DC01. From DC01 seems to be all regular...