syntax error

Question

Hi All

i am using the below syntax. i am connected to server01 and trying to execute the below syntax.
i.e i am connected to server01 and remoting it to server02 and executing.
when i directly run on server02 i dont see any issue but facing issue with remoting. i have also installed dns module on server01
I am using Account01 and when prompted for credentials i am giving it.
i am getting error Failed to get the zone information for mydomain.com mydc01

Answer 1

I think you'll find that you're encountering the "Second Hop" problem. You can't use the credentials passed from local machine to SERVER02 when your Get-DnsServerResourceRecord tries to connect to MYDC01. The cmdlet uses WMI/CIM and it's probably being denied permission. The reason, I'm guessing, is probably an error "5" or "1722".

# create session from local machine (machine #1) to SERVER02 (machine #2)
$session = New-PSSession -ComputerName server02 -Credential Account01
# Run Invoke-Command on SERVER02 (machine #2)
Invoke-Command -Session $session -ScriptBlock {
    try {
        Write-Host $env:COMPUTERNAME;
        # Try connecting to MYDC01 (machine #3) from Server02 (machine #2)
        $dnsrecords = Get-DnsServerResourceRecord -ZoneName mydomain.com -ComputerName mydc01 -ErrorAction Stop | 
            Where-Object { $_.RecordType -eq "A" -Or $_.RecordType -eq "CNAME" } | 
                ConvertTo-Json
        Write-Host $dnsrecords
        # Note: $dnsrecords never returned to SERVER02!
    }
    catch {
        $_  # return $Error[0] to Server02
    }
}
# remove session with SERVER02 (machine #2)
Remove-PSSession -session $session

Answer 2

This looks just like the problem posted by @Mda Khmm with the subject "unable to fetch the information" (unable-to-fetch-the-information.html)

I'll ask for the same information I did in that topic:

How about posting the error message? The FullyQualifiedErrorId might be telling you what the problem is.

Change line 9 in your script to just "$<underbar>" instead of "Failed".

Answer 3

line 9 can i use in this format
return "Failed: $Error[0]"

Answer 4

please help in editing the syntax

Answer 5

i am using domain admin account but still i am getting the below error

$session = New-PSSession -ComputerName server02 -Credential account1
Invoke-Command -Session $session -ScriptBlock {
try {
Write-Host $env:COMPUTERNAME;
$dnsrecords = Get-DnsServerResourceRecord -ZoneName mydomain.com -ComputerName mydc01 -ErrorAction Stop | Where-Object { $.RecordType -eq "A" -Or $.RecordType -eq "CNAME" } | ConvertTo-Json
Write-Host $dnsrecords
}
catch {
$_
}
}
Remove-PSSession -session $session
server02
Get-DnsServerResourceRecord : Failed to get the zone information for mydomain.com on server mydc01.
At line:4 char:15

• ... nsrecords = Get-DnsServerResourceRecord -ZoneName mydomain.com ...
• ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
• CategoryInfo : PermissionDenied: (mydomain.com:root/Microsoft/...rResourceRecord) [Get-DnsServerResourceRecord], CimException
• FullyQualifiedErrorId : WIN32 5,Get-DnsServerResourceRecord