After DC change, internet dns resolve problem

Athanasios Tsesmelis 0 Reputation points
2025-03-13T09:45:14.3133333+00:00

Hello.

We are a small business with 20 clients and 2 Windows Server 2022. Before that we had 2 Windows server 2016 and replaced by 2022.

Old DC1: gasvr 192.168.128.1

Old DC2: svr2016 192.168.128.2

New DC1: gasvr24 192.168.128.3

New DC: svr2022 192.168.128.4

Firewall - Gateway: 192.168.128.254

Before the change. The old DC1( gasvr) had running Active Directory, DNS, DHCP, IIS and other services. This server was the main server of our business that was running all the programs.

The old DC2(svr2016) there was only for safety reasons and was running only Active Directory, DNS and DHCP services as secondary Domain Controller.

These 2 servers replaced not simultaneously but with a difference of 6 months. The second server change becomes before 1 week. svr2024 replaces the svr2016. When svr2016 demoted from active directory and remove all services the problem started.

What is the problem. When someone from clients or from server try to browse a webpages it takes some time (5-10 seconds) to resolve the webpage and start loading. After that the webpage loads fast and the browsing in the same page it is ok. If i ping google.com it takes 2-3 seconds for the first ping, after that the pinging is ok.

If I change the clients network adapter dns settings from DNS1: DC1 ip (192.168.128.3) to 8.8.8.8 and keeping DNS2: DC2 ip (192.168.128.4) the problem going away. Also if I change the dns on server from DNS2: 127.0.0.1 to 8.8.8.8 and keep DNS1: DC2 ip (192.168.128.4), again the problem going away.

I am running dcdiag and I am taking all passes

Auth Basc Forw Del Dyn RReg Ext

Pass Pass Pass Pass Pass Pass n/a

Windows for business | Windows Server | User experience | Other
0 comments No comments
{count} votes

3 answers

Sort by: Most helpful
  1. Jose Benjamin Solis Nolasco 3,506 Reputation points
    2025-03-13T16:26:33.6033333+00:00

    Hello,

    The delay you’re experiencing is very typical of a DNS timeout issue where one of your DNS servers—likely the newly promoted gasvr24—is not promptly resolving external names either because of misconfigured forwarders, incorrect/absent root hints, or lingering settings from your old DC environment. By verifying and correcting these settings, your internal DNS should be able to resolve external names without the initial delay.

    I'm going to make a little troubleshooting for you;

    Troubleshooting Steps

    1. Check DNS Forwarders in the DNS Manager:
      • On gasvr24 (192.168.128.3) and svr2022 (192.168.128.4), open the DNS Manager.
      • Right-click the server name → PropertiesForwarders tab.
      • Verify that you have valid forwarders or that the root hints are intact.
      • If not configured, adding trusted external DNS servers (like 8.8.8.8 or 1.1.1.1) as forwarders can help ensure prompt resolution.
    2. Inspect Root Hints:
      • Still in DNS Manager, check that the Root Hints are correct and up-to-date.
      • Outdated or missing root hints can cause delays as the server struggles to resolve external names via iterative queries.
    3. Examine Preferred DNS Server Settings on Your Domain Controllers:
      • Ensure that on gasvr24, the primary DNS setting isn’t pointing to itself in a way that disrupts proper external query processing.
      • Sometimes using the loopback address (127.0.0.1) without proper configuration can contribute to delay.
      • It could be beneficial to have each DC point to the other for DNS or to a known-good forwarder.
    4. Clear DNS Caches if Needed:
      • You can clear the DNS cache on the affected server using: cmd
             ipconfig /flushdns
        
      • This ensures that stale entries aren’t contributing to the delay.
    5. Review Any Residual Settings from the Old DC:
      • Check for references (in DNS zones, forwarders, or DHCP options) to the old DC’s IP addresses (192.168.128.1 or 192.168.128.2).
      • Ensure they’re completely removed from your configuration.
    6. Test Client Settings:
      • As you noticed, if clients use a public DNS like 8.8.8.8 instead of the problematic internal DNS, the delay goes away. This confirms that the primary internal DNS configuration is causing the delay for initial resolution.

    😊 If my answer helped you resolve your issue, please consider marking it as the correct answer. This helps others in the community find solutions more easily. Thanks!

    0 comments No comments

  2. Jose Benjamin Solis Nolasco 3,506 Reputation points
    2025-03-13T19:10:12.87+00:00

    Just following up, Do you need more guidance or assistance ?

    0 comments No comments

  3. Athanasios Tsesmelis 0 Reputation points
    2025-03-14T07:13:31.04+00:00

    I will check all the troubleshooting steps and I will return for a feedback.

    Thanks for your reply!

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.