Active Directory DNS Records have disappeared

Question

Hello,

We installed and configured our Active Directory about 3 months ago.

AD DS and DNS roles installed on a server and then other computers joined. Everything was OK.

However today after 3 months we tried to join a few more machines but because the DNS lookup for SVR record failed, I logged into the AD server to find out that all DNS records are gone. Nothing is left except the zone (mydomain.com) itself plus one SOA and one NS record. Everything else is wiped out.

I'm the only one who has access to this server.

I tried to solve this by removing DNS role and adding it again, to no avail.

This is a crisis for us. Please assist.

Answer 1

That sounds very risky. Have you addressed the issues I raised? A much simpler / safer method is to stand up a new one for a test.

I'd use dcdiag / repadmin tools to verify health correcting all errors found before starting any operations. Then stand up the new one, patch it fully, license it, join existing domain, add active directory domain services, promote it also making it a GC (recommended), transfer FSMO roles over (optional), transfer pdc emulator role (optional), use dcdiag / repadmin tools to again verify health, when all is good you can decommission / demote old one.

--please don't forget to upvote and Accept as answer if the reply is helpful--

Answer 2

What's the result of
nslookup <domain name>

Answer 3

Also
By default, the primary DNS suffix is the same as the name of the Active Directory domain to which the computer belongs

Host Name . . . . . . . . . . . . : dc
Primary Dns Suffix . . . . . . . : e
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : hamrahfelez.net

So I'd fix that
https://www.dell.com/support/kbdoc/en-us/000139286/windows-server-dns-suffix-is-missing-on-domain-controller-name-server-records

--please don't forget to upvote and Accept as answer if the reply is helpful--

Answer 4

@Anonymous

Thanks. I don't have access to the server for a few days. I'll update you as soon as I got somewhere.

But I can tell you that nslookup works fine which means the DNS service is OK. It's just the GUI that doesn't work :(

Answer 5

@Anonymous

Would you please comment on this scenario:

• Backup AD data (users and computers). I think Windows built-in tool is enough.
• Rebuild AD machine.
• Restore backup.

Thanks.