I just spotted than my PC, running Windows 8.1 Pro on a Windows 2012 R2 domain has been querying DNS for SRV records that doesn't exist.
All of the dcdiag /dnsall tests pass, but I wonder if there's something in Group Policy that is causing clients to query for the wrong SRV record.
When running ipconfig /displaydns to check the TTL on a cached DNS record, I spotted these:
_ldap._tcp.server1.contoso.com
----------------------------------------
Name does not exist.
_ldap._tcp.site-name._sites.server1.contoso.com
----------------------------------------
Name does not exist.
(site name, domain and server name changed).
For some reason, the DNS lookup includes the name of the logon server in the FQDN. If it had looked up _ldap._tcp.server1.contoso.com and _ldap._tcp.site-name._sites.server1.contoso.com, they would have returned the right records.
Am I just being paranoid, or is there something wrong with the way I've got our Active Directory / DNS configured?
0 Answers