Several posts in support forums suggest that the first steps in troubleshooting this would be to verify that there are no network connectivity issues that are affecting the AD (including DNS configuration, typically the trickiest to identify). If network connectivity is fine, one can increase the AD logging level (see T961809
) and hope that the logs will provide enough details to pinpoint the source of the problem.
I tried the steps listed in the previous comment on how to recreate the DomainDnsZones and ForestDnsZones, but I kept getting "Server Fault" messages or sometimes unable to connect to RPC. I was finally able to do it by using the "netdiag /fix" command. Everything was created successfully and the entries look right now.
To delete an application directory partition (as John VanDyke described below) use the following method:
1. Click Start, and then click Run.
2. In the Open box, type ntdsutil.
3. At the ntdsutil command prompt, type domain management.
4. At the domain management command prompt, type connection.
5. At the connection command prompt, type connect to server <server name> (The DNS name of the domain controller on which you want to delete the application directory partition).
6. At the connection command prompt, type quit.
7. At the domain management command prompt, type the following command: delete nc <application directory partition> (The distinguished name of the application directory partition that you want to create or delete. For example, the distinguished name of the application directory partition test.microsoft.com is dc=test, dc=Microsoft, dc=com).
WARNING: If you remove the last replica of an application directory partition, you may permanently lose all of the data that is contained in the partition. You must decide when it is safe to delete the last copy of a particular partition.
This event can occur when promoting a domain controller to a global catalog server. See ME910204
for additional information about this issue.
This message was appearing every 15 minutes on Win2k3 server DCs. The ForestDnsZones and DomainDnsZones were corrupt. Use Ntdsutil to remove the Application Partition. The name can be found using Adsiedit. Go to the Configuration Container and look under CN=Partitions to get the correct name. Once the Application Partition has been removed, use Adsiedit to verify that it has been removed on all DCs. You can then recreate the partition in DNS, go to DNS, right-click on the server and select Create Default Application Directory Partitions. You should see ForestDnsZones and DomainDnsZones in the Forward Lookup Zone of the domain. Allow it to replicate.
for information on this event.