Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 11160

Source
Level
Description
The system failed to register pointer (PTR) resource records (RRs) for
network adapter
with settings:

   Adapter Name : {CF832F65-C322-48F9-B4D3-4F3A643BA4D4}
   Host Name : <host name>
   Adapter-specific Domain Suffix : <domain>
   DNS server list :
      <ip>
   Sent update to server : <ip>
   IP Address : <ip>

The reason that the system could not register these RRs was because of a security related problem. The cause of this could be (a) your computer does not have permissions to register and update the specific DNS domain name set for this adapter, or (b) there might have been a problem negotiating valid credentials with the DNS server during the processing of the update request.

You can manually retry DNS registration of the network adapter and its settings by typing "ipconfig /registerdns" at the command prompt. If problems still persist, contact your DNS server or network systems administrator.
Comments
 
For us, the fix was to set the reverse lookup zone to allow both secure and non-secured updates.    

This problem cropped up when we were setting up a disjoined namespace, so as computers were migrated from one domain to the other, they no longer had rights to update the reverse lookup zone.
In my case, there was another system with the IP address of the actual system in the reverse DNS. After removing the entry from the reverse DNS, I got rid of the message.
In my case, I added the computer account to have full rights to the DNS record of the server. The event, however, did not clear until I added the computer account (full rights) on the Reverse DNS entry as well.
This error occurs when the server is trying to update the DNS information and does not have enough privileges.
On the entry in the forward lookup zone make sure that %DOMAIN%\%COMPUTERNAME%$ has the following (special) permissions:
* Write all properties
* Read permissions
* All validated writes

On the entry in the reverse lookup zone make sure that %DOMAIN%\%COMPUTERNAME%$ has full control.
I ran into this when I had a server that was a member server of a domain on a different subnet, but the DC DNS servers did not have a Reverse Lookup Zone for the subnet in which the member server was. I added a reverse lookup zone for the subnet that the member server was in, and the error went away (as the server was now able to register its PTR record).


In my case, i deleted the old entry in the reverse lookup zone (i had changed the server name, the old one was not deleted on dns server). After deleting, ipconfig /registerdns works fine without an error in the event log.
This can happen if you have the "Register this connection's address in DNS" option selected. Go to your network connection's advanced properties, then go to the DNS tab, and the check box is at the bottom. The problem happens when the above network connection is your Internet connection. You do not have rights to update your ISP's DNS servers. Uncheck the box for the error message to go away.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...