RE: [ActiveDir] Really goofy DNS trouble

[Malachi Burke]

Title: Looking for a tool that displays SID

Hey I found the problem and I believe fixed it.  If you have a Win2K DC with a domain name of “NAME” instead of “NAME.local” it is categorized as a “single-label” name, and DNS treats that as a TLD such as a .com, .net etc and subsequently disallows dynamic registration.  There are some registry hacks available which force things back into submission, covered in MS Knowledge base article 300684   This took a long damn time to figure out!  I debated renaming the domain but we all know how that is… =)   Malachi   -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Grillenmeier, Guido Sent: Tuesday, May 25, 2004 11:22 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Really goofy DNS trouble   is the DNS zone enabled for dynamic updates?   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Malachi Burke Sent: Mittwoch, 26. Mai 2004 02:55 To: [EMAIL PROTECTED] Subject: [ActiveDir] Really goofy DNS trouble Hey guys, I inherited a network with a very goofed up AD/DNS server.  The forward lookup zone contains no msdcs entry, nor does it contain any client entries.  We’ve been limping along with it this way, but now we’ve got a new DC+DNS in to take over.  Trouble is, new DC can’t complete replication, and it seems to be because of a failed DNS resolution.  Yuck!  I tried ipconfig /registerdns but to no avail.  Any ideas?   My hope was to start anew with a fresh DNS server, but it’s a little discomforting doing a backup from one Win2K machine and a restore onto the new Win2K3 machine when COM+ registry settings and friends are involved in an AD backup/restore – so I opted for replication, and here we are   Mal       From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kitchens Arthur E Sent: Tuesday, May 25, 2004 9:02 AM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Looking for a tool that displays SID   getsid from nt 4.0 reskit will do that (in the downlevel domain), but i expect there is something that would work in both environments. (joeware?).   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Salandra, Justin A. Sent: Tuesday, May 25, 2004 12:51 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Looking for a tool that displays SID The LDP.exe should do it for the AD side of the house, not sure about the NT side   -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Lanci, Richard Sent: Tuesday, May 25, 2004 11:59 AM To: '[EMAIL PROTECTED]' Subject: [ActiveDir] Looking for a tool that displays SID   In the middle of a migration from NT4 to AD and am looking for a tool that will display the SIDs (NT and AD) of migrated users.  We are using the NET IQ product for the user/computer migration. Thanks in advance