Are you running multiple DNS servers....and are the effected computers using the same one...and those that are not are using a different one?
Rogue DHCP server handing out bad DNS servers in the scope? Do an nslookup on an effected computer and hit the PTR record for the bogus IP address. Maybe that will render a clue. I have no real ideas, I am just tossing out what comes to mind. From: [email protected] [mailto:[email protected]] Sent: Tuesday, March 08, 2011 9:51 AM To: NT System Admin Issues Subject: Re: Workstation DNS cache weirdness This is correct. We checked LMHOSTS as well as HOSTS. No other machines called "HOBBES". (If so, why would "HOBBES" resolve correctly 99%+ of the time?) James Rankin <[email protected]<mailto:[email protected]>> 03/08/2011 08:28 AM Please respond to "NT System Admin Issues" <[email protected]<mailto:[email protected]>> To "NT System Admin Issues" <[email protected]<mailto:[email protected]>> Press this button if the "To" is a fax number. Enter in the fax number like 123-456-7890. cc Subject Re: Workstation DNS cache weirdness Just to be sure, no other machine on the network called HOBBES either? No entry in an lmhosts file, rather than a hosts? (although if there was, I wouldn't expect ipconfig /flushdns to fix it) On 8 March 2011 14:25, <[email protected]<mailto:[email protected]>> wrote: 1. No WINS in our network 2. The actual server (NetBIOS) name is "NOTES", but it has an alias "lotucism" name of "HOBBES". Queries, at least most of the time, for HOBBES resolve to the static IP for NOTES. (Unless, of coarse, the query is done from a machine with a screwy DNS cache). 3. Although it is radom in its appearances, we do have one station which seems to be affected more frequently than most. (Yes, it has hit me a few times, too.) Things finally hit the fan THU, when 5-6 folks had it happen. Thanks! -- RMc "John Aldrich" <[email protected]<mailto:[email protected]>> 03/08/2011 08:19 AM Please respond to "NT System Admin Issues" <[email protected]<mailto:[email protected]>> To "NT System Admin Issues" <[email protected]<mailto:[email protected]>> Press this button if the "To" is a fax number. Enter in the fax number like 123-456-7890. cc Subject RE: Workstation DNS cache weirdness Any anti-malware software running with active-protection enabled? Do *all* your XP Pro SP3 workstations do it, or just some? Is it always the same ones or is it random? Just grasping at straws here.... does your DNS server have an entry in it for the Lotus Notes server? I'm guessing it does, but again, grasping at straws trying to help. :-) From: [email protected]<mailto:[email protected]> [mailto:[email protected]<mailto:[email protected]>] Sent: Tuesday, March 08, 2011 9:10 AM To: NT System Admin Issues Subject: Workstation DNS cache weirdness Greetings! This is a situation which pops up on occasion. Workstations affected are all Windows XP Pro SP3. We are a Lotus Notes shop (7.5). It is the Lotus application that "detects" the error, but the cause seems to be something in the workstation's network setup. A user will be logged in, have their Notes app up and running, and will have been reading messages throughout the day. Then, when they attempt to open a message, they get this pop-up message: The remote server is not a known TCP/IP host. (Well, it was a couple of minutes ago...) We've had this happen periodically over the past several months. Once in a while (like last Thursday), it may hit several workstations on a given day. The Domino server has a static IP address. (FWIW, it is on a server running Windows 2003 "Standard", SP2.) Last week, somebody tried pinging the Domino server from an affected WS. It was pinging an address in our DHCP realm rather than the actual (static) address of the Domino server. (A search of the network DNS tables and DHCP leases show no such address for the Domino server; all entries for the Domino server are the correct static address.) The workstations have no entries in their local HOSTS file. The command "ipconfig /flushdns" tends to resolve the situation. However... What would cause the local DNS cache to go screwy this way, mid-session? Thanks! -- Richard D. McClary Systems Administrator, Information Technology Group ASPCA(r) 1717 S. Philo Rd, Ste 36 Urbana, IL 61802 [email protected]<mailto:[email protected]> P: 217-337-9761 C: 217-417-1182 F: 217-337-9761 www.aspca.org<http://www.aspca.org/> The information contained in this e-mail, and any attachments hereto, is from The American Society for the Prevention of Cruelty to Animals(r) (ASPCA(r)) and is intended only for use by the addressee(s) named herein and may contain legally privileged and/or confidential information. If you are not the intended recipient of this e-mail, you are hereby notified that any dissemination, distribution, copying or use of the contents of this e-mail, and any attachments hereto, is strictly prohibited. If you have received this e-mail in error, please immediately notify me by reply email and permanently delete the original and any copy of this e-mail and any printout thereof. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe ntsysadmin -- "On two occasions...I have been asked, 'Pray, Mr Babbage, if you put into the machine wrong figures, will the right answers come out?' I am not able rightly to apprehend the kind of confusion of ideas that could provoke such a question." IMPORTANT: This email is intended for the use of the individual addressee(s) named above and may contain information that is confidential, privileged or unsuitable for overly sensitive persons with low self-esteem, no sense of humour or irrational religious beliefs. If you are not the intended recipient, any dissemination, distribution or copying of this email is not authorised (either explicitly or implicitly) and constitutes an irritating social faux pas. Unless the word absquatulation has been used in its correct context somewhere other than in this warning, it does not have any legal or no grammatical use and may be ignored. No animals were harmed in the transmission of this email, although the kelpie next door is living on borrowed time, let me tell you. Those of you with an overwhelming fear of the unknown will be gratified to learn that there is no hidden message revealed by reading this warning backwards, so just ignore that Alert Notice from Microsoft. However, by pouring a complete circle of salt around yourself and your computer you can ensure that no harm befalls you and your pets. If you have received this email in error, please add some nutmeg and egg whites, whisk and place in a warm oven for 40 minutes. ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
