Re: DNS Server service stopped without any reason - System Admin Discussion Boards

Hi, I have a problem with my windows server 2003 Sp1 DNS service. The problem is the DNS service on windows usually stop whether I changed its setting to Automatic Start for DNS Server service. As network administrator, I didn't change any setting relating to DNS service after I have configure it correctly.

From here, I would like to know whether some of you experience with any virus that could stop DNS from running? When its stop, my whole organization could not access to an internet for a while. So I have to enable it every time to solve the problem. My concern is sometime I need to travel away from my office and this problem occure, so there would be nobody could solve this problem.

Thank in advance

You did read this one[^]
in the daily CP newsletter, did you?

I hope your problem is something else tho.

Smile | :)

Luc Pattyn [Forum Guidelines] [My Articles]

Voting for dummies? No thanks. Dead | X|

Thank you very much for your reply

I would update to Service Pack 2 first of all, there is always the chance that will solve the problem, plus probably better of at SP 2 anyway if at all possible.

Are there any errors in the event logs related to the DNS service? Is all DNS name resolution on the network failing or just Internet related queries?

I probably wouldn't point to a virus for this problem, although its tough to say from your description. Up to date virus signatures and a full scan are never a bad idea though.

You may want to try reinstalling DNS if updating to SP 2 doesn't help. (If you only have one DNS server and you're using Active Directory you might want to look for a MS document on how they say to do this, if there is one.)

requesttimedout wrote:
I would update to Service Pack 2 first of all, there is always the chance that will solve the problem, plus probably better of at SP 2 anyway if at all possible.

Thank you very much for your comment. I have run windows update on the server and found that its recommend to update to windows 2003 sp2. Currently this server is acting as domain controller and file server which share a document to all user in the organization. As I have discussed with my team, I not sure whether if I apply sp2, whether the the server could running properly or not (may be it could cause some problem with any device driver, or strict any security seeting) which could cause a trouble for user to access the resource on the server. If you have any experience with sp2 on windows 2003, please let me know whether it have any problem or not after you apply it.

requesttimedout wrote:
Are there any errors in the event logs related to the DNS service? Is all DNS name resolution on the network failing or just Internet related queries?

When I found that the DNS server service is stopped, around 70% of my client couldn't access to an internet. But each client I also configure with an alternative ISP DNS. I also have some problem with my router too which could make me difficult to find the problem. After I turn off the router for 10 mintue and restart the DNS services, every body could access the internet again. I have check an event viewer to find the cause of the problem but I didn't found any entry that could cause DNS server service to stop. But I found the below entry that is related to the DNS server service:

Event Type:	Error<br />
Event Source:	DNS<br />
Event Category:	None<br />
Event ID:	4007<br />
Date:		18-Jul-08<br />
Time:		8:10:52 AM<br />
User:		N/A<br />
Computer:	SERVER<br />
Description:<br />
The DNS server was unable to open zone _msdcs.pr.org.kh in the Active Directory from the application directory partition ForestDnsZones.pr.org.kh. This DNS server is configured to obtain and use information from the directory for this zone and is unable to load the zone without it. Check that the Active Directory is functioning properly and reload the zone. The event data is the error code.<br />
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.<br />
Data:<br />
0000: 0d 00 00 00               ....

and

Event Type:	Error<br />
Event Source:	DNS<br />
Event Category:	None<br />
Event ID:	4007<br />
Date:		18-Jul-08<br />
Time:		4:40:01 PM<br />
User:		N/A<br />
Computer:	SERVER<br />
Description:<br />
The DNS server was unable to open zone pr.org.kh in the Active Directory from the application directory partition DomainDnsZones.pr.org.kh. This DNS server is configured to obtain and use information from the directory for this zone and is unable to load the zone without it. Check that the Active Directory is functioning properly and reload the zone. The event data is the error code.<br />
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.<br />
Data:<br />
0000: 0d 00 00 00               ....

requesttimedout wrote:
If you only have one DNS server and you're using Active Directory you might want to look for a MS document on how they say to do this, if there is one.)

The DNS Server and Domain Controller is set in the same machine. Please let me know if you have any idea. Thank in advance.

Personally I have not run into any problems with SP2. I manage quite a few Windows 2003 Servers and I have not run into a problem. If you're worried about driver compatibility you can research that with the vendor that the server came from, or if a custom built you can look into individual components.

I personally would never configure a domain controller to have DNS point to anything but itself or another internal DNS server. I would not point a DC to an external DNS server. Pointing clients to another DNS server is probably alright, although if you configure DNS to use forwarders for external queries it isn't really necessary.

You might not be doing this, you said only clients, so that might not be relevant.

Can you access the internet when the DNS Server Service is stopped? IE ... telnet to port 25 or 80 of some external server that you reference by IP address, thus bypassing DNS resolution all together?

As a temporary solution, to allow you to leave your office, you could set the service to restart automatically.
In the services console, doubleclick the dns-service (or rightclick and select Properties). In the properties window select the recovery tab and select your options on failure.

You naturally need to address the issue why the service fails. But to help you with that we need more data, such as relevant entries in the event log.
When you have fixed the problem. don't leave the setting on automatic restart. It might prevent you from finding out that you're having a problem. Atleast if you like me read the eventlog irregularily.

Jörgen Andersson wrote:
As a temporary solution, to allow you to leave your office, you could set the service to restart automatically.
In the services console, doubleclick the dns-service (or rightclick and select Properties). In the properties window select the recovery tab and select your options on failure.

Thank you very much for your comment. That is one solution that could help me to temporary solve it.

Jörgen Andersson wrote:
You naturally need to address the issue why the service fails. But to help you with that we need more data, such as relevant entries in the event log.

That was my biggest challenge. I have checked in the event viewer and there is no entry that show me the reason why DNS server service is stopped. But I found the following error related to DNS server service that could give you some idea:

Event Type: Error<br />
Event Source: DNS<br />
Event Category: None<br />
Event ID: 4007<br />
Date: 18-Jul-08<br />
Time: 8:10:52 AM<br />
User: N/A<br />
Computer: SERVER<br />
Description:<br />
The DNS server was unable to open zone _msdcs.pr.org.kh in the Active Directory from the application directory partition ForestDnsZones.pr.org.kh. This DNS server is configured to obtain and use information from the directory for this zone and is unable to load the zone without it. Check that the Active Directory is functioning properly and reload the zone. The event data is the error code.<br />
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.<br />
Data:<br />
0000: 0d 00 00 00 ....

and

Event Type: Error<br />
Event Source: DNS<br />
Event Category: None<br />
Event ID: 4007<br />
Date: 18-Jul-08<br />
Time: 4:40:01 PM<br />
User: N/A<br />
Computer: SERVER<br />
Description:<br />
The DNS server was unable to open zone pr.org.kh in the Active Directory from the application directory partition DomainDnsZones.pr.org.kh. This DNS server is configured to obtain and use information from the directory for this zone and is unable to load the zone without it. Check that the Active Directory is functioning properly and reload the zone. The event data is the error code.<br />
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.<br />
Data:<br />
0000: 0d 00 00 00 ....

Please let me know if you have any solution with the above error escription. Thank in advance!!!

If you get these eventlog entries when the server is started, then it's normal, the dns service has just started before the AD.

Try to uninstall and reinstall the DNS role on the server. That will fix any eventual file and registry errors regarding the DNS, and it's done in ten minutes (no restart) so it won't really affect the users.

About the servicepack: I always servicepack my computers a couple of weeks after the packs are released. They fix more problems than they create. And if there are any serious errors in them, it would create enough articles about it that it would raise above the normal internet noise.
But of course, as always you need a proper backup before you do it!

Hi all,

I have a pc with pre-install winXP. Now i would like to install win2000 in it. Everytime after it inspecting my system, then will prompt me "inaccessible_boot_device" message. I know it could be cause by the hard disk controller (i am using SATA hardisk). May i know how to solve this problem?

thanks in advance

regards
cocoon_wls

Hi all,

I have found a solution which is said that need to extract the Intel(R) 82801GR/GH SATA AHCI Controller Windows driver to a floppy disk.After that press F6 to add the SCSI at the begining step.Last continue the installation as normal. I had follow the tips and do it,but it still prompt me the error message above.Below is the link i follow to fix the problem:

http://downloadmirror.intel.com/15551/ENG/readme.txt[^]

thanks in advance Cry | :((

cocoonwls

Hello there.

I have setup triggers on MSMQ private queues

I wanted to trace MSMQ Trigger activities for the whole day

I tried using trigmon.exe but it shows trace log from the time trigmon.exe is opened

But I want to have trace log for the whole day

One option is to let the trigmon.exe remain open

Is there any other option?

Is there some place where MSMQ Triggers activity is being saved?

Is there a way of knowing (through an application's code)if a process is still running or it hanged?
I'm trying to design a watchdog that has to monitor some processes. Except for killing/starting them, i have no other access to these processes.

Thanks

Can you see them on the Task Manager and did you test ProcessMonitor?

I can, the problem is that those processes might hang and i need to know when this happens and restart them from a watchdog.

If you can write code for the critical process, have it send a message to your watchdog on a regular basis. If the watchdog misses two or three messages, it kills and restarts the process. If you do not have access to the code, you will have to look for something the process does on a regular basis and maybe key off that. What does it do that makes it critical? That may help you find something to monitor. Can you write code to check the program counter? Where is the PC when the process hangs. What about I/O count?

Thanks for your time

bkelly13 wrote:
If you can write code for the critical process, have it send a message to your watchdog on a regular basis. If the watchdog misses two or three messages, it kills and restarts the process. If you do not have access to the code, you will have to look for something the process does on a regular basis and maybe key off that.

Thank you. Actually this answers my question. I was wondering if there was some kind of an OS/kernel way of testing if a project is still active or not. I've done some reading and didn't find any reference to what i needed. The options you've posted above gave me the answer i was looking for.

Thanks,
Eugen

Hi everyone,
I have three OS's on my system Xp,server 2003 Pack2 and Vista now I want to delete and reinstall these Os's of my system,my drivers are NTFS.When I was trying to boot my system with driver A: I cant format any drive and it shows me c: or d: are not exist
how can I do it?

Boot your system from CDROM or DVDROM.

Hi,

Please know that when we boot the system with Drive A: it does not recognize the NTFS partitions of the HardDrive. The better option is Boot the system with CDROM or DVDROM.

Hope this helps Smile | :)

Regards,
John Adams
ComponentOne LLC

Hi,
I was wondering if it is possible to simulate a file in windows? i.e. The file doesn't actually exist in the file system but i can open it in any application and my executable (or dll/fsd) provides run time data to that application for that file?

e.g.
C:\Windows\notepad non-existent-file.txt

The above command will open notepad and the notepad will try to access the file 'non-existent-file.txt' in the current directory. This file as the name implies doesn't actually exist and i want the OS to provide my application's dynamically provided data?

What i am really interested is the right direction? Is it possible? and do i need to write a File System Driver or some hooking is available in Windows?

Thanks in advance.

I believe it could be possible.. One way you could do it would be to API hook Kernel32, where the OpenFile function is stored.. Most files use this function to open a file so you could potentially get the file parameter passed to it and then do whatever you want with it then pass your newly created handle back to the calling process.

Conveniently there is an article on API hooking on The Code Project here.

Hope this helps,
--Perspx

"Nowadays, security guys break the Mac every single day. Every single day, they come out with a total exploit, your machine can be taken over totally. I dare anybody to do that once a month on the Windows machine." - Bill Gates

BSoD during a Win98 presentation

Hi,

yes, you can develop your own "file system", and have it mount its files (real or virtual)
under a (so far unused) drive letter, so they become available to all programs.
It will not be an easy task though; I would not consider doing it if I can avoid it.

Smile | :)

Luc Pattyn [Forum Guidelines] [My Articles]

Voting for dummies? No thanks. Dead | X|

Luc Pattyn wrote:
It will not be an easy task though; I would not consider doing it if I can avoid it.

Lets just say i don't seem to have a choice Frown | :(

and i have to do it :@. Now how to go about it? Sigh | :sigh:

Thanks.

Searching CP I stumbled on this article.[^] Maybe it could be useful to you?

Smile | :)

Luc Pattyn [Forum Guidelines] [My Articles]

Voting for dummies? No thanks. Dead | X|