Monday, April 22, 2013

Troubleshooting Server unable to look up internal FDQN "result too large", unable to RDP to server, but can browse and read eventlogs



 nslookup internaldomain.local
 Troubleshooting Server unable to look up internal FDQN "result too large", unable to RDP to server, but can browse and read eventlogs

Quick answer: port exhaustion, kb out there to fix this stuff.

nslookup
 internalserver.internaldomain.local can't find internaldomain.local: unspecified error


1. clear dns servers
2. added dns servers in Core Data centre
3. tried different dns servers in nslookup
3a. tried local dns server
4. modified host file with internal.local to server

fail

Check firewall (disable)
netsh advfirewall set allprofiles state off
result:
ok

Check Group Policy
Gpupdate /force
result:
Updating Policy...User Policy update has completed successfully.Computer policy could not be updated successfully. The following errors were encountered:The processing of Group Policy failed. Windows could not resolve the computer name. This could be caused by one of more of the following: a) Name Resolution failure on the current domain controller. b) Active Directory Replication Latency (an account created on another domain controller has not replicated to the current domain controller).
To diagnose the failure, review the event log or run GPRESULT /H GPReport.html from the command line to access information about Group Policy results.

check time
w32tm /query /peers

more nslookup
set debug
internaldomain.local
result
-------------
truncated answer
connect failed: result too large
-------------

check server's services
net stop dnscache
net start dnscache

net stop workstation
net start netlogon

Check Ports!
netstat -a -n
problem located - port exhaustion !!! 10000's of time_wait

----Hotfix Time---- (with bonus hotfix)
Windows6.1-KB2553549-v3-x64
Windows6.1-KB2264080-x64

there is a better rollup available(windows6.1-kb2775511-x64) but my server is not SP1. 

enjoy.

No comments: