DNS: The DNS server <IP address> on <adapter name> must resolve PDC RRs for the domain controller

  • Article

Applies To: Windows Server 2008, Windows Server 2008 R2, Windows Server 2012

This topic is intended to address a specific issue identified by a Microsoft Baseline Configuration Analyzer or Best Practices Analyzer scan. You should apply the information in this topic only to computers that have had the DNS Microsoft Baseline Configuration Analyzer or DNS Best Practices Analyzer run against them and are experiencing the issue addressed by this topic. For more information about best practices and scans, see Best Practices Analyzer.

Operating System

Windows Server 2008, Windows Server 2008 R2, Windows Server 2012

Product/Feature

DNS

Severity

Critical

Category

Operation

Issue

Network interfaces must be configured with DNS servers that resolve service records for the primary domain controller (PDC).

A DNS server configured on the network interface did not respond to a query for the _ldap._tcp.pdc._msdcs.<DnsDomainName> service (SRV) record.

Impact

Active Directory Domain Services (AD DS) operations that depend on locating a primary domain controller on the network might fail.

Resolution

Configure the network interface to use valid DNS servers.

Configure the network interface to use DNS servers that are responsive and can resolve the _ldap._tcp.pdc._msdcs.<DnsDomainName> SRV record.

To configure valid IPv4 DNS server addresses

  1. Click Start, click Control Panel, click Network and Internet, click Network and Sharing Center, click Change Adapter settings, double-click the network connection you want to change, and then click Properties.

  2. Click Internet Protocol Version 4 (TCP/IPv4), and then click Properties.

  3. Click Use the following DNS server addresses.

  4. In Preferred DNS server and Alternate DNS server, type addresses that respond to a query for the _ldap._tcp.pdc._msdcs.<DnsDomainName> SRV record.

  5. Click Advanced, and then click DNS.

  6. Click Edit or Remove to change any DNS servers that do not respond to a query for the _ldap._tcp.pdc._msdcs.<DnsDomainName> SRV record.

To configure valid IPv6 DNS server addresses

  1. Click Start, click Control Panel, click Network and Internet, click Network and Sharing Center, click Change Adapter settings, double-click the network connection you want to change, and then click Properties.

  2. Click Internet Protocol Version 6 (TCP/IPv6), and then click Properties.

  3. Click Use the following DNS server addresses.

  4. In Preferred DNS server and Alternate DNS server, type addresses that respond to a query for the _ldap._tcp.pdc._msdcs.<DnsDomainName> SRV record.

  5. Click Advanced, and then click DNS.

  6. Click Edit or Remove to change any DNS servers that do not respond to a query for the _ldap._tcp.pdc._msdcs.<DnsDomainName> SRV record.