由於 DNS 查詢故障，DSA 操作無法進行

用dcpromo刪除備用域控制器的時候顯示：

由於以下原因，操作失敗:

Active Directory 無法傳送目錄分割槽 CN=Schema,CN=Configuration,DC=kansho,DC=com 的剩餘資料到域控制器 dellmail.kansho.com。

“由於 DNS 查詢故障，DSA 操作無法進行。”

檢視服務發現：
Remote Procedure Call (RPC)的啟動型別和服務狀態為灰色。

用netdiag測試發現：
C:Program FilesSupport Tools>dcdiag.exe /test:dns

Domain Controller Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial required tests

Testing server: Default-First-Site-Nametonykorn97
Starting test: Connectivity
The host af7f2f57-5e57-4f10-a599-9fd42ac1e151._msdcs.kansho.com could not
be resolved to an
IP address. Check the DNS server, DHCP, server name, etc
Although the Guid DNS name
(af7f2f57-5e57-4f10-a599-9fd42ac1e151._msdcs.kansho.com) couldn't be
resolved, the server name (tonykorn97.kansho.com) resolved to the IP address
(172.25.1.100) and was pingable. Check that the IP address is
registered correctly with the DNS server.
......................... tonykorn97 failed test Connectivity

Doing primary tests

Testing server: Default-First-Site-Nametonykorn97

DNS Tests are running and not hung. Please wait a few minutes...

Running partition tests on : Schema

Running partition tests on : Configuration

Running partition tests on : kansho

Running enterprise tests on : kansho.com
Starting test: DNS
Test results for domain controllers:

DC: tonykorn97.kansho.com
Domain: kansho.com

TEST: Basic (Basc)
Error: No LDAP connectivity

TEST: Records registration (RReg)
Network Adapter [00000001] Realtek RTL8139 Family PCI Fast Eth
ernet NIC:
Error: Missing CNAME record at DNS server 172.25.20.183 :
af7f2f57-5e57-4f10-a599-9fd42ac1e151._msdcs.kansho.com

Warning: Missing DC SRV record at DNS server 172.25.20.183
:
_ldap._tcp.dc._msdcs.kansho.com
(Ignore the error if DNSAvoidRegisterRecord registry key or
its Group Policy
has been configured to prevent registration of this Record.
)

Error: Record registrations cannot be found for all the network a
dapters

Summary of DNS test results:

Auth Basc Forw Del Dyn RReg Ext
________________________________________________________________
Domain: kansho.com
tonykorn97 PASS FAIL n/a n/a n/a FAIL n/a

......................... kansho.com failed test DNS

C:Program FilesSupport Tools>

dns有問題

在dns服務中的_tcp.dc._msdcs.kansho.com下面增加_ldap的srv記錄，同時相應的增加_kerberos的srv記錄。
增加_tcp下面的條目