Here’s a AD DNS Screwup I have seen firsthand | Paul's esoteric meanderings

Mon, 11 Aug 2008 06:03:30 GMT

PingBack from http://neuralfibre.com/paul/it/heres-a-ad-dns-screwup-i-have-seen-firsthand

Don't be THAT guy... Assault by Security Template

Microsoft Enterprise Networking Team — Thu, 11 Sep 2008 19:35:25 GMT

Introduction to the “Don’t be THAT guy” blog: I come in to work every day and get calls

re: Don't be THAT guy... The case of the missing DNS zone

hilde — Tue, 07 Oct 2008 16:06:46 GMT

Great info - we had a similar event take place when an admin deleted the DNS zone from a DC that was thought to be having repl issues as a 'step' in troubleshooting. Well, it wasn't having repl issues but shortly after his efforts, there were LOTS of issues with repl being just one. we quickly recovered functionality but in the wrong way: we had a lag site DC, made the AD-i zone there a standard pri zone, copied the text file back over the the PDCE and made a 'new' primary zone, based on that file, then converted it to AD-i. In hindsight, the auth restore was the way to go and we encountered issues from this 'fix' for quite some time. Unfortunately, we just didn't think it through while our world was crumbling around us. Keep up the great postings!