Force a domain controller to re-register AD DNS records without restarting netlogon?
In the past, I've been in a situation troubleshooting the dynamic registration of AD specific DNS records from domain controllers against a 3rd party DNS server. As far as I'm aware, the netlogon service is responsible for these registrations and does a full pass each time it is started and on some regular interval (once an hour?).
So if I don't want to wait for the regular interval and I'd rather not restart the netlogon service (or reboot the DC), is there any other way to coerce netlogon into re-registering these records?
ipconfig /registerdns
works for the DC's own A/PTR records. But I need a similar method for the rest of the AD SRV/A/CNAME records.
The closest thing I found in my web searching was this blog post which talks about netdiag /fix
. But apparently the netdiag utility no longer exists and the post implies that it would only re-register things that are missing. I've also tried various combinations of dcdiag /fix
with no luck.
You are correct, ipconfig /registerdns
only registers the main A and PTR records for a server; netdiag
is obsolete and dcdiag
only tests whether the proper DNS records are correctly registered, it doesn't actually fix them if they are not.
You can use nltest /DSREGDNS
for this purpose; it should be available on any computer, even client ones; if running it from a non-DC computer, you can specify the DC you want to run it against using the /SERVER:<servername>
parameter.
The quickest and simplest way is anyway to just restart the netlogon
service on the DC that needs re-registering its DNS records.