Cannot edit a Domain Group Policy Object because of DNS settings – Case Study

Event ID: 6702

Situation: The client tried to edit a domain Group Policy Object (GPO) on a computer running Windows 2003 DC with DNS, he received the following error message:

The domain controller for Group Policy operations is not available. You may cancel this operation for this session or retry using one of the following domain controller choices:

The one with the Operations Master token for the PDC emulator
The one used by the Active Directory Snap-ins
Use any available domain controller

Troubleshooting: 1. Verified File and Printer Sharing for Microsoft Networks is enabled on the domain controller.

2. Verified the TCP/IP NetBIOS Helper service is enabled.

3. Checked the Event Viewer and found the following error:

Event Source: DNS

Event ID: 6702

Description: DNS server has updated its own host (A) records. In order to ensure that its DS-integrated peer DNS servers are able to replicate with this server, an attempt was made to update them with the new records through dynamic update. An error was encountered during this update, the record data is the error code.

Resolution: The DC was setup using the different IP range. After they changed the IP addresses, the DNS records had some old IP addresses. Deleting all non-existing IP fix the problem.

Post your questions, comments, feedbacks and suggestions

Contact a consultant