新建额外域后，主域有ntds kcc警告

ward

新建额外域后发现在主域上有警告：
The attempt to establish a replication link for the following writable directory partition failed.

Directory partition:
CN=Configuration,DC=test
Source domain controller:
CN=NTDS Settings,CN=SC01F11,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=test
Source domain controller address:
523a28af-3ba9-4dd9-8aeb-4a2700962751._msdcs.test
Intersite transport (if any):


This domain controller will be unable to replicate with the source domain controller until this problem is corrected.  

User Action
Verify if the source domain controller is accessible or network connectivity is available.

Additional Data
Error value:
8524 The DSA operation is unable to proceed because of a DNS lookup failure.

跑了一下dcdiag，主域都正常，额外域有点问题，如下：
D:\\>dcdiag /v

Domain Controller Diagnosis

Performing initial setup:
   * Verifying that the local machine sc01f11, is a DC.
   * Connecting to directory service on server sc01f11.
   * Collecting site info.
   * Identifying all servers.
   * Identifying all NC cross-refs.
   * Found 2 DC(s). Testing 1 of them.
   Done gathering initial info.

Doing initial required tests

   Testing server: Default-First-Site-Name\\SC01F11
      Starting test: Connectivity
         * Active Directory LDAP Services Check
         The host 523a28af-3ba9-4dd9-8aeb-4a2700962751._msdcs.scc could not be
esolved to an
         IP address.  Check the DNS server, DHCP, server name, etc
         Although the Guid DNS name
         (523a28af-3ba9-4dd9-8aeb-4a2700962751._msdcs.scc) couldn\'t be
         resolved, the server name (sc01f11.scc) resolved to the IP address
         (192.168.3.4) and was pingable.  Check that the IP address is
         registered correctly with the DNS server.
         ......................... SC01F11 failed test Connectivity

Doing primary tests

   Testing server: Default-First-Site-Name\\SC01F11
      Skipping all tests, because server SC01F11 is
      not responding to directory service requests
      Test omitted by user request: Topology
      Test omitted by user request: CutoffServers
      Test omitted by user request: OutboundSecureChannels
      Test omitted by user request: VerifyReplicas
      Test omitted by user request: VerifyEnterpriseReferences
      Test omitted by user request: CheckSecurityError

   Running partition tests on : ForestDnsZones
      Starting test: CrossRefValidation
         ......................... ForestDnsZones passed test CrossRefValidatio

      Starting test: CheckSDRefDom
         ......................... ForestDnsZones passed test CheckSDRefDom

   Running partition tests on : DomainDnsZones
      Starting test: CrossRefValidation
         ......................... DomainDnsZones passed test CrossRefValidatio

      Starting test: CheckSDRefDom
         ......................... DomainDnsZones passed test CheckSDRefDom

   Running partition tests on : Schema
      Starting test: CrossRefValidation
         ......................... Schema passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... Schema passed test CheckSDRefDom

   Running partition tests on : Configuration
      Starting test: CrossRefValidation
         ......................... Configuration passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... Configuration passed test CheckSDRefDom

   Running partition tests on : scc
      Starting test: CrossRefValidation
         ......................... scc passed test CrossRefValidation
      Starting test: CheckSDRefDom
         ......................... scc passed test CheckSDRefDom

   Running enterprise tests on : scc
      Starting test: Intersite
         Skipping site Default-First-Site-Name, this site is outside the scope
         provided by the command line arguments provided.
         ......................... scc passed test Intersite
      Starting test: FsmoCheck
         GC Name: \\\\sc01f01.scc
         Locator Flags: 0xe00003fd
         PDC Name: \\\\sc01f01.scc
         Locator Flags: 0xe00003fd
         Time Server Name: \\\\sc01f11.scc
         Locator Flags: 0xe00001f8
         Preferred Time Server Name: \\\\sc01f01.scc
         Locator Flags: 0xe00003fd
         KDC Name: \\\\sc01f11.scc
         Locator Flags: 0xe00001f8
         ......................... scc passed test FsmoCheck
      Test omitted by user request: DNS
      Test omitted by user request: DNS

问题出在哪，请高手指点

a龙

The host 523a28af-3ba9-4dd9-8aeb-4a2700962751._msdcs.scc could not be
esolved to an
IP address. Check the DNS server, DHCP, server name, etc
Although the Guid DNS name
(523a28af-3ba9-4dd9-8aeb-4a2700962751._msdcs.scc) couldn\'t be
resolved, the server name (sc01f11.scc) resolved to the IP address
(192.168.3.4) and was pingable.


很大可能是DNS问题，在AD配置里，很多问题都是DNS造成的。

1。检查DNS服务的配置
2。检查DC的DNS服务器的IP,建议交叉配置
比如A机的DNS SERVER配置为B为主DNS，A为辅DNS;
     B机的DNS SERVER配置为A为主DNS，B为辅DNS;