Ошибка dns сервера 4016

      Starting test: KccEvent
         A warning event occurred.  EventID: 0x800004C0
            Time Generated: 10/14/2013   00:12:48
            EvtFormatMessage failed (second call), error 15029 The substitution
string for insert index (%1) could not be found..
            (Event String (event log = Directory Service) could not be
            retrieved, error 0x3ab5)

This can be a tricky one. I see there is a KCC error. The KCC is the service that partners up DCs for replication within a site and uses the ISTG to create partnerships between sites and maintains replication topology.

I assume the following:

• All DCs, member servers and workstations are only using the DCs for DNS, meaning no outside DNS servers or the router is being used as a DNS server on any machine.
• None of the DCs are multihomed (more than one unteamed NIC, IP address, RRAS or iSCSI connection is on it).
• An ipconfig /all does not show WINS proxy or IP Routing enabled.
• The Windows firewall is disabled (done in Control Panel, Windows Firewall)
• Any antivirus software’s sercurity features have been disabled. AV is a major cause of AD DC communications and functionality problems if not properly configured to exclude AD and DC functions, files and folders.

—

Here’s more info on it:
http://eventid.net/display.asp?eventid=4016&eventno=1632&source=DNS&phase=1

—

If you use ADSI Edit, can you see the zones in the database? You can use my blog below on how to connect to the partitions to view the DNS zones. While you’re at it, you can check to make sure no duplicate zones exist.

Using ADSI Edit to Resolve Conflicting or Duplicate AD Integrated DNS zones
http://msmvps.com/blogs/acefekay/archive/2009/09/02/using-adsi-edit-to-resolve-conflicting-or-duplicate-ad-integrated-dns-zones.aspx 

—

Another suggestion is you could try the following, and it will work fine if you have only a handful of
DCs, but if you have numerous DCs and in many sites, I do NOT recommend this due to the complexity of the process and all DCs involved.

— Turn the zone into a Primary zone.
— Stop the DNS service
— Delete your zone(s)
— Delete the data in the system32\dns folder
— Delete the system32\config\netlogon.dns and netlogon.bak files
— Uninstall DNS — Do not restart the machine
— Reinstall DNS — Do not restart the machine
— Re-create the zone
— Enable updates
— ipconfig /registerdns
— net stop netlogon
— net start netlogon
— Makes sure the SRV records now exist and see if that helps.

—

Here’s some info on troubleshooting KCCEvents by the Microsoft Ask DS team:
http://blogs.technet.com/b/askds/archive/2008/10/31/troubleshooting-kcc-event-log-errors.aspx

—

If you have numerous DCs, and the above suggestions do not work, maybe the best bet is to demote the DC in question, then repromote it.

—

Ace Fekay
MVP, MCT, MCITP/EA, MCTS Windows 2008/R2 & Exchange 2007, Exchange 2010 EA, MCSE & MCSA 2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer
Microsoft MVP — Directory Services
Technical Blogs & Videos: http://www.delawarecountycomputerconsulting.com/

This post is provided AS-IS with no warranties or guarantees and confers no rights.

• Marked as answer by

  Monday, October 21, 2013 1:13 AM

      Starting test: KccEvent
         A warning event occurred.  EventID: 0x800004C0
            Time Generated: 10/14/2013   00:12:48
            EvtFormatMessage failed (second call), error 15029 The substitution
string for insert index (%1) could not be found..
            (Event String (event log = Directory Service) could not be
            retrieved, error 0x3ab5)

This can be a tricky one. I see there is a KCC error. The KCC is the service that partners up DCs for replication within a site and uses the ISTG to create partnerships between sites and maintains replication topology.

I assume the following:

• All DCs, member servers and workstations are only using the DCs for DNS, meaning no outside DNS servers or the router is being used as a DNS server on any machine.
• None of the DCs are multihomed (more than one unteamed NIC, IP address, RRAS or iSCSI connection is on it).
• An ipconfig /all does not show WINS proxy or IP Routing enabled.
• The Windows firewall is disabled (done in Control Panel, Windows Firewall)
• Any antivirus software’s sercurity features have been disabled. AV is a major cause of AD DC communications and functionality problems if not properly configured to exclude AD and DC functions, files and folders.

—

Here’s more info on it:
http://eventid.net/display.asp?eventid=4016&eventno=1632&source=DNS&phase=1

—

If you use ADSI Edit, can you see the zones in the database? You can use my blog below on how to connect to the partitions to view the DNS zones. While you’re at it, you can check to make sure no duplicate zones exist.

Using ADSI Edit to Resolve Conflicting or Duplicate AD Integrated DNS zones
http://msmvps.com/blogs/acefekay/archive/2009/09/02/using-adsi-edit-to-resolve-conflicting-or-duplicate-ad-integrated-dns-zones.aspx 

—

Another suggestion is you could try the following, and it will work fine if you have only a handful of
DCs, but if you have numerous DCs and in many sites, I do NOT recommend this due to the complexity of the process and all DCs involved.

— Turn the zone into a Primary zone.
— Stop the DNS service
— Delete your zone(s)
— Delete the data in the system32\dns folder
— Delete the system32\config\netlogon.dns and netlogon.bak files
— Uninstall DNS — Do not restart the machine
— Reinstall DNS — Do not restart the machine
— Re-create the zone
— Enable updates
— ipconfig /registerdns
— net stop netlogon
— net start netlogon
— Makes sure the SRV records now exist and see if that helps.

—

Here’s some info on troubleshooting KCCEvents by the Microsoft Ask DS team:
http://blogs.technet.com/b/askds/archive/2008/10/31/troubleshooting-kcc-event-log-errors.aspx

—

If you have numerous DCs, and the above suggestions do not work, maybe the best bet is to demote the DC in question, then repromote it.

—

Ace Fekay
MVP, MCT, MCITP/EA, MCTS Windows 2008/R2 & Exchange 2007, Exchange 2010 EA, MCSE & MCSA 2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer
Microsoft MVP — Directory Services
Technical Blogs & Videos: http://www.delawarecountycomputerconsulting.com/

This post is provided AS-IS with no warranties or guarantees and confers no rights.

• Marked as answer by

  Monday, October 21, 2013 1:13 AM