Troubleshooting Active Directory DNS issues

One useful command to check for the Active Directory Domain SRV records in the DNS is the following:

launch nslookup from the command prompt, then query using the command "

> ls -t srv DOMAIN

Where DOMAIN is the name of your domain.

The above mentioned command will fail if zone transfers are not allowed.

Another way to use nslookup to see if domain controllers can be found using DNS :

launch nslookup then enter the following commands :

1.  set type=srv

2.  _ldap._tcp.dc._msdcs.Active.Directory.local

Where Active.Directory.local is your active directory domain name.

More information can be found at the following article.