Alert generating rule for the DNS Service.
The NetBIOS protocol was the principal network protocol that early versions of Windows used. In conjunction with Windows Internet Name Service (WINS), NetBIOS supports a simple, nonhierarchical naming system. You can configure DNS servers and clients to support NetBIOS and WINS as a supplement to the Domain Name System (DNS) protocol.
The DNS server failed to initialize WINSR reverse lookup through NetBIOS adapter status lookup.
Configure WINSR settings
This problem may be due to an incorrect configuration of Windows Internet Name Service (WINS) reverse (WINSR) lookup on the DNS server. The actions that you take depend on whether WINSR lookup must be supported by the DNS server. If the DNS server must support WINSR reverse lookup, restart the server, and then verify that the NetBIOS over TCP/IP configuration for TCP/IP client properties on the computer is set correctly.
To perform this procedure, you must have membership in Administrators, or you must have been delegated the appropriate authority.
WINSR lookup support not required
If WINSR lookup is not required, remove WINSR records from the zone, and then reload the modified zones or restart the DNS Server service.
To remove WINSR records from a zone:
1.On the DNS Server, start Server Manager. To start Server Manager, click Start, click Administrative Tools, and then click Server Manager.
2.In the console tree, expand Roles, expand DNS Server, expand DNS, and then expand the DNS server.
3.Expand Reverse Lookup Zones, and then click the zone that contains the WINSR resource record.
4.In the right pane, right-click the WINSR resource record, and then click Delete.
5.In the console tree, right-click the zone, and then click Reload.
If reloading the zone was not successful, restart the DNS Server service.
To restart the DNS Server service:
In the console tree, right-click the DNS server, click All Tasks, and then click Restart.
WINSR lookup support required
To configure NetBIOS/WINS configuration for TCP/IP client properties on the computer:
1.On the DNS server, click Start, click Control Panel, click Control Panel Home, and then under Network and Internet click View network status and tasks.
2.Click View status for the connection that you want to configure, and then click Properties.
3.Click Internet Protocol version 4 (TCP/IPv4), click Properties, click Advanced, and then click the WINS tab.
4.In NetBIOS setting, click Enable NetBIOS over TCP/IP.
http://technet.microsoft.com/en-us/library/dd349613(v=ws.10).aspx
Target | Microsoft.Windows.Server.DNS.Server | ||
Category | Alert | ||
Enabled | True | ||
Alert Generate | True | ||
Alert Severity | Error | ||
Alert Priority | Normal | ||
Remotable | True | ||
Alert Message |
| ||
Event Log | DNS Server |
ID | Module Type | TypeId | RunAs |
---|---|---|---|
DS | DataSource | Microsoft.Windows.EventProvider | Default |
Alert | WriteAction | System.Health.GenerateAlert | Default |
<Rule ID="Microsoft.Windows.Server.DNS.WINSConnector.Initialize.Failed" Enabled="true" Target="Microsoft.Windows.Server.DNS.Server" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">
<Category>Alert</Category>
<DataSources>
<DataSource ID="DS" TypeID="Windows!Microsoft.Windows.EventProvider">
<ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>
<LogName>DNS Server</LogName>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="UnsignedInteger">131</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="Alert" TypeID="Health!System.Health.GenerateAlert">
<Priority>1</Priority>
<Severity>2</Severity>
<AlertOwner/>
<AlertMessageId>$MPElement[Name="Microsoft.Windows.Server.DNS.WINSConnector.Initialize.Failed.AlertMessage"]$</AlertMessageId>
<AlertParameters>
<AlertParameter1>$Data/EventDisplayNumber$</AlertParameter1>
<AlertParameter2>$Data/EventSourceName$</AlertParameter2>
<AlertParameter3>$Data/Channel$</AlertParameter3>
<AlertParameter4>$Data/EventDescription$</AlertParameter4>
</AlertParameters>
<Suppression>
<SuppressionValue>$Data/EventDisplayNumber$</SuppressionValue>
<SuppressionValue>$Data/LoggingComputer$</SuppressionValue>
</Suppression>
<Custom1/>
<Custom2/>
<Custom3/>
<Custom4/>
<Custom5/>
<Custom6/>
<Custom7/>
<Custom8/>
<Custom9/>
<Custom10/>
</WriteAction>
</WriteActions>
</Rule>