Skip to content

Add Environment Validator TSG: AzStackHci_DNS_ActiveDirectoryDomainName (Active Directory Domain Name Resolution)#309

Open
1008covingtonlane wants to merge 2 commits into
Azure:mainfrom
1008covingtonlane:tsg-dns-ad-domainname
Open

Add Environment Validator TSG: AzStackHci_DNS_ActiveDirectoryDomainName (Active Directory Domain Name Resolution)#309
1008covingtonlane wants to merge 2 commits into
Azure:mainfrom
1008covingtonlane:tsg-dns-ad-domainname

Conversation

@1008covingtonlane

Copy link
Copy Markdown
Collaborator

What

Adds a customer-facing Environment Validator troubleshooting guide for the DNS Active Directory domain name resolution check, plus a README index entry.

This check confirms that each Azure Local node can resolve the cluster's Active Directory domain name (the AD domain FQDN) against every configured DNS server. It runs at deployment, add-node, and the pre-update health check, and most often blocks a pending update or an add-node operation. It is reported under two names, both documented here:

  • AzStackHci_DNS_ActiveDirectoryDomainName (the rolled-up, per-cluster result)
  • AzStackHci_DNS_Test_ActiveDirectory_DomainName_Resolution (the per-node, per-DNS-server detail result)

Contents

  • At-a-glance ownership, impact, and effort, plus "who owns this fix" and "where a node's DNS comes from"
  • Where the failure appears (HealthCheckResult JSON, Get-SolutionUpdate, EventID 17205, Azure portal)
  • Example failure signatures and how to identify the affected nodes
  • Remediation (point the node at a DNS server that resolves the AD domain, normally a domain controller, or add a conditional forwarder for the AD domain), verification, and a glossary

Validation

Live-validated end to end on Azure Local 23H2 (build 2607): the documented failure was injected on a node, the check failed with the documented signature and was discoverable on the documented surfaces, the documented remediation was applied, and the check returned to success. The guide is consistent with the Environment Validator source for this check.

This is a customer network and Active Directory configuration check (owned by the customer's AD or DNS administrator). It is not a Microsoft software defect and not an OEM hardware or firmware issue.

…me (Active Directory Domain Name Resolution)

Customer remediation guide for the DNS Active Directory domain name
resolution check. Documents both reported names
(AzStackHci_DNS_ActiveDirectoryDomainName aggregated and
AzStackHci_DNS_Test_ActiveDirectory_DomainName_Resolution per-node detail),
where the failure appears, the failure signatures, node identification,
consequences, the DNS-client / conditional-forwarder remediation, and a
glossary. Live-validated Grade A on Azure Local 23H2 build 2607.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Adds a new Environment Validator troubleshooting guide (TSG) documenting how to diagnose and remediate failures of the DNS Active Directory domain name resolution validator (AzStackHci_DNS_ActiveDirectoryDomainName / AzStackHci_DNS_Test_ActiveDirectory_DomainName_Resolution), and indexes it from the EnvironmentValidator README.

Changes:

  • Introduces a customer-facing TSG with detection paths (health check JSON, Get-SolutionUpdate, Event Log, portal), remediation, and verification steps for AD domain DNS resolution failures.
  • Adds a README entry linking to the new troubleshooting guide.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 3 comments.

File Description
TSG/EnvironmentValidator/Troubleshooting-DNS-ActiveDirectory-DomainName-Resolution.md New TSG documenting diagnosis/remediation/verification for the AD domain DNS resolution Environment Validator check.
TSG/EnvironmentValidator/README.md Adds the new TSG to the Environment Validator index list.

…cap Get-WinEvent

- Filter HealthCheckResult.EnvironmentChecker.*.json so the newest file is not a
  non-Environment-Validator result (avoids false no-failures).
- Add -MaxEvents 2000 to the Event ID 17205 query for responsiveness.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants