SBS 2008 - Server Infrastructure Licensing - event id 4 and 38

Question

Hi everybody,
 I have these errors in Event Viewer
 The Additional Server Count Check in the Licensing component did not pass because error 0x8007200a occurred in function f1031 [WLTT].   The specified directory service attribute or value does not exist.
Make sure that your DNS server can be contacted and the following services are running: Active Directory Domain Services (NTDS), DNS Server (DNS), Kerberos Key Distribution Center (KDC). This server will be automatically shut down if the issue is not corrected
FOLLOWED BY
The Additional Server Count Check detected a condition in your environment that is out of compliance with the licensing policy. This server will be automatically shut down if the issue is not corrected in 58 day(s) 16 hour(s) 30 minute(s). Please look for additional
events for Additional Server Count Check to troubleshoot.
BEFORE these events we have 3 informational events:
Domain Controller Check passed.
Forest Trust Check passed.
FSMO Role Check passed.
We have just ONE server (the SBS 2008, not R2); we had two but the second one (Win2008 Srv) has been dismissed. No reference to the old server is found in AD, registry or other location (DNS, DHCP...). No event about the old server is recorded at all.
This server is also a DNS server; in its network properties it has itself as the DNS server (I mean: its IP, of course)
We have no problem in FMSO roles (checked with  "dcdiag /test:fsmocheck")  and the server is going on regularly (no issues with services, users, ...)
Any idea? I tried to solve this all by myself but with no result at all
Thanks
Cosimo
Milan, Italy

Answer 1

Hi Justin,
 thanks for your reply. This server was a clean install, but the domain existed before (with a SBS 2003).
I have a failed test with dcdiag /e /v
        Starting test: NCSecDesc
         * Security Permissions check for all NC's on DC SERVERNAME.
         The forest is not ready for RODC. Will skip checking ERODC ACEs.
         * Security Permissions Check for
           DC=ForestDnsZones,DC=DOMAINNAME,DC=msft
            (NDNC,Version 3)
         Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have 
            Replicating Directory Changes In Filtered Set
         access rights for the naming context:
         DC=ForestDnsZones,DC=DOMAINNAME,DC=msft
         * Security Permissions Check for
           DC=DomainDnsZones,DC=DOMAINNAME,DC=msft
            (NDNC,Version 3)
         Error NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS doesn't have 
            Replicating Directory Changes In Filtered Set
         access rights for the naming context:
         DC=DomainDnsZones,DC=DOMAINNAME,DC=msft
         * Security Permissions Check for
           CN=Schema,CN=Configuration,DC=DOMAINNAME,DC=msft
            (Schema,Version 3)
         * Security Permissions Check for
           CN=Configuration,DC=DOMAINNAME,DC=msft
            (Configuration,Version 3)
         * Security Permissions Check for
           DC=DOMAINNAME,DC=msft
            (Domain,Version 3)
         ......................... SERVERNAME failed test NCSecDesc
And BSA shows:
The DNS client is not configured to point only to the internal IP address of the server. For information about how to fix network settings, see "Managing Your Windows Small Business Server 2008 network" at the Microsoft Web site (http://go.microsoft.com/fwlink/?LinkId=115881).
+
There are no DNS name server (NS) resource records with SERVERNAME.DOMAINNAME.msft for the _msdcs delegation in the forward lookup zone astra.msft.
+
The DNS CNAME resource record for Connect in the forward lookup zone for Windows SBS 2008 does not exist.
What would you suggest to me?
thanks
Cosimo