Event ID 11196 — DNS Client Deregistration

Applies To: Windows Server 2008 R2

A computer that is configured to use Dynamic Host Configuration Protocol (DHCP) to obtain IP addresses can automatically register its IP address and Domain Name System (DNS) name with the DNS server that is authoritative for the zone that hosts their domains. This eliminates the need for an administrator to manage host (A or AAAA) resource records for client computers. When DHCP assigns a new address to a computer, the DHCP client can request that its previous address be removed from the DNS server. This process is called deregistration. Problems with automatic deregistration do not prevent a computer from accessing the network, but they can cause names to be resolved to incorrect addresses.

Event Details

Product: Windows Operating System
ID: 11196
Source: DnsApi
Version: 6.1
Symbolic Name: EVENT_DNSAPI_DEREGISTRATION_FAILED_SECURITY_PRIMARY_DN
Message: The system failed to update and remove host (A) resource records for the network adapter with these settings:

Adapter Name: %1
Host Name: %2
Primary Domain Suffix: %3
DNS server list:
%4
Sent update to server: %5
IP Address(es):
%6
%The reason for this failure was a security-related problem. The cause of this could be that your computer does not have permission to remove and update the specific DNS domain name or IP addresses that are configured for this adapter, or there might have been a problem negotiating valid credentials with the DNS server during the processing of the update request.

To update or remove DNS host (A) resource records using the specific DNS domain name and IP address for this adapter, contact your network administrator.

Resolve

Contact your network administrator

To resolve this problem, contact your network administrator and provide the information in the event message.

If you are a network administrator, see Troubleshooting Dynamic Updates (https://go.microsoft.com/fwlink/?LinkId=103842) for information about troubleshooting DNS registration.

Verify

Use the ipconfig /registerdns command to register the computer's network name and address with a DNS server and then check the event log for errors.

To perform this procedure, you must have membership in Administrators, or you must have been delegated the appropriate authority.

To register the computer's network name and address with a DNS server:

  1. On the DNS client, open a command prompt. To open an elevated Command Prompt window, click Start, point to All Programs, click Accessories, right-click Command Prompt, and then click Run as administrator.

  2. Type the following command, and then press ENTER:

    ipconfig /registerdns

Wait 15 minutes, and then check the event log to verify that a DNSapi event with an ID in the range 11180 through 11197 was not logged after you ran the command.

DNS Client Deregistration

DNS Infrastructure