用dcpromo删除备用域控制器的时候显示：

由于以下原因，操作失败:

Active Directory 无法传送目录分区 CN=Schema,CN=Configuration,DC=kansho,DC=com 的剩余数据到域控制器 dellmail.kansho.com。

“由于 DNS 查找故障，DSA 操作无法进行。”

查看服务发现：
Remote Procedure Call (RPC)的启动类型和服务状态为灰色。

用netdiag测试发现：
C:Program FilesSupport Tools>dcdiag.exe /test:dns

Domain Controller Diagnosis

Performing initial setup:
Done gathering initial info.

Doing initial required tests

Testing server: Default-First-Site-Nametonykorn97
Starting test: Connectivity
The host af7f2f57-5e57-4f10-a599-9fd42ac1e151._msdcs.kansho.com could not
be resolved to an
IP address. Check the DNS server, DHCP, server name, etc
Although the Guid DNS name
(af7f2f57-5e57-4f10-a599-9fd42ac1e151._msdcs.kansho.com) couldn't be
resolved, the server name (tonykorn97.kansho.com) resolved to the IP address
(172.25.1.100) and was pingable. Check that the IP address is
registered correctly with the DNS server.
......................... tonykorn97 failed test Connectivity

Doing primary tests

Testing server: Default-First-Site-Nametonykorn97

DNS Tests are running and not hung. Please wait a few minutes...

Running partition tests on : Schema

Running partition tests on : Configuration

Running partition tests on : kansho

Running enterprise tests on : kansho.com
Starting test: DNS
Test results for domain controllers:

DC: tonykorn97.kansho.com
Domain: kansho.com

TEST: Basic (Basc)
Error: No LDAP connectivity

TEST: Records registration (RReg)
Network Adapter [00000001] Realtek RTL8139 Family PCI Fast Eth
ernet NIC:
Error: Missing CNAME record at DNS server 172.25.20.183 :
af7f2f57-5e57-4f10-a599-9fd42ac1e151._msdcs.kansho.com

Warning: Missing DC SRV record at DNS server 172.25.20.183
:
_ldap._tcp.dc._msdcs.kansho.com
(Ignore the error if DNSAvoidRegisterRecord registry key or
its Group Policy
has been configured to prevent registration of this Record.
)

Error: Record registrations cannot be found for all the network a
dapters

Summary of DNS test results:

Auth Basc Forw Del Dyn RReg Ext
________________________________________________________________
Domain: kansho.com
tonykorn97 PASS FAIL n/a n/a n/a FAIL n/a

......................... kansho.com failed test DNS

C:Program FilesSupport Tools>

dns有问题

在dns服务中的_tcp.dc._msdcs.kansho.com下面增加_ldap的srv记录，同时相应的增加_kerberos的srv记录。
增加_tcp下面的条目