Can't join Domain after Takeover - Small Business Server (SBS)

Hi @cpzengel

as you can see in the ‘daemon.log’:

daemon.log - bind9 start <click to enlarge>

Nov 12 09:30:18 ucs-master named[5993]: ----------------------------------------------------
Nov 12 09:30:18 ucs-master named[5993]: BIND 9 is maintained by Internet Systems Consortium,
Nov 12 09:30:18 ucs-master named[5993]: Inc. (ISC), a non-profit 501©(3) public-benefit
Nov 12 09:30:18 ucs-master named[5993]: corporation. Support and training for BIND 9 are
Nov 12 09:30:18 ucs-master named[5993]: available at https://www.isc.org/support
Nov 12 09:30:18 ucs-master named[5993]: ----------------------------------------------------
Nov 12 09:30:18 ucs-master named[5993]: adjusted limit on open files from 4096 to 1048576
Nov 12 09:30:18 ucs-master named[5993]: found 2 CPUs, using 2 worker threads
Nov 12 09:30:18 ucs-master named[5993]: using 2 UDP listeners per interface
Nov 12 09:30:18 ucs-master named[5993]: using up to 4096 sockets
Nov 12 09:30:18 ucs-master named[5993]: loading configuration from ‘/etc/bind/named.conf.samba4’
Nov 12 09:30:18 ucs-master named[5993]: reading built-in trusted keys from file ‘/etc/bind/bind.keys’
Nov 12 09:30:18 ucs-master named[5993]: using default UDP/IPv4 port range: [1024, 65535]
Nov 12 09:30:18 ucs-master named[5993]: using default UDP/IPv6 port range: [1024, 65535]
Nov 12 09:30:18 ucs-master named[5993]: listening on IPv6 interfaces, port 53
Nov 12 09:30:18 ucs-master named[5993]: listening on IPv4 interface lo, 127.0.0.1#53
Nov 12 09:30:18 ucs-master named[5993]: listening on IPv4 interface eth0, 10.0.0.4#53
Nov 12 09:30:18 ucs-master named[5993]: listening on IPv4 interface eth0:1, 10.0.0.200#53
Nov 12 09:30:18 ucs-master named[5993]: listening on IPv4 interface docker0, 172.17.42.1#53
Nov 12 09:30:18 ucs-master named[5993]: generating session key for dynamic DNS
Nov 12 09:30:18 ucs-master named[5993]: sizing zone task pool based on 1 zones
Nov 12 09:30:18 ucs-master named[5993]: Loading ‘samba4.zone’ using driver dlopen
Nov 12 09:30:19 ucs-master named[5993]: samba_dlz: started for DN DC=domain,DC=local
Nov 12 09:30:19 ucs-master named[5993]: samba_dlz: starting configure
Nov 12 09:30:19 ucs-master named[5993]: samba_dlz: trying partition ‘CN=MicrosoftDNS,CN=System,DC=domain,DC=local’
Nov 12 09:30:19 ucs-master named[5993]: samba_dlz: configured writeable zone ‘0.0.10.in-addr.arpa’
Nov 12 09:30:19 ucs-master named[5993]: samba_dlz: pre-W2k3 zone found
Nov 12 09:30:19 ucs-master named[5993]: samba_dlz: trying partition ‘CN=MicrosoftDNS,DC=DomainDnsZones,DC=domain,DC=local’
Nov 12 09:30:19 ucs-master named[5993]: samba_dlz: configured writeable zone ‘domain.local’
Nov 12 09:30:19 ucs-master named[5993]: samba_dlz: trying partition ‘CN=MicrosoftDNS,DC=DomainDnsZones,DC=domain,DC=local’
Nov 12 09:30:19 ucs-master named[5993]: samba_dlz: configured writeable zone ‘myself.dyndns.org
Nov 12 09:30:19 ucs-master named[5993]: samba_dlz: Ignoring dnsZone _msdcs.domain.local
Nov 12 09:30:19 ucs-master named[5993]: set up managed keys zone for view _default, file ‘managed-keys.bind’

the Zone ‘_msdcs.domain.local’ is ignored because there is a ‘pre-W2k3 zone’ found - a so called ‘legacy zone’.

There is a Script to migrate_legacy_dns_zones.sh (10,5 KB), you might give it a try to automatically fix that issue.