incorrect domain suffix search list W2K3 and PSP7.60A

[Pieter 't Hart]

Just installed new server with W2K3 and PSP 7.60A
All seems fine but system cannot contact WSUS-server (and any other servers in same DNS-domain) by shortname.
Seems like default-domain suffix is not used when doing DNS-queries or domain-suffix is faulty (ip-adresses instead of names!).

Any tips how to troubleshoot this?

C:\>ipconfig /all
Windows IP Configuration
Host Name . . . . . . . . . . . . : nlw-db10
Primary Dns Suffix . . . . . . . : naaldwijk.intranet.int
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : 10.1.1.91
10.1.1.92

C:\>nslookup
Default Server: nlw-dc02.naaldwijk.intranet.int
Address: 10.1.1.92
> nlw-dc02
Server: nlw-dc02.naaldwijk.intranet.int
Address: 10.1.1.92
*** nlw-dc02.naaldwijk.intranet.int can't find nlw-dc02: Non-existent domain
> nlw-dc02.naaldwijk.intranet.int
Server: nlw-dc02.naaldwijk.intranet.int
Address: 10.1.1.92
Name: nlw-dc01.naaldwijk.intranet.int
Address: 10.1.1.92
>

[Tim Benton]

Make sure you have your TCP/IP stack pointed at a functioning DNS server, either a private or a public IP should work fine. I just had this situation on a new Proliant install and I pointed my DNS at my private Gateway IP address (192.168.0.1) and it worked fine.

To test you can open up a cmd window and try to ping a known functioning site like www.novell.com. If that doesn't work, try to ping your dns server(s) on the public side of your firewall. If that doesn't work try pinging your private gateway address.

Try taking out your domain suffix if the above doesn't get you working.

[Pieter 't Hart]

Timothy, i just recently saw your answer.
Yes we do have a working nameserver.
and i can resolve names using FQDN.
and it worked before applying the PSP.

But after installation of the PSP my dns-suffix searchlist is changed ! instead of attaching my own dns-suffix (naaldwijk.intranet.int) suddenly it attached the ip-adresses of the dns-servers instead of the domain-names.