Fix: Event ID 4013 – AD-Integrated DNS Zone Not Loading After dcpromo
If you just promoted a new domain controller and you see Event ID 4013 in the DNS Server event log saying the AD-integrated zone cant be loaded, dont panic. This is pretty common and usually DNS just started before AD DS was fully ready.
The error typically looks like this:
Source: Microsoft-Windows-DNS-Server-Service
Event ID: 4013
Description: The DNS server was unable to open the Active Directory. This DNS server is configured to use directory service information and can not operate without access to the directory. The DNS server will wait for the directory to start. If the DNS server is started but the appropriate event has not been logged, then the DNS server is still waiting for the directory to start.
Basically DNS tried to load the zone from AD but AD wasnt done starting yet. Here is what to do:
- First just restart the DNS Server service. Most of the time this is enough:
net stop dns && net start dns - If that doesnt help, check if AD is actually healthy:
dcdiag /v - Make sure the DC can reach itself via DNS. The preferred DNS on the NIC should point to its own IP (or 127.0.0.1):
nslookup yourdomain.local 127.0.0.1 - If the zone still wont load try restarting the Netlogon service too:
net stop netlogon && net start netlogon - Last resort: full reboot of the DC. Ive had cases where nothing else worked and a simple reboot fixed it.
Important: Make sure you set the DNS server address BEFORE you run dcpromo / promote the DC. If DNS is pointing somewhere else during promotion this error is almost guaranteed.
Also worth checking: if you have multiple DCs make sure replication is working (repadmin /replsummary). Sometimes the zone data just hasnt replicated yet and you need to give it a few minutes.
Thats basically it. In 90% of cases a DNS service restart right after the reboot is enough. The event looks scary but its usually harmless if you deal with it quickly.
Hope this helps someone. If you have a different scenario leave a comment below or send me an email through the contact page.