Microsoft KB Archive Search

Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

  1. Home
  2. The DNS Zone Transfer setting is not retained in Windows Server 2008

The DNS Zone Transfer setting is not retained in Windows Server 2008

View products that this article applies to.

Symptoms

Consider the following scenario:
  • You install Windows Server 2008 or Windows Server 2008 R2.
  • You install the DNS Server role.
  • You turn on the Allow Zone Transfers setting in the DNS Microsoft Management Console (MMC) snap-in.
  • You configure zone transfers to specific servers.
  • You turn off the Allow Zone Transfers setting.
In this scenario, the Allow Zone Transfers setting may not be retained when you restart the DNS Server service. After you restart the DNS Server service, the Allow Zone Transfers setting is unexpectedly turned on.

↑ Back to the top

Cause

This issue occurs because the registry is not modified correctly when the Allow Zone Transfers setting is turned off.

↑ Back to the top

Workaround

To work around this issue, use one of the following methods.

Method 1: Modify the registry

Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:
322756 How to back up and restore the registry in Windows

Delete the following registry value after you turn off the Allow Zone Transfers setting:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\DNS Server\Zones\SecondaryServers

Method 2: Use Dnscmd.exe

Use the following Dnscmd.exe command to disable zone transfers:
dnscmd server_name /ZoneResetSecondaries domain_name /NoXfr

↑ Back to the top

Keywords: kb, kbentirenet, kbprb, kbnetwork

↑ Back to the top

Article Info
Article ID : 2514953
Revision : 1
Created on : 1/7/2017
Published on : 3/4/2011
Exists online : False
Views : 381