Disabled Forwarders-tab in DNS srv properties

  • Thread starter Thread starter Artur Schwartz
  • Start date Start date
A

Artur Schwartz

Hi !

New Win2K Srv with AD Integrated DNS.
Forward and Reverse zones works correctly
for my domain.

Problem: DNS Srv can't resolve "outside" hosts.
(nslookup, based on other dns, answers corectly)

From help : setup forwarders - but there is
a big problem, because forwarder-tab is disabled !

Enable forwarders checkbox, IPAddress, Add/Remove
buttons are grayed, and there is information that
"this is ROOT server".

What to do, to enable forwarders ?

Best Regards
 
Are you logged on as domain admin in the DNS management
utility?
If you right click the DNS server name and go to the
Forwarders tab is it grey here? Just wanted to confirm
what you were looking at.
Steve
 
Stevta said:
Are you logged on as domain admin in the DNS management
utility?
If you right click the DNS server name and go to the
Forwarders tab is it grey here? Just wanted to confirm
what you were looking at.
Yes,

There is only one user in the domain - Administrator
:-)
Please look at picture
ftp://ftp.rumia.edu.pl/pub/DNS.jpg

Thanks for quick answer

PS
I've setuped Windows 2K once or twice
with evaluation versions and DNS was working good,
now with PL version with SP2 some problems....
:-(
 
Hi Artur,
The forwarders and root hints are greyed out because your DC assumes it is
the Root DNS server for the world and will not resolve anything past itself.
This probably happened because DCpromo installed DNS for you. This creates a
"." zone in the DNS, if the DNS server contains this "." zone it will
forward queries and take on the roll of a root DNS server.

To allow forwards and root hints to work, delete the "." zone you see under
the forward lookup zone on your DNS server.

Mac
 
If the checkbox for the Forwarding option is grayed out, that means you have
a Root zone created. That looks like a period under your Forward Lookup
ZOnes. You can delete that, refresh the console or close the console and
re-open it, then go back into it and it will be available.

If this is the case, the reason it grays out if a Root zone exists, it
believes that it is a Root server and therefore it won't have to forward to
anything because it believes it's at the top of the DNS hierarchy. Once
deleted it, then it will forward out or use the Root Hints for outside
resolution, but Forwarding is much more efficient.

Now if the whole tab is disabled that you cannot get into the tab itself,
then we have a totally different issue and as Stevta mentions, it may point
to a permissions issue with the user account.

--
Regards,
Ace

Please direct all replies to the newsgroup so all can benefit.

Ace Fekay, MCSE 2000, MCSE+I, MCSA, MCT, MVP
Microsoft Windows MVP - Active Directory
 
Sorry Mac, didn't read your reply before I posted pretty much the same
response.
:-)

--
Regards,
Ace

Please direct all replies to the newsgroup so all can benefit.

Ace Fekay, MCSE 2000, MCSE+I, MCSA, MCT, MVP
Microsoft Windows MVP - Active Directory
--
=================================

Mac Ghani said:
Hi Artur,
The forwarders and root hints are greyed out because your DC assumes it is
the Root DNS server for the world and will not resolve anything past itself.
This probably happened because DCpromo installed DNS for you. This creates a
"." zone in the DNS, if the DNS server contains this "." zone it will
forward queries and take on the roll of a root DNS server.

To allow forwards and root hints to work, delete the "." zone you see under
the forward lookup zone on your DNS server.

Mac
 
Mac said:
To allow forwards and root hints to work, delete the "." zone you see under
the forward lookup zone on your DNS server.
Great Thanks !

Now my DNS works corectly.

It was quite simple, but not for me ...
:-)
 
In
Artur Schwartz said:
Yes, it helped.

No, user is in DomainAdmins Group.

Thanks a lot !

Best Regards

:-)




--
Regards,
Ace

Please direct all replies to the newsgroup so all can benefit.

Ace Fekay, MCSE 2000, MCSE+I, MCSA, MCT, MVP
Microsoft Windows MVP - Active Directory
 
AF> [...] it will forward out or use the Root Hints for outside
AF> resolution, but Forwarding is much more efficient.

Not universally. If both the forwarder and the forwardee have roughly the
same degree of IP connectivity, forwarding can actually be _less_ efficient
than direct query resolution in the event of cache misses.
 
Jonathan de Boyne Pollard said:
AF> [...] it will forward out or use the Root Hints for outside
AF> resolution, but Forwarding is much more efficient.

Not universally. If both the forwarder and the forwardee have roughly the
same degree of IP connectivity, forwarding can actually be _less_ efficient
than direct query resolution in the event of cache misses.

True. I was speaking of generality.

Ace
 
Back
Top