Windows Server\DNS\Event 6268 on trying to query WPAD

Article translations Article translations
Close Close
Article ID: 2003485 - View products that this article applies to.
Expand all | Collapse all

Symptoms

The Windows Server 2003 and Windows Server 2008 DNS Server may be unable to resolve queries for WPAD 'A' records in zones it hosts (for example, wpad.contoso.com).  The following error will be logged in the Application Log:

 
Source:  DNS
Category: None
Type: Error
Event ID: 6268
Description:
The global query block list is a feature that prevents attacks on your network by blocking DNS queries for specific host names.  This feature has caused the DNS server to fail a query with error code NAME ERROR for wpad.contoso.com. even though data for this DNS name exisits in the DNS database.  Other queries in all locally authoritative zones for other names that begin with labels in the block list will also fail, but no event will be logged when further queries are blocked until the DNS server service on this computer is restarted.  See product documentation about this feature and instructions on how to configure it.

Cause

This behavior is by design.  The error indicates that a wpad entry exists in the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DNS\Parameters\GlobalQueryBlockList value.  The presence of a name in this key prevents any corresponding 'A' records from being returned by the DNS Server.

Resolution

To allow WPAD entries to be returned, remove the WPAD entry from the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DNS\Parameters\GlobalQueryBlockList value by using these steps:

  1. Open the Registry Editor and navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DNS\Parameters
  2. Double-click on the GlobalQueryBlockList value to open the editor.
  3. Highlight the wpad entry and press the delete key
  4. Click 'OK' and 'OK' again to return to the main window
  5. Restart the 'DNS Server' service

Important:  By default, a wpad and isatap value will be present.  Do not delete the isatap value.

More Information

Note This is a "FAST PUBLISH" article created directly from within the Microsoft support organization. The information contained herein is provided as-is in response to emerging issues. As a result of the speed in making it available, the materials may include typographical errors and may be revised at any time without notice. See Terms of Use for other considerations.

Properties

Article ID: 2003485 - Last Review: November 6, 2009 - Revision: 1.0
APPLIES TO
  • Windows Small Business Server 2008 Premium
  • Windows Small Business Server 2008 Standard
  • Windows Server 2008 Standard
  • Windows Server 2008 Enterprise
Keywords: 
KB2003485

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com