Select the product you need help with

Windows Server\DNS\Event 6268 on trying to query WPAD

Article ID: 2003485 - View products that this article applies to.

Symptoms

The Windows Server 2003 and Windows Server 2008 DNS Server may be unable to resolve queries for WPAD 'A' records in zones it hosts (for example, wpad.contoso.com). The following error will be logged in the Application Log:

Source: DNS

Category: None

Type: Error

Event ID: 6268

Description:

The global query block list is a feature that prevents attacks on your network by blocking DNS queries for specific host names. This feature has caused the DNS server to fail a query with error code NAME ERROR for wpad.contoso.com. even though data for this DNS name exisits in the DNS database. Other queries in all locally authoritative zones for other names that begin with labels in the block list will also fail, but no event will be logged when further queries are blocked until the DNS server service on this computer is restarted. See product documentation about this feature and instructions on how to configure it.

Back to the top | Give Feedback

Cause

This behavior is by design. The error indicates that a wpad entry exists in the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DNS\Parameters\GlobalQueryBlockList value. The presence of a name in this key prevents any corresponding 'A' records from being returned by the DNS Server.

Back to the top | Give Feedback

Resolution

To allow WPAD entries to be returned, remove the WPAD entry from the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DNS\Parameters\GlobalQueryBlockList value by using these steps:

Open the Registry Editor and navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DNS\Parameters
Double-click on the GlobalQueryBlockList value to open the editor.
Highlight the wpad entry and press the delete key
Click 'OK' and 'OK' again to return to the main window
Restart the 'DNS Server' service

Important: By default, a wpad and isatap value will be present. Do not delete the isatap value.

Back to the top | Give Feedback

More Information

For more information about configuring WPAD, please see these documents:

http://technet.microsoft.com/en-us/library/cc995158.aspx

http://technet.microsoft.com/en-us/library/cc995261.aspx

Back to the top | Give Feedback

Note This is a "FAST PUBLISH" article created directly from within the Microsoft support organization. The information contained herein is provided as-is in response to emerging issues. As a result of the speed in making it available, the materials may include typographical errors and may be revised at any time without notice. See Terms of Use

(http://go.microsoft.com/fwlink/?LinkId=151500)

for other considerations.

Back to the top | Give Feedback