Windows Server 2008 and Windows Server 2008 R2 DNS Servers may fail to resolve queries for some top-level domains

This article provides a solution to an issue where Domain Name System (DNS) Servers may fail to resolve queries for names in certain top-level domains when name resolution is provided by root hints.

Applies to:   Windows Server 2012 R2
Original KB number:   968372

Symptom

When name resolution is provided by root hints, Windows Server 2008 DNS and Windows Server 2008 R2 DNS Servers may fail to resolve queries for names in certain top-level domains. When this problem happens, it will continue until the DNS Server cache is cleared or the DNS Server service is restarted. The problem can be seen with domains like .co.uk, .cn, .biz, and .br, but isn't limited to these domains.

When the problem is happening, a nslookup command issued for an affected name will return the error "server failed". A network trace will show that the DNS server doesn't send any traffic for such a request to the Internet. No events related to a problem are reported in the DNS Event Log.

This problem doesn't happen if DNS Server is configured to use forwarders for Internet name resolution instead of root hints.

Resolution

To resolve the issue and continue using root hints, change the MaxCacheTTL registry value to two days or greater.

Note

Serious problems might occur if you modify the registry incorrectly by using Registry Editor or another method. These problems might require you to reinstall the operating system. Microsoft cannot guarantee that these problems can be solved. Modify the registry at your own risk.

  1. Start Registry Editor (regedit.exe).

  2. Locate the following registry key:
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DNS\Parameters

  3. On the Edit menu, select New, select DWORD (32-bit) Value, and then add the following value:

    • Value: MaxCacheTTL
    • Data type: DWORD
    • Data value: 0x2A300 (172,800 seconds in decimal, or two days)
  4. Select OK.

  5. Quit Registry Editor.

  6. Restart the DNS Server service.

Note

The .biz top level has a TTL of 6 days for its NS and A records. Thus, you may need to set the MaxCacheTTL to 518400 for 6 days or even 604800 for 7 days.

Disclaimer

Rapid publishing articles provide information directly from within the Microsoft support organization. The information contained herein is created in response to emerging or unique topics, or is intended supplement other knowledge base information.

Microsoft and/or its suppliers make no representations or warranties about the suitability, reliability, or accuracy of the information contained in the documents and related graphics published on this website (the "materials") for any purpose. The materials may include technical inaccuracies or typographical errors and may be revised at any time without notice.

To the maximum extent permitted by applicable law, Microsoft and/or its suppliers disclaim and exclude all representations, warranties, and conditions whether express, implied, or statutory, including but not limited to representations, warranties, or conditions of title, non-infringement, satisfactory condition or quality, merchantability and fitness for a particular purpose, with respect to the materials.