Article ID: 2514953 - View products that this article applies to.
Consider the following scenario:
This issue occurs because the registry is not modified correctly when the Allow Zone Transfers setting is turned off.
To work around this issue, use one of the following methods.
Method 1: Modify the registry
Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:
(https://support.microsoft.com/kb/322756/ )How to back up and restore the registry in Windows
Delete the following registry value after you turn off the Allow Zone Transfers setting:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\DNS Server\Zones\SecondaryServers
Method 2: Use Dnscmd.exe
Use the following Dnscmd.exe command to disable zone transfers:
dnscmd server_name /ZoneResetSecondaries domain_name /NoXfr
Article ID: 2514953 - Last Review: March 4, 2011 - Revision: 1.0