You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: support/windows-server/active-directory/deployment-operation-ad-domains.md
+29-32Lines changed: 29 additions & 32 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -74,57 +74,54 @@ If you use a single-label DNS name in your environment, clients might be unable
74
74
75
75
- Windows-based computers that are configured for DNS dynamic updates don't register in a single-label DNS domain. Windows logs corresponding events in the System log.
76
76
77
-
### How to enable Windows-based clients to send queries and dynamic updates in single-label DNS zones
78
-
79
-
By default, Windows doesn't send updates to top-level domains. However, you can change this behavior by using one of the methods in this section.
77
+
### How to enable Windows-based clients to send queries and dynamic updates when using single-label DNS zones
80
78
81
79
Consider the following configuration:
82
80
83
81
- Domain member computers reside in a forest that doesn't contain any single-label DNS domains.
84
82
- Domain controllers reside in single-label DNS domains in a different forest.
85
83
86
-
By default, in these circumstances, the domain member computers don't use the DNS Server service to locate the domain controllers.
87
-
88
-
84
+
By default, in these circumstances, the domain member computers don't use the DNS Server service to locate the domain controllers. Additionally, by default, Windows doesn't send updates to top-level domains. However, you can change these behaviors by using one of the two methods in this section.
89
85
90
-
Client access to the domains that have single-label DNS names fails if NetBIOS name resolution isn't configured correctly.
86
+
> [!IMPORTANT]
87
+
> Before you use either method, make sure that NetBIOS name resolution works correctly in your environment. Otherwise, clients can't access the domains that have single-label DNS names fails.
91
88
92
89
#### Method 1: Use Registry Editor
93
90
94
91
[!INCLUDE [registry important alert](../../../includes/registry-important-alert.md)]
95
92
96
-
On the Windows client computers (domain-joined, non-domain joined, or Microsoft Entra ID-joined), follow these steps
93
+
##### Step 1: Change the domain controller locator configuration
97
94
98
-
1. Change the domain controller locator configuration by following these steps:
95
+
On the Windows client computers (domain-joined, non-domain joined, or Microsoft Entra ID-joined), follow these steps
99
96
100
-
1. In the Search box, enter regedit, and then select **Registry editor**.
101
-
1. Locate and then select the `HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters` subkey.
102
-
1. In the details pane, locate the `AllowSingleLabelDnsDomain` entry. If the entry doesn't exist, follow these steps:
103
-
1. Select **Edit** > **New** > **DWORD Value**.
104
-
1. In the **Name** box, enter **AllowSingleLabelDnsDomain**.
105
-
1. Double-click the **AllowSingleLabelDnsDomain** entry, and then in **Value data**, enter **1**.
106
-
1. Close Registry Editor.
97
+
1. In the Search box, enter regedit, and then select **Registry editor**.
98
+
1. Locate and then select the `HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters` subkey.
99
+
1. In the details pane, locate the `AllowSingleLabelDnsDomain` entry. If the entry doesn't exist, follow these steps:
100
+
1. Select **Edit** > **New** > **DWORD Value**.
101
+
1. In the **Name** box, enter **AllowSingleLabelDnsDomain**.
102
+
1. Double-click the **AllowSingleLabelDnsDomain** entry, and then in **Value data**, enter **1**.
103
+
1. Close Registry Editor.
107
104
108
-
1.Change the dynamic update configuration for the DNS root zone or single-label DNS zones by following these steps:
105
+
##### Step 2: Change the dynamic update configuration for the DNS root zone or single-label DNS zones
109
106
110
-
1. In the Search box, enter regedit, and then select **Registry editor**.
111
-
1. Locate and then select the `HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient` subkey.
112
-
1. In the details pane, locate the `UpdateTopLevelDomainZones` entry. If the entry doesn't exist, follow these steps:
113
-
1. Select **Edit** > **New** > **DWORD Value**.
114
-
1. In the **Name** box, enter **UpdateTopLevelDomainZones**.
115
-
1. Double-click the **UpdateTopLevelDomainZones** entry, and then in **Value data**, enter **1**.
116
-
1. Close Registry Editor.
107
+
Apply these changes to all domain controllers and members of domains that have single-label DNS names. If a domain that has a single-label DNS name is a forest root, apply these configuration changes to all the domain controllers in the forest. The only exceptions are the following zones, *if* they're delegated from the *ForestName* zone:
117
108
118
-
Apply these configuration changes to all domain controllers and members of domains that have single-label DNS names. If a domain that has a single-label DNS name is a forest root, apply these configuration changes to all the domain controllers in the forest. The only exceptions are the following zones, *if* they're delegated from the *ForestName* zone:
109
+
-\_msdcs. *ForestName*
110
+
-\_sites. *ForestName*
111
+
-\_tcp. *ForestName*
112
+
-\_udp. *ForestName*
119
113
120
-
-_msdcs. _ForestName_
121
-
-_sites. *ForestName*
122
-
-_tcp. *ForestName*
123
-
-_udp. *ForestName*
114
+
Follow these steps:
124
115
125
-
After you change the configuration of each computer, restart the computer. The changes take effect after the computer restarts.
116
+
1. In the Search box, enter regedit, and then select **Registry editor**.
117
+
1. Locate and then select the `HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient` subkey.
118
+
1. In the details pane, locate the `UpdateTopLevelDomainZones` entry. If the entry doesn't exist, follow these steps:
119
+
1. Select **Edit** > **New** > **DWORD Value**.
120
+
1. In the **Name** box, enter **UpdateTopLevelDomainZones**.
121
+
1. Double-click the **UpdateTopLevelDomainZones** entry, and then in **Value data**, enter **1**.
122
+
1. Close Registry Editor, and then restart the computer.
126
123
127
-
### Method 2: Use Group Policy
124
+
####Method 2: Use Group Policy
128
125
129
126
Use Group Policy to enable the **Update Top Level Domain Zones** policy and the **Location of the DCs hosting a domain with single label DNS name** policy as specified in the following table. Configure these policies under the folder location on the root domain container in **Users and Computers**, or on all organizational units (OUs) that host computer accounts for member computers and for domain controllers in the domain.
130
127
@@ -153,7 +150,7 @@ To enable these policies, follow these steps on the root domain container:
153
150
154
151
Check the DNS servers to make sure that root servers aren't created unintentionally. The DCpromo Wizard might create root servers. If the "." zone exists, DCpromo created a root server. For name resolution to work correctly, you might have to remove this zone.
155
152
156
-
## New and modified DNS policy settings for Windows
153
+
###New and modified DNS policy settings for Windows
Copy file name to clipboardExpand all lines: support/windows-server/active-directory/error-0xa8b-resolve-dns-fail.md
+1-1Lines changed: 1 addition & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -66,7 +66,7 @@ To resolve this error, follow these steps:
66
66
67
67
3. Check for special names in the target Active Directory domain that require other configuration:
68
68
69
-
- Single-label DNS name. For more information, see [Deployment and operation of Active Directory domains that are configured by using single-label DNS names](deployment-operation-ad-domains.md#how-to-enable-windows-based-clients-to-do-queries-and-dynamic-updates-with-single-label-dns-zones).
69
+
- Single-label DNS name. For more information, see [Deployment and operation of Active Directory domains that are configured by using single-label DNS names](deployment-operation-ad-domains.md#how-to-enable-windows-based-clients-to-send-queries-and-dynamic-updates-when-using-single-label-dns-zones).
70
70
- Disjoint namespace. For more information, see [Event IDs 5788 and 5789 occur on a Windows-based computer](event-ids-5788-5789.md).
71
71
- All numeric top-level domains (TLDs) or TLDs containing numeric characters.
0 commit comments