Skip to content

Commit 06fc2ad

Browse files
committed
Link fix
1 parent 9c66a98 commit 06fc2ad

2 files changed

Lines changed: 30 additions & 33 deletions

File tree

support/windows-server/active-directory/deployment-operation-ad-domains.md

Lines changed: 29 additions & 32 deletions
Original file line numberDiff line numberDiff line change
@@ -74,57 +74,54 @@ If you use a single-label DNS name in your environment, clients might be unable
7474

7575
- Windows-based computers that are configured for DNS dynamic updates don't register in a single-label DNS domain. Windows logs corresponding events in the System log.
7676

77-
### How to enable Windows-based clients to send queries and dynamic updates in single-label DNS zones
78-
79-
By default, Windows doesn't send updates to top-level domains. However, you can change this behavior by using one of the methods in this section.
77+
### How to enable Windows-based clients to send queries and dynamic updates when using single-label DNS zones
8078

8179
Consider the following configuration:
8280

8381
- Domain member computers reside in a forest that doesn't contain any single-label DNS domains.
8482
- Domain controllers reside in single-label DNS domains in a different forest.
8583

86-
By default, in these circumstances, the domain member computers don't use the DNS Server service to locate the domain controllers.
87-
88-
84+
By default, in these circumstances, the domain member computers don't use the DNS Server service to locate the domain controllers. Additionally, by default, Windows doesn't send updates to top-level domains. However, you can change these behaviors by using one of the two methods in this section.
8985

90-
Client access to the domains that have single-label DNS names fails if NetBIOS name resolution isn't configured correctly.
86+
> [!IMPORTANT]
87+
> Before you use either method, make sure that NetBIOS name resolution works correctly in your environment. Otherwise, clients can't access the domains that have single-label DNS names fails.
9188
9289
#### Method 1: Use Registry Editor
9390

9491
[!INCLUDE [registry important alert](../../../includes/registry-important-alert.md)]
9592

96-
On the Windows client computers (domain-joined, non-domain joined, or Microsoft Entra ID-joined), follow these steps
93+
##### Step 1: Change the domain controller locator configuration
9794

98-
1. Change the domain controller locator configuration by following these steps:
95+
On the Windows client computers (domain-joined, non-domain joined, or Microsoft Entra ID-joined), follow these steps
9996

100-
1. In the Search box, enter regedit, and then select **Registry editor**.
101-
1. Locate and then select the `HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters` subkey.
102-
1. In the details pane, locate the `AllowSingleLabelDnsDomain` entry. If the entry doesn't exist, follow these steps:
103-
1. Select **Edit** > **New** > **DWORD Value**.
104-
1. In the **Name** box, enter **AllowSingleLabelDnsDomain**.
105-
1. Double-click the **AllowSingleLabelDnsDomain** entry, and then in **Value data**, enter **1**.
106-
1. Close Registry Editor.
97+
1. In the Search box, enter regedit, and then select **Registry editor**.
98+
1. Locate and then select the `HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters` subkey.
99+
1. In the details pane, locate the `AllowSingleLabelDnsDomain` entry. If the entry doesn't exist, follow these steps:
100+
1. Select **Edit** > **New** > **DWORD Value**.
101+
1. In the **Name** box, enter **AllowSingleLabelDnsDomain**.
102+
1. Double-click the **AllowSingleLabelDnsDomain** entry, and then in **Value data**, enter **1**.
103+
1. Close Registry Editor.
107104

108-
1. Change the dynamic update configuration for the DNS root zone or single-label DNS zones by following these steps:
105+
##### Step 2: Change the dynamic update configuration for the DNS root zone or single-label DNS zones
109106

110-
1. In the Search box, enter regedit, and then select **Registry editor**.
111-
1. Locate and then select the `HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient` subkey.
112-
1. In the details pane, locate the `UpdateTopLevelDomainZones` entry. If the entry doesn't exist, follow these steps:
113-
1. Select **Edit** > **New** > **DWORD Value**.
114-
1. In the **Name** box, enter **UpdateTopLevelDomainZones**.
115-
1. Double-click the **UpdateTopLevelDomainZones** entry, and then in **Value data**, enter **1**.
116-
1. Close Registry Editor.
107+
Apply these changes to all domain controllers and members of domains that have single-label DNS names. If a domain that has a single-label DNS name is a forest root, apply these configuration changes to all the domain controllers in the forest. The only exceptions are the following zones, *if* they're delegated from the *ForestName* zone:
117108

118-
Apply these configuration changes to all domain controllers and members of domains that have single-label DNS names. If a domain that has a single-label DNS name is a forest root, apply these configuration changes to all the domain controllers in the forest. The only exceptions are the following zones, *if* they're delegated from the *ForestName* zone:
109+
- \_msdcs. *ForestName*
110+
- \_sites. *ForestName*
111+
- \_tcp. *ForestName*
112+
- \_udp. *ForestName*
119113

120-
- _msdcs. _ForestName_
121-
- _sites. *ForestName*
122-
- _tcp. *ForestName*
123-
- _udp. *ForestName*
114+
Follow these steps:
124115

125-
After you change the configuration of each computer, restart the computer. The changes take effect after the computer restarts.
116+
1. In the Search box, enter regedit, and then select **Registry editor**.
117+
1. Locate and then select the `HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient` subkey.
118+
1. In the details pane, locate the `UpdateTopLevelDomainZones` entry. If the entry doesn't exist, follow these steps:
119+
1. Select **Edit** > **New** > **DWORD Value**.
120+
1. In the **Name** box, enter **UpdateTopLevelDomainZones**.
121+
1. Double-click the **UpdateTopLevelDomainZones** entry, and then in **Value data**, enter **1**.
122+
1. Close Registry Editor, and then restart the computer.
126123

127-
### Method 2: Use Group Policy
124+
#### Method 2: Use Group Policy
128125

129126
Use Group Policy to enable the **Update Top Level Domain Zones** policy and the **Location of the DCs hosting a domain with single label DNS name** policy as specified in the following table. Configure these policies under the folder location on the root domain container in **Users and Computers**, or on all organizational units (OUs) that host computer accounts for member computers and for domain controllers in the domain.
130127

@@ -153,7 +150,7 @@ To enable these policies, follow these steps on the root domain container:
153150
154151
Check the DNS servers to make sure that root servers aren't created unintentionally. The DCpromo Wizard might create root servers. If the "." zone exists, DCpromo created a root server. For name resolution to work correctly, you might have to remove this zone.
155152

156-
## New and modified DNS policy settings for Windows
153+
### New and modified DNS policy settings for Windows
157154

158155
- **Update Top Level Domain Zones**
159156

support/windows-server/active-directory/error-0xa8b-resolve-dns-fail.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -66,7 +66,7 @@ To resolve this error, follow these steps:
6666

6767
3. Check for special names in the target Active Directory domain that require other configuration:
6868

69-
- Single-label DNS name. For more information, see [Deployment and operation of Active Directory domains that are configured by using single-label DNS names](deployment-operation-ad-domains.md#how-to-enable-windows-based-clients-to-do-queries-and-dynamic-updates-with-single-label-dns-zones).
69+
- Single-label DNS name. For more information, see [Deployment and operation of Active Directory domains that are configured by using single-label DNS names](deployment-operation-ad-domains.md#how-to-enable-windows-based-clients-to-send-queries-and-dynamic-updates-when-using-single-label-dns-zones).
7070
- Disjoint namespace. For more information, see [Event IDs 5788 and 5789 occur on a Windows-based computer](event-ids-5788-5789.md).
7171
- All numeric top-level domains (TLDs) or TLDs containing numeric characters.
7272

0 commit comments

Comments
 (0)