Can't change "Dynamic updates" setting of DNS zone

TheEvilHammer · Joined: May 14, 2008 Posts: 2

I'm using Windows Server 2003 and I can't change the "Dynamic updates" setting of a dns zone from the command line:

Code:

> dnscmd /config main.bass.test /AllowUpdate 2
DNS Server failed to reset registry property.
Status = 9611 (0x0000258b)

Command failed: DNS_ERROR_INVALID_ZONE_TYPE 9611 (0000258b)

Anyone have any idea why Windows would think that my DNS zone was invalid? Here's all the zone info:

Code:

> dnscmd /zoneinfo main.bass.test
Zone query result:
Zone info:
ptr = 00082FE8
zone name = main.bass.test
zone type = 1
update = 0
DS integrated = 0
data file = main.bass.test.dns
using WINS = 0
using Nbstat = 0
aging = 0
******* interval = 168
no ******* = 168
scavenge available = 0
Zone Masters
NULL IP Array.
Zone Secondaries
NULL IP Array.
secure secs = 1
Command completed successfully.

Those asterisks (*******) should actually say "r e f r e s h" (without the spaces); I don't know why the BB is obscuring that.

TheEvilHammer · Joined: May 14, 2008 Posts: 2

Ah, I figured it out - trying to set "AllowUpdate" to 2 (secure updates only) works only for DNS zones that are integrated into Active Directory (my DNS zone is not). Setting "AllowUpdate" to 1 (nonsecure updates) works fine:

Code:

> dnscmd /config main.bass.test /AllowUpdate 1
Registry property AllowUpdate successfully reset.
Command completed successfully.