Trace Enable or disable DNS updates across Active Directory and Windows DNS
Microsoft states: “The article discusses how to disable DNS updates in Windows.”
Read the guideDSE security knowledge hubCybersecurity
Cybersecurity
Knowledge
Page 102 of the DSE Cybersecurity knowledge center, with source-backed guidance and practical next steps.
DSE-authoredOfficial sourcesReviewed guidance
Search the library Explore this topic
Start with the cornerstone guide Cybersecurity knowledge center
Source-backed guidance for identity, vulnerability reduction, ransomware readiness, detection, response, and recovery.
DSE post stream
1,745 articlesCybersecurity
Review DNS records not shown in DNS zones before AD/DNS changes
Microsoft states: “This article lists the causes of the issue where DNS records don’t show in a DNS zone.”
Read the playbook
Scope Don't be afraid of DNS scavenging, just be patient in observed AD/DNS state
Microsoft states: “This article discusses how to set up Domain Name System (DNS) scavenging and gives an example of setting scavenging up on a pre-existing zone.”
Read the briefing
Validate Troubleshoot DNS Event ID 4013 with AD/DNS evidence
Microsoft states: “This article resolves the event ID 4013 logged in the DNS event log of domain controllers that are hosting the DNS server role after Windows starts.”
Read the checklist
Stage Windows DNS registers duplicate SRV records for a DC if its computer name has uppercase letters with AD/DNS rollback checks
Microsoft states: “This article helps fix an issue where Windows DNS registers duplicate server location (SRV) records for a domain controller if its computer name has uppercase letters.”
Read the explainer
Trace Event ID 4015 - The DNS server encountered a critical error across Active Directory and Windows DNS
Microsoft states: “Domain Name Service (DNS) server Event ID 4015 indicates that a domain controller (DC) that runs the DNS Server role experienced a critical error.”
Read the guide
Review Troubleshoot DNS name resolution failures related to DNS forwarders before AD/DNS changes
Microsoft states: “You have forwarders, conditional forwarders, or root hints configured to perform name lookups for external names.”
Read the playbook
Scope DNS Server becomes an island in observed AD/DNS state
Microsoft states: “This article provides a solution to an issue where DNS Server becomes an island when a domain controller points to itself for the _msdcs.ForestDnsName domain.”
Read the briefing
Validate Name resolution and connectivity issues with AD/DNS evidence
Microsoft states: “This article provides a solution to name resolution and connectivity issues on a Routing and Remote Access Server that also runs DNS or WINS.”
Read the checklist
Stage Host's A record is registered in DNS with AD/DNS rollback checks
Microsoft states: “This article provides methods to fix an issue where the IP address registers an A record for the host name in its primary DNS suffix zone.”
Read the explainer