DetailPage-MSS-KB

Microsoft small business knowledge base

Article ID: 2003485 - Last Review: November 6, 2009 - Revision: 1.0

Symptoms

The Windows Server 2003 and Windows Server 2008 DNS Server may be unable to resolve queries for WPAD 'A' records in zones it hosts (for example, wpad.contoso.com).  The following error will be logged in the Application Log:

 
Source:  DNS
Category: None
Type: Error
Event ID: 6268
Description:
The global query block list is a feature that prevents attacks on your network by blocking DNS queries for specific host names.  This feature has caused the DNS server to fail a query with error code NAME ERROR for wpad.contoso.com. even though data for this DNS name exisits in the DNS database.  Other queries in all locally authoritative zones for other names that begin with labels in the block list will also fail, but no event will be logged when further queries are blocked until the DNS server service on this computer is restarted.  See product documentation about this feature and instructions on how to configure it.

Cause

This behavior is by design.  The error indicates that a wpad entry exists in the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DNS\Parameters\GlobalQueryBlockList value.  The presence of a name in this key prevents any corresponding 'A' records from being returned by the DNS Server.

Resolution

To allow WPAD entries to be returned, remove the WPAD entry from the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DNS\Parameters\GlobalQueryBlockList value by using these steps:

  1. Open the Registry Editor and navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DNS\Parameters
  2. Double-click on the GlobalQueryBlockList value to open the editor.
  3. Highlight the wpad entry and press the delete key
  4. Click 'OK' and 'OK' again to return to the main window
  5. Restart the 'DNS Server' service

Important:  By default, a wpad and isatap value will be present.  Do not delete the isatap value.

More Information

Note This is a "FAST PUBLISH" article created directly from within the Microsoft support organization. The information contained herein is provided as-is in response to emerging issues. As a result of the speed in making it available, the materials may include typographical errors and may be revised at any time without notice. See Terms of Use (http://go.microsoft.com/fwlink/?LinkId=151500) for other considerations.

APPLIES TO
  • Windows Small Business Server 2008 Premium
  • Windows Small Business Server 2008 Standard
  • Windows Server 2008 Standard
  • Windows Server 2008 Enterprise
Keywords: 
KB2003485
Share
Additional support options
Ask The Microsoft Small Business Support Community
Contact Microsoft Small Business Support
Find Microsoft Small Business Support Certified Partner
Find a Microsoft Store For In-Person Small Business Support