question

SrinivasM-1313 avatar image
0 Votes"
SrinivasM-1313 asked BudSpencer-1696 commented

Server 2019 domain controller issue

Hi

We have newly promoted server 2019 as a domain controller. post successful configuration we are getting a file by name: DNS settings and Type:msDNS-ServerSettings

17225-image.png



I have never seen this earlier. please clarify what is this file and is it by design or do we need to delete it or is it safe to ignore it.

Thanks
Sunny

windows-server
image.png (92.8 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

shashishailaj avatar image
0 Votes"
shashishailaj answered

Hello @SrinivasM-1313 ,

The msDNS-ServerSettings contains the settings for the DNS service and information about all the AD integrated DNS zones which this particular server is the Key Master. It contains the LDAP location for all the Key master zones within AD database as you can see below. The Attribute msDNS-KeymasterZones contains the list of AD integrated DNS zones. You should not delete it . It was introduced in windows 2012 and is used if you have implemented DNSSEC feature in your environment for secure DNS. There is a concept of Key Master role and this attribute is queries to specifically find about the server holsing the key master role in case of DNSSEC . Its a big topic in itself , you can read more in the linked article or deploy a test lab for the same to understand more.

17180-image.png

This is by design and its safe to ignore. I would not recommend to remove it or modify it unless Microsoft Support asks you while troubleshooting any issue or you understand the implications. Hope this clarifies your query. If the information provided is helpful please do accept this as answer so that its helpful for other members of the community searching for similar answers.

Thank you.




image.png (67.5 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

DSPatrick avatar image
0 Votes"
DSPatrick answered DSPatrick edited

Looks like this one may be a key master, nothing to worry about.
https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-dnsp/24e513b0-0b67-4cbe-b149-f287f3acf6fd

--please don't forget to Accept as answer if the reply is helpful--






5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

sylviachen-MSFT avatar image
0 Votes"
sylviachen-MSFT answered

Just to check if the above reply could be of help, if yes, you may mark useful reply as answer, if not, welcome to feedback.


Best regards,
Sylvia

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

BudSpencer-1696 avatar image
0 Votes"
BudSpencer-1696 answered BudSpencer-1696 commented

Can this file be deleted of dc has been demoted?

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.