Skip to main content
The 2024 Developer Survey results are live! See the results
deleted 97 characters in body
Source Link
grawity_u1686
  • 465.8k
  • 66
  • 978
  • 1.1k

The DNS Manager app is not the DNS Server, in the same way that Firefox isn't Super User.

The DNS Server role included with Windows Server indeed supports recursive queries and being used as a recursive resolver by clients – this is enabled by default, and that's most likely how most people use it, in combination with Active Directory.

Windows' DNS Server supports resolving hostnames both through asking other resolvers ("forwarders") and through directly making iterative queries starting from "root hints".

In other words, if there are any upstream DNS servers listed in the "Forwarders" tab of DNS Manager (not in the network adapter's settings), it'll use those – but if there aren't any, it'll still resolve Internet domains by directly talking to the root nameservers and following delegation chains.

If you want to disable this feature and restrict the server to only answering for locally-hosted zones, check the "Disable recursion" option in the "Advanced" tab.

Regardless of this option, locally hosted zones (i.e. zones that the server is authoritative for) always take priority over recursive lookups, in pretty much any DNS server software you'll find.

Screenshot of the "Forwarders" tab, showing no upstream DNS servers configured. Screenshot of the "Root Hints" tab, showing the default list of root servers and their IPv4 addresses. Screenshot of the "Advanced" tab, showing a list of miscellaneous checkboxes and selections, one of them being "Disable recursion (also disables forwarders)".

The DNS Manager app is not the DNS Server, in the same way that Firefox isn't Super User.

The DNS Server role included with Windows Server indeed supports recursive queries and being used as a recursive resolver by clients – this is enabled by default, and that's most likely how most people use it, in combination with Active Directory.

Windows' DNS Server supports resolving hostnames both through asking other resolvers ("forwarders") and through directly making iterative queries starting from "root hints".

In other words, if there are any upstream DNS servers listed in the "Forwarders" tab of DNS Manager (not in the network adapter's settings), it'll use those – but if there aren't any, it'll still resolve Internet domains by directly talking to the root nameservers and following delegation chains.

If you want to disable this feature and restrict the server to only answering for locally-hosted zones, check the "Disable recursion" option in the "Advanced" tab.

Regardless of this option, locally hosted zones (i.e. zones that the server is authoritative for) always take priority over recursive lookups, in pretty much any DNS server software you'll find.

Screenshot of the "Forwarders" tab, showing no upstream DNS servers configured. Screenshot of the "Root Hints" tab, showing the default list of root servers and their IPv4 addresses. Screenshot of the "Advanced" tab, showing a list of miscellaneous checkboxes and selections, one of them being "Disable recursion (also disables forwarders)".

The DNS Server role included with Windows Server indeed supports recursive queries and being used as a recursive resolver by clients – this is enabled by default, and that's most likely how most people use it, in combination with Active Directory.

Windows' DNS Server supports resolving hostnames both through asking other resolvers ("forwarders") and through directly making iterative queries starting from "root hints".

In other words, if there are any upstream DNS servers listed in the "Forwarders" tab of DNS Manager (not in the network adapter's settings), it'll use those – but if there aren't any, it'll still resolve Internet domains by directly talking to the root nameservers and following delegation chains.

If you want to disable this feature and restrict the server to only answering for locally-hosted zones, check the "Disable recursion" option in the "Advanced" tab.

Regardless of this option, locally hosted zones (i.e. zones that the server is authoritative for) always take priority over recursive lookups, in pretty much any DNS server software you'll find.

Screenshot of the "Forwarders" tab, showing no upstream DNS servers configured. Screenshot of the "Root Hints" tab, showing the default list of root servers and their IPv4 addresses. Screenshot of the "Advanced" tab, showing a list of miscellaneous checkboxes and selections, one of them being "Disable recursion (also disables forwarders)".

Source Link
grawity_u1686
  • 465.8k
  • 66
  • 978
  • 1.1k

The DNS Manager app is not the DNS Server, in the same way that Firefox isn't Super User.

The DNS Server role included with Windows Server indeed supports recursive queries and being used as a recursive resolver by clients – this is enabled by default, and that's most likely how most people use it, in combination with Active Directory.

Windows' DNS Server supports resolving hostnames both through asking other resolvers ("forwarders") and through directly making iterative queries starting from "root hints".

In other words, if there are any upstream DNS servers listed in the "Forwarders" tab of DNS Manager (not in the network adapter's settings), it'll use those – but if there aren't any, it'll still resolve Internet domains by directly talking to the root nameservers and following delegation chains.

If you want to disable this feature and restrict the server to only answering for locally-hosted zones, check the "Disable recursion" option in the "Advanced" tab.

Regardless of this option, locally hosted zones (i.e. zones that the server is authoritative for) always take priority over recursive lookups, in pretty much any DNS server software you'll find.

Screenshot of the "Forwarders" tab, showing no upstream DNS servers configured. Screenshot of the "Root Hints" tab, showing the default list of root servers and their IPv4 addresses. Screenshot of the "Advanced" tab, showing a list of miscellaneous checkboxes and selections, one of them being "Disable recursion (also disables forwarders)".