Networks

Ask something
Discussion Locked

DNS and baseline security

0 helpful
5 replies

by mjkqb

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Fri February 18, 2005 8:58 AM (NEW!)

Using 2003 Web Edition.

Have applied Enterprise Member Server baseline security, now DNS running on that machine will not resolve internet domain names. I have to stop and restart the service in order for it to begin working. On boot up none of the root hints show up in cache. Once I stop and restart the service, they show up.

This was happening on both of my external dns servers. I rebuilt one without the baseline security and it is working fine.

Any ideas on a specific cause?

thanks

5 replies

by bfilmfan

Wrong security template. Table 2.1, page 27:

Windows Server 2003
Infrastructure servers

A group containing locked down
DNS, WINS, and DHCP servers.

Enterprise Client ?
Infrastructure Server.inf

In the baseline member server policy that service is disabled.

by bfilmfan

Remove the administrative template from the GPO to which it was linked and then force a GPO Update from the member server having an issue.

by mjkqb

Thanks bfilmfan.

I think we're on the right path now. However, I can't get the member server policies to reverse. I even applied the original templates and still no DNS. Do you think I'll have to rebuild again?

This discussion is closed to new replies.