| Previous | Next |
| DNS_ERROR_NUMERIC_NAME | DNS_ERROR_NOT_ALLOWED_UNDER_DELEGATION |
DNS_ERROR_NOT_ALLOWED_ON_ROOT_SERVER
The root zone is a special authority boundary
The DNS root is the zero-length label at the top of the global namespace. A server authoritative for the root zone is not merely a recursive server using root hints. RFC 1034 treats the root as the top of the delegation tree, while Windows DNS keeps root hints as cache/bootstrap data used to find root servers when recursion is needed.
First determine whether the server actually hosts the zone named . or only has root hints configured. A management API aimed at the root zone can be rejected even though an equivalent operation is valid on an ordinary authoritative zone. Removing or editing root hints is a different action and should not be used as a workaround for a root-zone restriction.
What to inspect
- Enumerate hosted zones and check specifically for the zone name represented by a single period.
- Separate authoritative root-zone configuration from recursive root-hint configuration.
- Verify the exact zone name passed by the management client before changing server-wide recursion settings.
References
- IETF RFC 1034: DNS namespace, zones, authority, and delegation
- Microsoft: DNS forwarding, conditional forwarding, and root hints
- Microsoft: Get-DnsServerZone and zone state properties
Looking for a different code? Search another status or error code.