Server 2019 domain controller issue

Question

Hi

We have newly promoted server 2019 as a domain controller. post successful configuration we are getting a file by name: DNS settings and Type:msDNS-ServerSettings

I have never seen this earlier. please clarify what is this file and is it by design or do we need to delete it or is it safe to ignore it.

Thanks
Sunny

Answer 1

Hello @Srinivas M ,

The msDNS-ServerSettings contains the settings for the DNS service and information about all the AD integrated DNS zones which this particular server is the Key Master. It contains the LDAP location for all the Key master zones within AD database as you can see below. The Attribute msDNS-KeymasterZones contains the list of AD integrated DNS zones. You should not delete it . It was introduced in windows 2012 and is used if you have implemented DNSSEC feature in your environment for secure DNS. There is a concept of Key Master role and this attribute is queries to specifically find about the server holsing the key master role in case of DNSSEC . Its a big topic in itself , you can read more in the linked article or deploy a test lab for the same to understand more.

This is by design and its safe to ignore. I would not recommend to remove it or modify it unless Microsoft Support asks you while troubleshooting any issue or you understand the implications. Hope this clarifies your query. If the information provided is helpful please do accept this as answer so that its helpful for other members of the community searching for similar answers.

Thank you.

Answer 2

Can this file be deleted of dc has been demoted?

Answer 3

Just to check if the above reply could be of help, if yes, you may mark useful reply as answer, if not, welcome to feedback.

Best regards,
Sylvia

Answer 4

Looks like this one may be a key master, nothing to worry about.
https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-dnsp/24e513b0-0b67-4cbe-b149-f287f3acf6fd

--please don't forget to Accept as answer if the reply is helpful--