Hello,
Thank you for posting in Q&A forum.
The DNS zone may be locked due to one of the following reasons:
If another administrator is editing the area, it may be locked to prevent conflicts.
DNS servers may cache information about a zone, causing changes to that zone to be locked for a period of time.
It may be due to incorrect permission settings. Ensure that you have sufficient permissions to make changes to the area.
DNS propagation delay may be due to one of the following reasons:
Changes to DNS zones need to be replicated in Active Directory in order to take effect on other servers. If there is a delay in replication, then DNS changes will also have delays.
If the network connection is unstable or the network bandwidth is limited, DNS propagation delay may increase.
We suggest that you try the following methods to check and resolve this issue:
Check if there are other administrators editing the area and wait for them to complete or coordinate with them.
Use Active Directory tools such as AD Sites and Services to check the replication status between domain controllers. Ensure that replication works properly without any errors or delays.
Use DNS monitoring tools to monitor the status and propagation time of DNS changes.
You can try adjusting the DNS propagation interval to reduce propagation delay. However, it should be noted that reducing the interval may increase network load and resource consumption.
The standard time for DNS propagation depends on the network environment and replication configuration. Normally, DNS changes should propagate to all domain controllers within minutes to hours.
We suggest that you try the following methods to monitor and reduce DNS propagation latency in AD environments:
Regularly monitor DNS and Active Directory replication status.
Optimize network connections to reduce propagation latency.
Use shorter DNS propagation intervals (but pay attention to network load).
Optimize the performance of the domain controller to accelerate the replication process.
If the problem persists, it may be necessary to conduct a more in-depth check of the Active Directory and DNS configuration. If you have any questions, please contact me
Best regards,
Jill Zhou
If the Answer is helpful, please click "Accept Answer" and upvote it.