Share via

DNS Lookups Error when try to check server from Public ECP.

Yandri Eko 141 Reputation points
2023-03-31T09:27:31.16+00:00

Hi Team,

We've 3 Exchange Server 2016 (2 servers already patched with KB5023697, & we're not yet update 1 server with the KB's), those currently running with Windows Server 2016.

And also we've 3 Exchange Server 2019 with WS 2022 in DRC Site (Newly Created).

The problem is when we try to check DNS Lookups settings for servers that we already patched, from Public ECP (external url) it got an error says that access denied (before patching it normally running, i mean we can see DNS Lookups settings), same problem comes from all servers in DRC's Site that's using Windows Server 2022 & Exchange Server 2019:

User's image

Do we need to uninstall Security Update CU with KB5023697-concern with DCOM hardening ? https://support.microsoft.com/en-gb/topic/march-14-2023-kb5023697-os-build-14393-5786-d8c0d93c-c58b-4398-9fee-59183e52b20c

Kindly need ur help team. we're just stuck for weeks searching all forum but not related with current issue. :(

Thanks a lot, for every participants.

Exchange Server
Exchange Server
A family of Microsoft client/server messaging and collaboration software.
1,197 questions
Exchange Server Management
Exchange Server Management
Exchange Server: A family of Microsoft client/server messaging and collaboration software.Management: The act or process of organizing, handling, directing or controlling something.
7,503 questions
Accepted answer
  1. Xuyan Ding - MSFT 7,561 Reputation points
    2023-04-06T08:01:34.1433333+00:00

    Hi @Yandri Eko ,

    I'm glad to hear you solve the problem ,if you have any issue about Exchange, you are welcome to raise a ticket in this forum. By the way, since the Microsoft Q&A community has a policy that "The question author cannot accept their own answer. They can only accept answers by others.". and according to the scenario introduced here: Answering your own questions on Microsoft Q&A, I would make a brief summary of this thread: 

    [DNS Lookups Error when try to check server from Public ECP] 

    Issue Symptom: 

    We've 3 Exchange Server 2016 (2 servers already patched with KB5023697, & we're not yet update 1 server with the KB's), those currently running with Windows Server 2016. And also we've 3 Exchange Server 2019 with WS 2022 in DRC Site (Newly Created). The problem is when we try to check DNS Lookups settings for servers that we already patched, from Public ECP (external url) it got an error says that access denied (before patching it normally running, i mean we can see DNS Lookups settings), same problem comes from all servers in DRC's Site that's using Windows Server 2022 & Exchange Server 2019 

    The solution: 

    the issue is resolved after enabling TLS 1.2 on Exchange Server Primary site Servers.

    You could click the "Accept Answer" button for this summary to close this thread, and this can make it easier for other community member's to see the useful information when reading this thread. Thanks for your understanding!

    0 comments

1 additional answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Xuyan Ding - MSFT 7,561 Reputation points
    2023-04-04T10:22:04.5033333+00:00

    Hi @Yandri Eko ,

    I tested it in my environment with KB5023697 installed and it didn't reproduce your issue.

    • Have you made any other changes to your DNS settings before?
    • Can you get any results by running the following command? 
       get-TransportService -Identity "servername" |fl
    • Please try creating a new administrator account and see if you can access the DNS Lookups settings.

    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.