Share via

Primary DNS Suffix

Computer Configuration\Administrative Templates\System\DNS Client


Specifies the primary Domain Name System (DNS) suffix for all affected computers. The primary DNS suffix is used in DNS name registration and DNS name resolution.

This policy lets you specify a primary DNS suffix for a group of computers, and prevents users, including administrators, from changing it.

If you disable this policy or do not configure it, each computer uses its local primary DNS suffix, which is usually the DNS name of Active Directory domain to which it is joined. However, administrators can use System in Control Panel to change the primary DNS suffix of a computer.

To use this policy, in the text box provided, type the entire primary DNS suffix you want to assign. For example,

important-icon Important

To make changes to this policy effective, you must restart Windows 2000 on all computers affected by the policy.

Note Image Note

This policy has no effect on domain controllers.

This policy does not disable the DNS Suffix and NetBIOS Computer Name dialog box that administrators use to change the primary DNS suffix of a computer. However, if administrators enter a suffix, that suffix is ignored while this policy is enabled.

Tip-icon Tip

To change the primary DNS suffix of a computer without setting a policy, click System in Control Panel, click the Network Identification tab, click Properties , click More , and then enter a suffix in the Primary DNS suffix of this computer box.

For more information about DNS, see Domain Name System (DNS) in Windows 2000 Help. Also, see Windows 2000 DNS in the Windows 2000 Resource Kit Core Networking Guide .