Dnscmd Syntax
Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2
DNSCmd Syntax
DNSCmd uses the following general syntax:
dnscmd ServerName Command [Command Parameters]
Operations
Dnscmd ageallrecords
Dnscmd clearcache
Dnscmd config
Dnscmd createbuiltindirectorypartitions
Dnscmd createdirectorypartition
Dnscmd deletedirectorypartition
Dnscmd directorypartitioninfo
Dnscmd enlistdirectorypartition
Dnscmd enumdirectorypartitions
Dnscmd enumrecords
Dnscmd enumzones
Dnscmd info
Dnscmd nodedelete
Dnscmd recordadd
Dnscmd recorddelete
Dnscmd resetforwarders
Dnscmd resetlistenaddresses
Dnscmd startscavenging
Dnscmd statistics
Dnscmd unenlistdirectorypartition
Dnscmd writebackfiles
Dnscmd zoneadd
Dnscmd zonechangedirectorypartition
Dnscmd zonedelete
Dnscmd zoneexport
Dnscmd zoneinfo
Dnscmd zonepause
Dnscmd zoneprint
Dnscmd zoneresettype
Dnscmd zonerefresh
Dnscmd zonereload
Dnscmd zoneresetmasters
Dnscmd zoneresetscavengeservers
Dnscmd zoneresetsecondaries
Dnscmd zoneresume
Dnscmd zoneupdatefromds
Dnscmd zonewriteback
Dnscmd ageallrecords
Sets the current time on a time stamp to resource records at a specified zone or node on a DNS server.
Syntax
dnscmd [ServerName] /ageallrecords ZoneName[NodeName] | [/tree]|[/f]
Parameters
- ServerName
Specifies the DNS server the administrator plans to manage, represented by IP address, FQDN, or Host name. If omitted, the local server is used.
- ZoneName
Specifies the FQDN name of the zone.
- NodeName
Specifies a specific node or subtree in the zone. NoteNodeName specifies the node or subtree in the zone using:
@ for root zone or FQDN.
FQDN of a node (name with a '.' at the end).
A single label for the name relative to zone root.
- /tree
Specifies that all child nodes also receive the time stamp. The /tree switch for /ageallrecords will often be desired. Without it the command pertains only to the single node. This may be the desired behavior, but it is often desirable to execute this command on the entire zone or on an entire sub-tree of the zone.
- /f
Executes the command without asking for confirmation.
Remarks
The ageallrecords operation is for backward compatibility between the current version of DNS and previous releases in which aging and scavenging were not supported. It adds a time stamp with the current time to records that do not have one. It will not change the timestamp on records that already have a time stamp.
Scavenging of records does not occur unless the records are timestamped. NS (name server), SOA (Start of Authority), and WINS records are not included in the scavenging process and are not timestamped even when the ageallrecords operation is run.
This command fails unless scavenging is enabled for the DNS server and the zone. For information about how to enable scavenging for the zone, see the aging parameter under Zone-Level Syntax in the Dnscmd config operation in this document.
The addition of a time stamp to DNS records makes them incompatible with DNS servers that run on operating systems other than Windows 2000, Windows XP, or Windows Server 2003. A time stamp you add by using the ageallrecords operation cannot be reversed.
If none of the optional fields are specified, the command returns all records at the specified node. If a value is specified for at least one of the optional fields, then DNSCmd enumerates only records corresponding to the value or values specified in the optional field or fields.
Example
See Dnscmd Examples.
Dnscmd clearcache
Clears the DNS cache memory of resource records in the specified DNS server.
Syntax
dnscmd [ServerName] /clearcache
Parameter
- ServerName
Specifies the DNS server the administrator plans to manage, represented by IP address, FQDN, or Host name. If omitted, the local server is used.
Sample Usage
dnscmd dnssvr1.contoso.com /clearcache
Dnscmd config
Allows the user to change values in the registry for the DNS server and individual zones. Accepts server-level and zone-level settings.
Caution
- Do not edit the registry directly unless you have no alternative. The registry editor bypasses standard safeguards, allowing settings that can degrade performance, damage your system, or even require you to reinstall Windows. You can safely alter most registry settings by using the programs in Control Panel or Microsoft Management Console (MMC). If you must edit the registry directly, back it up first. Read the Registry Editor Help for more information.
Server-Level Syntax
dnscmd [ServerName] /config *Parameters *
Parameters
- ServerName
Specifies the DNS server the administrator is planning to manage, represented by local computer syntax, IP address, FQDN, or Host name. If omitted, the local server is used.
- Parameters
Specify a setting and, optionally, a value. Parameters values use this syntax: Parameter [Value] The following Parameters values are documented in the remainder of this section:/addressanswerlimit
/bindsecondaries
/bootmethod
/defaultagingstate
/defaultnorefreshinterval
/defaultrefreshinterval
/disableautoreversezones
/disablensrecordsautocreation
/dspollinginterval
/dstombstoneinterval
/ednscachetimeout
/enablednsprobes
/enablednssec
/eventloglevel
/forwarddelegations
/forwardingtimeout
/isslave
/localnetpriority
/logfilemaxsize
/logfilepath
/logipfilterlist
/loglevel
/maxcachesize
/maxcachettl
/namecheckflag
/notcp
/norecursion
/recursionretry
/recursiontimeout
/roundrobin
/rpcprotocol
/scavenginginterval
/secureresponses
/sendport
/strictfileparsing
/updateoptions
/writeauthorityns
/xfrconnecttimeout
- /addressanswerlimit [0|5-28]
Specifies the maximum number of host records that a DNS server can send in response to a query. The value can be zero (0) or set in the range of 5-28 records. The default value is zero (0).
- /bindsecondaries [0|1]
Changes the format of the zone transfer so that it can achieve maximum compression and efficiency. However, this efficient format is incompatible with earlier versions of BIND.- 0
Uses maximum compression. Compatible with BIND versions 4.9.4 and later only.
- 1
Sends only one resource record per message to non-Microsoft DNS servers. Compatible with BIND versions earlier than 4.9.4. This is the default setting.
- 0
- /bootmethod [0|1|2|3]
Determines the source from which the DNS server gets its configuration information.- 0
No source.
- 1
Loads from the BIND file that is located in the DNS directory; by default, %systemroot%\System32\DNS..
- 2
Loads from the registry.
- 3
Loads from Active Directory and the registry. This is the default setting.
- 0
- /defaultagingstate [0|1]
Determines whether the DNS scavenging feature is enabled by default on newly created zones.- 0
Disables scavenging. This is the default setting.
- 1
Enables scavenging.
- 0
- /defaultnorefreshinterval [0x1-0xFFFFFFFF|0xA8]
Sets a period of time in which no refreshes are accepted for dynamically updated records. This value is inherited automatically by zones on the server. To change the default, enter a value in the range of 0x1-0xFFFFFFFF. The default value from the server is 0xA8.
- /defaultrefreshinterval [0x1-0xFFFFFFFF|0xA8]
Sets a period of time that is allowed for dynamic updates to DNS records. This value is inherited automatically by zones on the server. To change the default, enter a value in the range of 0x1-0xFFFFFFFF. The default value from the server is 0xA8.
- /disableautoreversezones [0|1]
Enables or disables the automatic creation of reverse lookup zones.- 0
Enables creation of autoreverse zones. This is the default setting.
- 1
Disables creation of autoreverse zones.
- 0
- /disablensrecordsautocreation {0|1}
Specifies whether the DNS server automatically creates NS records for zones that it hosts.- 0
Automatically creates NS records for zones that it hosts.
- 1
Does not automatically create NS records for zones that it hosts.
- 0
/dspollinginterval 0-3600
Specifies how often the DNS server polls Active Directory for changes in Active Directory-integrated zones.Note
If the DNS server is running Windows Server 2008 or above, setting a value of 0 for dspollinginterval will result in the default interval of 180 seconds being configured, and values of 1-29 are not allowed.
- /dstombstoneinterval [1-30]
Amount of time in seconds to keep tombstoned records in Active Directory alive.
- /ednscachetimeout [3600-15724800]
Specifies the number of seconds that EDns information is cached. The default value is 604,800 seconds (one week).
- /enableednsprobes {0|1}
Enables or disables EDnsProbes.- 0
Disables active support for EDnsProbes.
- 1
Enables active support for EDnsProbes.
- 0
- /enablednssec {0|1}
Enables or disables DNSSEC.- 0
Disables DNSSEC.
- 1
Enables DNSSEC.
- 0
- /eventloglevel [0|1|2|4]
Determines which events are logged in the DNS server log in Event Viewer.- 0
Logs no events.
- 1
Logs only errors.
- 2
Logs only errors and warnings.
- 4
Logs errors, warnings, and informational events. This is the default setting.
- 0
- /forwarddelegations [0|1]
Determines how a query for a delegated subzone is handled by the DNS server. These queries can either be sent to the subzone referred to in the query or be sent to the list of forwarders named for the DNS server. Entries in the setting are used only when forwarding is enabled.- 0
Automatically sends queries referring to delegated subzones to the appropriate subzone. This is the default setting.
- 1
Forwards queries referring to the delegated subzone to the existing forwarders.
- 0
- /forwardingtimeout [0x1-0xFFFFFFFF|0x5]
Determines how many seconds (0x1-0xFFFFFFFF) a DNS server waits for a forwarder to respond before trying another. The default value is 0x5, which is 5 seconds.
- /isslave [0|1]
Determines how the DNS server responds when forwarded queries receive no response.- 0
Not a subordinate (also known as a slave). If the forwarder does not respond, the server attempts to resolve the query itself. This is the default setting.
- 1
A subordinate. If the forwarder does not respond, the server terminates the search and sends a failure to the resolver.
- 0
- /localnetpriority [0|1]
Determines the order in which host records are returned when the server has multiple host records for the same name.- 0
Returns the records in the order in which they are listed in the DNS database.
- 1
Returns the records that have similar IP network addresses first. This is the default setting.
- 0
- /logfilemaxsize [0x10000-0xFFFFFFFF|0x400000]
Specifies the maximum size in bytes (0x10000-0xFFFFFFFF) of the Dns.log file. When the file reaches its maximum, DNS overwrites the oldest events. The default size is 0x400000, which is 4 MB.
- /logfilepath [Path+LogFileName]
Specifies the path of the Dns.log file. The default path is %systemroot%\System32\Dns\Dns.log. A different path can be specified by using the format Path+LogFileName.
- /logipfilterlist IPAddress [,IPAddress...]
Specifies which packets are logged in the debug log file. The entries are a list of IP addresses. Only packets going to and from the IP addresses in the list are logged.
- /loglevel [EventType]
Determines which types of events are recorded in the Dns.log file. Each type is represented by a hexadecimal number. If you want more than one event in the log, use hexadecimal addition to add the values, then enter the sum.- 0x0
The DNS server does not create a log. This is the default entry.
- 0x10
Logs queries.
- 0x10
Logs notifications.
- 0x20
Logs updates.
- 0xFE
Logs non-query.
- 0x100
Logs question transactions.
- 0x200
Logs answers.
- 0x1000
Logs send packets.
- 0x2000
Logs receive packets.
- 0x4000
Logs UDP packets.
- 0x8000
Logs TCP packets.
- 0xFFFF
Logs all packets.
- 0x10000
Logs Active Directory write transactions.
- 0x20000
Logs Active Directory update transactions.
- 0x1000000
Logs full packets.
- 0x80000000
Logs write-through transactions.
- 0x0
- /maxcachesize
Specifies the maximum size, in kilobytes, of the DNS server’s memory cache.
- /maxcachettl [0x0-0xFFFFFFFF|0x15180]
Determines how many seconds (0x0-0xFFFFFFFF) a record is saved in cache. If the 0x0 setting is used, then the DNS server does not cache records. The default setting is 0x15180 (86,400 seconds or 1 day).
- /maxnegativecachettl [0x1-0xFFFFFFFF|0x384]
Specifies how many seconds (0x1-0xFFFFFFFF) an entry that records a negative answer to a query remains stored in the DNS cache. The default setting is 0x384 (900) seconds.
- /namecheckflag [0|1|2|3]
Specifies which character standard is used when allowing DNS names.- 0
Uses ANSI characters that comply with IETF Requests For Comment (RFCs).
- 1
Uses ANSI characters that do not necessarily comply with IETF RFCs.
- 2
Uses multibyte UTF8 characters. This is the default setting.
- 3
Uses all characters.
- 0
- /norecursion [0|1]
Determines whether a DNS server performs recursive name resolution.- 0
DNS server performs recursive resolution if it is requested in a query. This is the default setting.
- 1
DNS server does not perform recursive resolution.
- 0
- /notcp
This parameter is obsolete and has no effect in Windows Server 2003.
- /recursionretry [0x1-0xFFFFFFFF|0x3]
Determines the number of seconds (0x1-0xFFFFFFFF) a DNS server waits before again trying to contact a remote server. The default setting is 0x3 (3 seconds). This value should be increased when recursion occurs over a slow WAN link.
- /recursiontimeout [0x1-0xFFFFFFFF|0xF]
Determines the number of seconds (0x1-0xFFFFFFFF) a DNS server waits before discontinuing attempts to contact a remote server. The settings range from 0x1 through 0xFFFFFFFF. The default setting is 0xF (15 seconds). This value should be increased when recursion occurs over a slow WAN link.
- /roundrobin [0|1]
Determines the order in which host records are returned when a server has multiple host records for the same name.- 0
DNS server does not use round robin; instead, it returns the first record to every query.
- 1
DNS server rotates among the records that it returns from the top to the bottom of the list of matching records. This is the default setting.
- 0
- /rpcprotocol [0x0|0x1|0x2|0x4|0xFFFFFFFF]
Specifies the protocol that RPC uses when making a connection from the DNS server.- 0x0
Disables RPC for DNS.
- 0x1
Uses TCP/IP.
- 0x2
Uses named pipes.
- 0x4
Uses LPC.
- 0xFFFFFFFF
All protocols. This is the default setting.
- 0x0
- /scavenginginterval [0x0-0xFFFFFFFF|0x0]
Determines whether the scavenging feature for the DNS server is enabled, and sets the number of hours (0x0-0xFFFFFFFF) between scavenging cycles. The default setting is 0x0, which disables scavenging for the DNS server. A setting greater than 0x0 enables scavenging for the server and sets the number of hours between scavenging cycles.
- /secureresponses [0|1]
Determines whether DNS filters records that are saved in a cache.- 0
Saves all responses to name queries to a cache. This is the default setting.
- 1
Saves only the records that belong to the same DNS subtree to a cache.
- 0
- /sendport [0x0-0xFFFFFFFF|0x0]
Specifies the port number (0x0-0xFFFFFFFF) that DNS uses to send recursive queries to other DNS servers. The default setting is 0x0, which means the port number is randomly selected.
- /serverlevelplugindll[DllPath]
Specifies the path of a custom plug-in. When DllPath specifies the fully qualified path name of a valid DNS server plug-in, the DNS server calls functions in the plug-in to resolve name queries that are outside the scope of all locally hosted zones. If a queried name is out of the scope of the plug-in, the DNS server performs name resolution using forwarding or recursion, as configured. If DllPath is not specified, the DNS server ceases to use a custom plug-in if a custom plug-in was previously configured.
- /strictfileparsing [0|1]
Determines a DNS server's behavior when it encounters an erroneous record while loading a zone.- 0
Continues to load even if the server encounters an erroneous record. The error is recorded in the DNS log. This is the default setting.
- 1
Stops loading and records the error in the DNS log.
- 0
- /updateoptions RecordValue
Prohibits dynamic updates of specified types of records. If you want more than one record type prohibited in the log, use hexadecimal addition to add the values, then enter the sum.- 0x0
Does not restrict any record types.
- 0x1
Excludes SOA (Start of Authority) records.
- 0x2
Excludes NS (name server) records.
- 0x4
Excludes delegation NS records.
- 0x8
Excludes server host records.
- 0x100
On secure dynamic update, excludes SOA records.
- 0x200
On secure dynamic update, excludes root NS records.
- 0x30F
On standard dynamic update, excludes NS, SOA, and server host records. On secure dynamic update, excludes root NS and SOA records. Allows delegations and server host updates.
- 0x400
On secure dynamic update, excludes delegation NS records.
- 0x800
On secure dynamic update, excludes server host records.
- 0x1000000
Excludes DS records.
- 0x80000000
Disables DNS dynamic update.
- 0x0
- /writeauthorityns [0|1]
Determines when the DNS server writes name server (NS) records in the Authority section of a response.- 0
Writes NS records in the Authority section of referrals only. This setting complies with RFC 1034, Domain names—concepts and facilities, and with RFC 2181, Clarifications to the DNS Specification. This is the default setting.
- 1
Writes NS records in the Authority section of all successful authoritative responses.
- 0
- /xfrconnecttimeout [0x0-0xFFFFFFFF|0x1E]
Determines the number of seconds (0x0-0xFFFFFFFF) a primary DNS server waits for a transfer response from its secondary. The default value is 0x1E (30 seconds). After the time-out value expires, the connection is terminated.
Zone-Level Syntax
dnscmd /configParameters
Parameters
- Parameters
Specify a setting, a zone name, and, optionally, a value. Parameters values use this syntax: ZoneName Parameter [Value] The following Parameters values are documented in the remainder of this section:/aging
/allownsrecordsautocreation
/allowupdate
/forwarderslave
/forwardertimeout
/norefreshinterval
/refreshinterval
/securesecondaries
- /aging ZoneName
Enables or disables scavenging in a specific zone.
- /allownsrecordsautocreation ZoneName [Value]
Overrides the DNS server's NS record autocreation setting. NS resource records that were previously registered for this zone are not affected and so must be manually removed if not wanted.
- /allowupdate ZoneName
Determines whether the specified zone accepts dynamic updates.
- /forwarderslave ZoneName
Overrides the DNS server /isslave setting.
- /forwardertimeout ZoneName
Determines how many seconds a DNS zone waits for a forwarder to respond before trying another. This value overrides the value set at the server level.
- /norefreshinterval ZoneName
Sets a time interval for a zone during which no refreshes can dynamically update DNS records in a specified zone.
- /refreshinterval ZoneName
Sets a time interval for a zone during which refreshes can dynamically update DNS records in a specified zone.
- /securesecondaries ZoneName
Determines which secondary servers can receive zone updates from the master for this zone.
Remarks
- The zone name needs to be specified only for zone-level parameters.
Dnscmd createbuiltindirectorypartitions
Creates a DNS application directory partition. When DNS is installed, an application directory partition for the service is created at the forest and domain levels. Use this operation to create DNS application directory partitions that were deleted or never created. With no argument, this operation creates a built-in DNS directory partition for the domain.
Syntax
dnscmd [ServerName] /createbuiltindirectorypartitions [/forest] [/alldomains]
Parameters
- ServerName
Specifies the DNS server the administrator plans to manage, represented by IP address, FQDN, or Host name. If omitted, the local server is used.
- /forest
Creates a DNS directory partition for the forest.
- /alldomains
Creates DNS partitions for all domains in the forest.
Dnscmd createdirectorypartition
Creates a DNS application directory partition. When DNS is installed, an application directory partition for the service is created at the forest and domain levels. This operation creates additional DNS application directory partitions.
Syntax
dnscmd [ServerName] /createdirectorypartition PartitionFQDN
Parameters
- ServerName
Specifies the DNS server the administrator plans to manage, represented by IP address, FQDN, or Host name. If omitted, the local server is used.
- PartitionFQDN
The fully qualified domain name of the DNS application directory partition that will be created.
Dnscmd deletedirectorypartition
Removes an existing DNS application directory partition.
Syntax
dnscmd [ServerName] /deletedirectorypartition PartitionFQDN
Parameters
- ServerName
Specifies the DNS server the administrator plans to manage, represented by IP address, FQDN, or Host name. If omitted, the local server is used.
- PartitionFQDN
The fully qualified domain name of the DNS application directory partition that will be removed.
Dnscmd directorypartitioninfo
Lists information about a specified DNS application directory partition.
Syntax
dnscmd [ServerName] /directorypartitioninfo PartitionFQDN [/detail]
Parameters
- ServerName
Specifies the DNS server the administrator plans to manage, represented by IP address, FQDN, or Host name. If omitted, the local server is used.
- PartitionFQDN
The fully qualified domain name of the DNS application directory partition.
- /detail
Lists all information about the records.
Dnscmd enlistdirectorypartition
Adds the DNS server to the specified directory partition's replica set.
Syntax
dnscmd [ServerName] /enlistdirectorypartition PartitionFQDN
Parameters
- ServerName
Specifies the DNS server the administrator plans to manage, represented by IP address, FQDN, or Host name. If omitted, the local server is used.
- PartitionFQDN
The fully qualified domain name of the DNS application directory partition.
Dnscmd enumdirectorypartitions
Lists the DNS application directory partitions for the specified server.
Syntax
dnscmd [ServerName] /enumdirectorypartitions [/custom]
Parameters
- ServerName
Specifies the DNS server the administrator plans to manage, represented by IP address, FQDN, or Host name. If omitted, the local server is used.
- /custom
Lists only user-created directory partitions.
Dnscmd enumrecords
Lists the resource records of a specified node in a DNS zone.
Syntax
dnscmd [ServerName] /enumrecords ZoneName NodeName[/type RRType RRData] [/authority] [/glue] [/additional] [/node |/child |/startchildChildName] [/continue |/detail]
Parameters
- ServerName
Specifies the DNS server the administrator plans to manage, represented by IP address, FQDN, or Host name. If omitted, the local server is used.
- ZoneName
Specifies the name of the zone to which the record belongs.
- NodeName
Specifies the name of the node of the record.
- /type RRType RRData
Specifies the type of record to be listed and the type of data expected.- RRType
Specifies the type of record to be listed.
- RRData
Specifies the type of data that is expected when using a certain data type.
- RRType
- /authority
Includes authoritative data.
- /glue
Includes glue data.
- /additional
Includes all additional information about the records listed.
- {/node **| **/child | /startchild ChildName}
Filters or adds information to the record display.- /node
Lists only the records of the specified node. - /child
Lists only the records of a specified child. - /startchildChildName**
Begins the list at the specified child.
- /node
- /continue| /detail
Specifies how the returned data is displayed.- /continue
Lists only the records with their type and data.
- /detail
Lists all information about the records.
- /continue
Sample Usage
dnscmd /enumrecords test.contoso.com test /additional
Dnscmd enumzones
Lists zones that exist on the specified DNS server.
Syntax
dnscmd [ServerName] /enumzones [/primary | /secondary | /forwarder | /stub | /cache | /auto-created] [/forward | /reverse | /ds | /file] [/domaindirectorypartition | /forestdirectorypartition | /customdirectorypartition | /legacydirectorypartition | /directorypartition PartitionFQDN]
Parameters
- ServerName
Specifies the DNS server the administrator plans to manage, represented by IP address, FQDN, or Host name. If omitted, the local server is used.
- ****/primary **| **/secondary **| **/forwarder **| **/stub **| **/cache | /auto-created
Filters the types of zones to display.- /primary
Lists all zones that are either standard primary or Active Directory-integrated.
- /secondary
Lists all standard secondary zones.
- /forwarder
Lists zones that forward unresolved queries to another DNS server.
- /stub
Lists all stub zones.
- /cache
Lists only the zones that are loaded into cache.
- /auto-created
Lists the zones that were created automatically during the DNS server installation.
- /primary
- ****/forward **| **/reverse **| **/Ds | /file
Specifies an additional filter of the types of zones to display.- /forward
Lists forward lookup zones.
- /reverse
Lists reverse lookup zones.
- /ds
Lists directory-integrated zones.
- /file
Lists zones that are backed by files.
- /domaindirectorypartition
Lists zones that are stored in the domain directory partition.
- /forestdirectorypartition
Lists zones that are stored in the forest DNS application directory partition.
- /customdirectorypartition
Lists all zones stored in a user-defined application directory partitions.
- /legacydirectorypartition
Lists all zones stored in the domain directory partition.
- /directorypartitionPartitionFQDN**
Lists all zones stored in the specified directory partition.
- /forward
Remarks
- The enumzones operation parameters act as filters on the list of zones. If no filters are specified, then a complete list of zones is returned. When a filter is used, only the zones that meet that filter's criteria are included in the returned list of zones.
Example
See Dnscmd Examples or Dnscmd Examples.
Dnscmd info
Displays settings from the DNS section of the registry of the specified server: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DNS\Parameters
Syntax
dnscmd [ServerName] /info[Setting]
Parameters
- ServerName
Specifies the DNS server the administrator plans to manage, represented by IP address, FQDN, or Host name. If omitted, the local server is used.
- Setting
Any setting returned by the info operation can be individually specified. If a setting is not specified, then all settings are returned.
Remarks
This operation displays registry settings that are at the DNS server level. To display zone-level registry settings, use the Dnscmd zoneinfo operation. To see a list of settings that can be displayed with this operation, refer to the Dnscmd config operation Help.
If you do not specify a value for the parameter when you use the Dnscmd config operation, the parameter's current value is reset to the default value.
Example
See Dnscmd Examples or Dnscmd Examples.
Dnscmd nodedelete
Deletes all records for a specified host.
Syntax
dnscmd [ServerName] /nodedelete ZoneName NodeName [/tree] [/f]
Parameters
- ServerName
Specifies the DNS server the administrator plans to manage, represented by IP address, FQDN, or Host name. If omitted, the local server is used.
- ZoneName
Specifies the name of the zone.
- NodeName
Specifies the host name of the node to delete.
- /tree
Specifies to delete all of the child records.
- /f
Executes the command without asking for confirmation.
Example
See Dnscmd Examples.
Dnscmd recordadd
Adds a record to a specified zone in a DNS server.
Syntax
dnscmd [ServerName] /recordadd ZoneName NodeName RRType RRData
Parameters
- ServerName
Specifies the DNS server the administrator is planning to manage, represented by local computer syntax, IP address, FQDN, or Host name. If omitted, the local server is used.
- ZoneName
Specifies the zone in which the record resides.
- NodeName
Specifies a specific node in the zone.
- RRType
Specifies the type of record to be added.
- RRData
Specifies the type of data that is expected when using a certain data type.
Note
Resource records added with this command are configured to be static unless the /Aging switch is used. See the examples below.
When you add a record, make sure you use the correct data type and data format. For a list of resource record types and the appropriate data types, see Resource records reference.
Sample Usage
dnscmd dnssvr1.contoso.com /recordadd contoso.com test A 10.0.0.5
dnscmd dnssvr1.contoso.com /recordadd contoso.com test2 /Aging A 10.0.0.6
dnscmd /recordadd test.contoso.com test MX 10 mailserver.test.contoso.com
Dnscmd recorddelete
Deletes a resource record from a specified zone.
Syntax
dnscmdServerName**/recorddeleteZoneNameNodeNameRRTypeRRData[/f**]
Parameters
- ServerName
Specifies the DNS server the administrator plans to manage, represented by IP address, FQDN, or Host name. If omitted, the local server is used.
- ZoneName
Specifies the zone in which the record resides.
- NodeName
Specifies the name of the host.
- RRType
Specifies the type of record to be deleted.
- RRData
Specifies the type of data that is expected when using a certain data type.
- /f
Note Executes the command without asking for confirmation.Because nodes can have more than one resource record, this command requires you to be very specific about the type of record that you want to delete.
If you specify a data type and do not specify a type of resource record data, then all records with that specific data type for the specified node are deleted. For a list of resource record types and the appropriate data types, see Resource records reference.
Sample Usage
dnscmd /recorddelete test.contoso.com test MX 10 mailserver.test.contoso.com
Dnscmd resetforwarders
Selects or resets IP address(es) to which the DNS server forwards DNS queries when it cannot solve them locally.
Syntax
dnscmd [ServerName] /resetforwarders [IPAddress [,IPAddress]...][/timeout TimeOut] [/slave|/noslave]
Parameters
- ServerName
Specifies the DNS server the administrator plans to manage, represented by IP address, FQDN, or Host name. If omitted, the local server is used.
- IPAddress
Lists the IP address(es) to which the DNS server forwards unresolved queries.
- /timeout TimeOut
Sets the number of seconds that the DNS server waits for a response from the forwarder. By default, this value is 5 seconds.
- /slave|/noslave****
Determines whether the DNS server performs its own iterative queries if the forwarder fails to resolve a query.- /slave
Prevents the DNS server from performing its own iterative queries if the forwarder fails to resolve a query.
- /noslave
Allows the DNS server to perform its own iterative queries if the forwarder fails to resolve a query. This is the default setting.
- /slave
Remarks
By default, a DNS server performs iterative queries when it cannot resolve a query.
Setting IP addresses by using the resetforwarders operation causes the DNS server to perform recursive queries to the DNS servers at the specified IP addresses. If the forwarders do not resolve the query, the DNS server can then perform its own iterative queries.
If the /slave parameter is used, the DNS server does not perform its own iterative queries. This means the DNS server forwards unresolved queries only to the DNS servers in the list and does not try iterative queries if the forwarders do not resolve it. It is more efficient to set one IP address as a forwarder for a DNS server. The resetforwarders operation can be used for internal servers in a network to forward their unresolved queries to one DNS server that has an external connection.
Listing a forwarder’s IP address twice causes the DNS server to try to forward to that server twice.
Sample Usage
dnscmd dnssvr1.contoso.com /resetforwarders 10.0.0.1 /timeout 7 /slave
dnscmd dnssvr1.contoso.com /resetforwarders /noslave
Dnscmd resetlistenaddresses
Specifies the IP addresses on a server that listen for DNS client requests.
Syntax
dnscmd [ServerName] /resetlistenaddresses [ListenAddress]
Parameters
- ServerName
Specifies the DNS server the administrator plans to manage, represented by IP address, FQDN, or Host name. If omitted, the local server is used.
- ListenAddress
Specifies an IP address on the DNS server that listens for DNS client requests. If no listen address is specified, then all IP addresses on the server listen for client requests.
Remarks
- By default, all IP addresses on a DNS server listen for client DNS requests.
Sample Usage
dnscmd dnssvr1.contoso.com /resetlistenaddresses 10.0.0.1
Dnscmd startscavenging
Notifies a DNS server to attempt an immediate search for stale resource records in a specified DNS server.
Syntax
dnscmd [ServerName] /startscavenging
Parameter
- ServerName
Specifies the DNS server the administrator plans to manage, represented by IP address, FQDN, or Host name. If omitted, the local server is used.
Remarks
Successful completion of this command triggers an immediate start to a scavenge.
Although the command to start the scavenge appears to complete successfully, the scavenge does not start unless the following preconditions are met:
Scavenging is enabled for both the server and the zone.
The zone is started.
The resource records have a time stamp.
For information about how to enable scavenging for the server, see the scavenginginterval parameter under Server-Level Syntax in the Dnscmd config operation in this document.
For information about how to enable scavenging for the zone, see the aging parameter under Zone-Level Syntax in the Dnscmd config operation in this document.
For information about how to start a zone that is paused, see the Dnscmd zoneresume operation in this document.
For information about how to check resource records for a time stamp, see the Dnscmd ageallrecords operation in this document.
If the scavenge fails, no warning message displays.
Sample Usage
dnscmd dnssvr1.contoso.com /startscavenging
Dnscmd statistics
Displays or clears data for a specified DNS server.
Syntax
dnscmd [ServerName] /statistics [StatID] [/clear]
Parameters
- ServerName
Specifies the DNS server the administrator plans to manage, represented by IP address, FQDN, or Host name. If omitted, the local server is used.
- StatID
Specifies which statistic or combination of statistics displays. An identification number is used to specify a statistic. If no statistic ID is specified, all statistics display. The following table lists numbers that can be specified and the corresponding statistic that lists:- 00000001
Time
- 00000002
Query
- 00000004
Query2
- 00000008
Recurse
- 00000010
Master
- 00000020
Secondary
- 00000040
WINS
- 00000100
Update
- 00000200
SkwanSec
- 00000400
Ds
- 00010000
Memory
- 00100000
PacketMem
- 00040000
Dbase
- 00080000
Records
- 00200000
NbstatMem
- 00000001
- /clear
Resets the specified statistics counter to zero.
Remarks
- The statistics operation displays counters that begin on the DNS server when it is started or resumed.
Examples
See Dnscmd Examples or Dnscmd Examples.
Dnscmd unenlistdirectorypartition
Removes the DNS server from the specified directory partition's replica set.
Syntax
dnscmd [ServerName] /unenlistdirectorypartition PartitionFQDN
Parameters
- ServerName
Specifies the DNS server the administrator plans to manage, represented by IP address, FQDN, or Host name. If omitted, the local server is used.
- PartitionFQDN
The fully qualified domain name of the DNS application directory partition that will be removed.
Dnscmd writebackfiles
Checks DNS server memory for changes and writes them to persistent storage.
Syntax
dnscmd [ServerName] **/writebackfiles **[ZoneName]
Parameters
- ServerName
Specifies the DNS server the administrator plans to manage, represented by IP address, FQDN, or Host name. If omitted, the local server is used.
- ZoneName
Specifies the name of the zone to be updated.
Remarks
- The writebackfiles operation updates all dirty zones or a specified zone. A zone is dirty when there are changes in memory that have not yet been written to persistent storage. This is a server-level operation that checks all zones. One zone can be specified in this operation or the Dnscmd zonewriteback operation can be used.
Sample Usage
dnscmd dnssvr1.contoso.com /writebackfiles
Dnscmd zoneadd
Adds a zone to the DNS server.
Syntax
dnscmd [ServerName] /zoneadd ZoneName ZoneType [/dp FQDN| {/domain|/enterprise|/legacy}] /load
Parameters
- ServerName
Specifies the DNS server the administrator plans to manage, represented by IP address, FQDN, or Host name. If omitted, the local server is used.
- ZoneName
Specifies the name of the zone.
- ZoneType
Specifies the type of zone to create. Each type has different required parameters.- /dsprimary
Creates an Active Directory-integrated zone.
- /primary /file FileName
Creates a standard primary zone and specifies the name of the file that will store the zone information.
- /secondary MasterIPAddress [MasterIPAddress...] /file FileName
Creates a file-backed secondary zone. If the /file option is specified, a file is created in the %windir%\system32\dns directory.
- /stub MasterIPAddress [MasterIPAddress...] /file FileName
Creates a file-backed stub zone.
- /dsstub MasterIPAddress [MasterIPAddress...]
Creates an Active Directory-integrated stub zone.
- /forwarder MasterIPAddress [MasterIPAddress]... /file FileName
Specifies that the created zone forwards unresolved queries to another DNS server.
- /dsforwarder
Specifies that the created Active Directory-integrated zone forwards unresolved queries to another DNS server.
- /dsprimary
- /dp FQDN {/domain **| **/enterprise | /legacy}
Specifies the directory partition on which to store the zone.- FQDN
Specifies fully qualified domain name of the directory partition.
- /domain
Stores the zone on the domain directory partition.
- /enterprise
Stores the zone on the enterprise directory partition.
- /legacy
Stores the zone on a legacy directory partition.
- FQDN
- /load
Required if the new zone is loaded from a file.
Remarks
- Specifying a zone type of /forwarder or /dsforwarder creates a zone that performs conditional forwarding.
Sample Usage
dnscmd dnssvr1.contoso.com /zoneadd test.contoso.com /dsprimary
dnscmd dnssvr1.contoso.com /zoneadd secondtest.contoso.com /secondary 10.0.0.2
dnscmd dnssvr1.contoso.com /zoneadd secondtest.contoso.com /secondary 10.0.0.2 /file secondtest.contoso.com.dns
Dnscmd zonechangedirectorypartition
Changes the directory partition on which the specified zone resides.
Syntax
dnscmd [ServerName] /zonechangedirectorypartition ZoneName] {[NewPartitionName] | [ZoneType] }
Parameters
- ServerName
Specifies the DNS server the administrator plans to manage, represented by IP address, FQDN, or Host name. If omitted, the local server is used.
- /ZoneName
FQDN of the current directory partition on which the zone resides.
- NewPartitionName
FQDN of the directory partition that the zone will be moved to.
- ZoneType
Specifies the type of directory partition that the zone will be moved to.- /domain
Move the zone to the built-in domain directory partition.
- /forest
Move the zone to the built-in forest directory partition.
- /legacy
Move the zone to the directory partition created for pre-Active Directory domain controllers. These directory partitions are not needed when in native mode.
- /domain
Dnscmd zonedelete
Deletes a specified zone.
Syntax
dnscmd [ServerName] /zonedelete *ZoneName *[/dsdel] [/f]
Parameters
- ServerName
Specifies the DNS server the administrator plans to manage, represented by IP address, FQDN, or Host name. If omitted, the local server is used.
- ZoneName
Specifies the name of the zone to be deleted.
- /dsdel
Deletes the zone from Active Directory.
- /f
Executes the command without asking for confirmation.
Example
See Dnscmd Examples.
Dnscmd zoneexport
Creates a text file that lists the resource records of a specified zone.
Syntax
dnscmd [ServerName] /zoneexport ZoneName ZoneExportFile
Parameters
- ServerName
Specifies the DNS server the administrator is planning to manage, represented by local computer syntax, IP address, FQDN, or Host name. If omitted, the local server is used.
- ZoneName
Specifies the name of the zone.
- ZoneExportFile
Specifies the name of the file to create.
Remarks
- The zoneexport operation creates a file of resource records for an Active Directory-integrated zone for troubleshooting purposes. By default, the file created by this operation is placed in the DNS directory, which is by default the %systemroot%/System32/Dns directory.
Example
See Dnscmd Examples.
Dnscmd zoneinfo
Displays settings from the section of the registry of the specified zone: **HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DNS\Parameters\Zones\**ZoneName
Syntax
dnscmd [ServerName] /zoneinfo ZoneName [Setting]
Parameters
- ServerName
Specifies the DNS server the administrator plans to manage, represented by IP address, FQDN, or Host name. If omitted, the local server is used.
- ZoneName
Specifies the name of the zone.
- Setting
Any setting returned with the zoneinfo operation can be individually specified. If a setting is not specified, then all settings are returned.
Remarks
The zoneinfo operation displays registry settings that are at the DNS zone level found at **HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DNS\Parameters\Zones\**ZoneName.
To display server-level registry settings, use the Dnscmd info operation.
To see a list of settings that can be displayed with this operation, refer to the Dnscmd config operation.
Example
See Dnscmd Examples or Dnscmd Examples.
Dnscmd zonepause
Pauses the specified zone, which then ignores query requests.
Syntax
dnscmd [ServerName] /zonepause ZoneName
Parameters
- ServerName
Specifies the DNS server the administrator plans to manage, represented by IP address, FQDN, or Host name. If omitted, the local server is used.
- ZoneName
Specifies the name of the zone to be paused.
Remarks
- To resume a zone and make it available after it has been paused, use the Dnscmd zoneresume operation.
Sample Usage
dnscmd dnssvr1.contoso.com /zonepause test.contoso.com
Dnscmd zoneprint
Lists the records in a zone.
Syntax
dnscmd [ServerName] /zoneprint ZoneName
Parameters
- ServerName
Specifies the DNS server the administrator is planning to manage, represented by local computer syntax, IP address, FQDN, or Host name. If omitted, the local server is used.
- ZoneName
Identifies the zone on which the type will be changed.
Dnscmd zoneresettype
Changes the type of the zone.
Syntax
dnscmd [ServerName] /zoneresettype ZoneName ZoneType [**/overwrite_mem **| /overwrite_ds]
Parameters
- ServerName
Specifies the DNS server the administrator is planning to manage, represented by local computer syntax, IP address, FQDN, or Host name. If omitted, the local server is used.
- ZoneName
Identifies the zone on which the type will be changed.
- ZoneType
Specifies the type of zone to create. Each type has different required parameters.- /dsprimary
Creates an Active Directory-integrated zone.
- /primary /file FileName
Creates a standard primary zone.
- /secondary MasterIPAddress [,MasterIPAddress...]
Creates a standard secondary zone.
- /stub MasterIPAddress [,MasterIPAddress...] /file FileName
Creates a file-backed stub zone.
- /dsstub MasterIPAddress [,MasterIPAddress...]
Creates an Active Directory-integrated stub zone.
- /forwarder MasterIPAddress [,MasterIPAddress]... /file FileName
Specifies that the created zone forwards unresolved queries to another DNS server.
- /dsforwarder
Specifies that the created Active Directory-integrated zone forwards unresolved queries to another DNS server.
- /dsprimary
- ****/overwrite_mem | /overwrite_ds
Specifies how to overwrite existing data.- /overwrite_mem
Overwrites DNS data from data in Active Directory.
- /overwrite_ds
Overwrites existing data in Active Directory.
- /overwrite_mem
Remarks
- Setting the zone type as /dsforwarder creates a zone that performs conditional forwarding.
Sample Usage
dnscmd dnssvr1.contoso.com /zoneresettype test.contoso.com /primary /file test.contoso.com.dns
dnscmd dnssvr1.contoso.com /zoneresettype second.contoso.com /secondary 10.0.0.2
Dnscmd zonerefresh
Forces a secondary DNS zone to update from the master.
Syntax
dnscmdServerName**/zonerefresh**ZoneName
Parameters
- ServerName
Specifies the DNS server the administrator plans to manage, represented by IP address, FQDN, or Host name. If omitted, the local server is used.
- ZoneName
Specifies the name of the zone to be refreshed.
Remarks
The zonerefresh operation forces a check of the version number in the master's SOA record. If the version number on the master is higher than the secondary's version number, then a zone transfer is initiated, updating the secondary server. If the version number is the same, no zone transfer occurs.
The forced check occurs by default every 15 minutes. To change the default, use the dnscmd config refreshinterval operation.
Sample Usage
dnscmd dnssvr1.contoso.com /zonerefresh test.contoso.com
Dnscmd zonereload
Copies zone information from its source.
Syntax
dnscmdServerName**/zonereload**ZoneName
Parameters
- ServerName
Specifies the DNS server the administrator plans to manage, represented by IP address, FQDN, or Host name. If omitted, the local server is used.
- ZoneName
Specifies the name of the zone to be reloaded.
Remarks
If the zone is Active Directory-integrated, then it reloads from Active Directory.
If the zone is a standard file-backed zone, then it reloads from a file.
Sample Usage
dnscmd dnssvr1.contoso.com /zonereload test.contoso.com
Dnscmd zoneresetmasters
Resets the IP addresses of the master server that provides zone transfer information to a secondary zone.
Syntax
dnscmdServerName**/zoneresetmastersZoneName [/local**] [ServerIPs]
Parameters
- ServerName
Specifies the DNS server the administrator plans to manage, represented by IP address, FQDN, or Host name. If omitted, the local server is used.
- ZoneName
Specifies the name of the zone to be reloaded.
- /local
Sets a local master list. Used for Active Directory-integrated zones.
- ServerIPs
The IP addresses of the master server(s) of the secondary zone. Enter this value as IPAddress [IPAddress]...
Remarks
- This value is originally set when the secondary zone is created. Use the zoneresetmasters operation on the secondary server. It has no effect if it is set on the master DNS server.
Sample Usage
dnscmd dnssvr1.contoso.com /zoneresetmasters test.contoso.com 10.0.0.1
dnscmd dnssvr1.contoso.com /zoneresetmasters test.contoso.com /local
Dnscmd zoneresetscavengeservers
Changes the IP address(es) of the server(s) that can scavenge the specified zone.
Syntax
dnscmd [ServerName] /zoneresetscavengeservers ZoneName [ServerIPs]
Parameters
- ServerName
Specifies the DNS server the administrator is planning to manage, represented by local computer syntax, IP address, FQDN, or Host name. If omitted, the local server is used.
- ZoneName
Identifies the zone to scavenge.
- ServerIPs
Lists the IP address(es) of the server(s) that can perform the scavenge. If this parameter is omitted, then all servers hosting this zone can scavenge it.
Remarks
By default, all servers hosting a zone can scavenge that zone.
If a zone is hosted on more than one DNS server, this operation can be used to reduce the number of times a zone is scavenged.
Scavenging must be enabled on the DNS server and zone affected by this operation.
Sample Usage
dnscmd dnssvr1.contoso.com /zoneresetscavengeservers test.contoso.com 10.0.0.1 10.0.0.2
Dnscmd zoneresetsecondaries
Specifies a list of IP addresses to which a master server responds when asked for a zone transfer.
Syntax
dnscmd [ServerName] /zoneresetsecondaries ZoneName {/noxfr | /nonsecure | /securens | /securelist SecurityIPAddresses} {/nonotify | /notify | **/notifylist **NotifyIPAddresses}
Parameters
- ServerName
Specifies the DNS server the administrator plans to manage, represented by IP address, FQDN, or Host name. If omitted, the local server is used.
- ZoneName
Specifies the name of the zone to have its secondaries reset.
- **/noxfr | /nonsecure | /securens | **/securelist SecurityIPAddresses
Specifies whether only some or all of the secondary servers requesting an update get one.- /noxfr
Specifies that no zone transfers are allowed.
- /nonsecure
Specifies that all zone transfer requests are granted.
- /securens
Specifies that only the server listed in the NS record for the zone is granted a transfer.
- /securelist
Specifies that zone transfers are granted only to the list of servers. This parameter must be followed by an IP address or addresses that the master server uses.
- SecurityIPAddresses
Lists the IP addresses that receive zone transfers from the master server. This parameter is used only with the /securelist parameter.
- /noxfr
- **/nonotify | /notify | **/notifylist NotifyIPAddresses
Specifies a change notification is sent only to certain secondary servers.- /nonotify
Specifies that no change notifications are sent to secondary servers.
- /notify
Specifies that change notifications are sent to all secondary servers.
- /notifylist
Specifies that change notifications are sent to only the list of servers. This command must be followed by an IP address or addresses that the master server uses.
- NotifyIPAddresses
Specifies the IP address(es) of the secondary server(s) to which change notifications are sent. This list is used only with the /notifylist parameter.
- /nonotify
Remarks
- Use the zoneresetsecondaries operation on the master server to set how it responds to zone transfer requests from secondary servers.
Sample Usage
dnscmd dnssvr1.contoso.com /zoneresetsecondaries test.contoso.com /noxfr /nonotify
dnscmd dnssvr1.contoso.com /zoneresetsecondaries test.contoso.com /securelist 11.0.0.2
Dnscmd zoneresume
Starts a specified zone that was previously paused.
Syntax
dnscmdServerName**/zoneresume**ZoneName
Parameters
- ServerName
Specifies the DNS server the administrator plans to manage, represented by IP address, FQDN, or Host name. If omitted, the local server is used.
- ZoneName
Specifies the name of the zone to resume.
Remarks
- This operation is used to undo the Dnscmd zonepause operation.
Sample Usage
dnscmd dnssvr1.contoso.com /zoneresume test.contoso.com
Dnscmd zoneupdatefromds
Updates the specified Active Directory-integrated zone from Active Directory.
Syntax
dnscmdServerName**/zoneupdatefromds**ZoneName
Parameters
- ServerName
Specifies the DNS server the administrator plans to manage, represented by IP address, FQDN, or Host name. If omitted, the local server is used.
- ZoneName
Specifies the name of the zone to update.
Remarks
Active Directory-integrated zones perform this update by default every 180 seconds (3 minutes). To change this parameter, use the dnscmd /config /dspollinginterval operation.
To view the current value, use the dnscmd /info /dspollinginterval operation. The value is displayed in seconds.
Sample Usage
dnscmd dnssvr1.contoso.com /zoneupdatefromds
Dnscmd zonewriteback
Checks DNS server memory for changes relevant to a specified zone and writes them to persistent storage.
Syntax
dnscmdServerName**/zonewriteback**ZoneName
Parameters
- ServerName
Specifies the DNS server the administrator plans to manage, represented by IP address, FQDN, or Host name. If omitted, the local server is used.
- ZoneName
Specifies the name of the zone to update.
Remarks
- This is a zone-level operation. All zones on a DNS server can be updated with the Dnscmd writebackfiles operation.
Sample Usage
dnscmd dnssvr1.contoso.com /zonewriteback test.contoso.com
See Also
Concepts
Dnscmd Overview
Dnscmd Examples
Alphabetical List of Tools
Spcheck Overview
Nltest Overview
Netdom Overview
Netdiag Overview
Netcap Overview
Httpcfg Overview
Dnslint Overview
Dhcploc Overview
Dcdiag Overview
Browstat Overview