Microsoft Windows Server DNS Configuration Zone Bad Primary Server

Microsoft.Windows.Server.DNS.Configuration.ZoneBadPrimaryServer (Rule)

Alert generating rule for a zone.

Knowledge Base article:

Summary

The DNS server configuration consists of the settings that determine how the DNS server will function on a network and how those settings are stored and retrieved when they are needed.

Causes

A zone is configured to accept updates but the A record for the primary server in the zone's SOA record is not available on this DNS server.

Resolutions

Correct the zone SOA configuration problem

The DNS Server service cannot locate the server that is identified as the start of authority (SOA) for the zone. You must correct the SOA configuration of the zone.

To perform this procedure, you must have membership in Administrators, or you must have been delegated the appropriate authority.

To correct a zone SOA configuration problem:

1.On the DNS server, start Server Manager. To start Server Manager, click Start, click Administrative Tools, and then click Server Manager.

2.In the console tree, expand Roles, expand DNS Server, and then expand DNS.

3.Right-click the DNS server, and then click Properties.

4.Click Start of Authority (SOA), and then ensure that the correct server is listed in Primary server. If you change any values on this tab, click Increment to ensure that the changes will be propagated to other authoritative servers.

5.Click Name Servers, and then ensure that each server in the list is matched with its IP address. If not, click Add to specify the correct IP addresses for the server.

6.Click OK.

7.In the right pane, verify that the zone contains a host (A or AAAA) resource record for the primary server.

8.If the zone does not contain a host resource record for the primary server, right-click the zone, click New Host (A or AAAA), type the name of the primary server in Name (uses parent domain if blank), type the IP address of the primary server in IP address, and then click Add Host.

External

http://technet.microsoft.com/en-us/library/dd349574(v=ws.10).aspx

Element properties:

TargetMicrosoft.Windows.Server.DNS.Zone
CategoryAlert
EnabledTrue
Alert GenerateTrue
Alert SeverityWarning
Alert PriorityNormal
RemotableTrue
Alert Message
Windows DNS - Configuration - Zone Bad Primary Server

Event ID: {0}
Event Source: {1}
Event Log: {2}

Event Description: {3}
Event LogDNS Server

Member Modules:

ID Module Type TypeId RunAs 
DS DataSource Microsoft.Windows.EventProvider Default
Alert WriteAction System.Health.GenerateAlert Default

Source Code:

<Rule ID="Microsoft.Windows.Server.DNS.Configuration.ZoneBadPrimaryServer" Enabled="true" Target="Microsoft.Windows.Server.DNS.Zone" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">
<Category>Alert</Category>
<DataSources>
<DataSource ID="DS" TypeID="Windows!Microsoft.Windows.EventProvider">
<ComputerName>$Target/Host/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>
<LogName>DNS Server</LogName>
<Expression>
<And>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="UnsignedInteger">800</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="String">Params/Param[1]</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="String">$Target/Property[Type="Microsoft.Windows.Server.DNS.Zone"]/ZoneName$</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</And>
</Expression>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="Alert" TypeID="Health!System.Health.GenerateAlert">
<Priority>1</Priority>
<Severity>1</Severity>
<AlertOwner/>
<AlertMessageId>$MPElement[Name="Microsoft.Windows.Server.DNS.Configuration.ZoneBadPrimaryServer.AlertMessage"]$</AlertMessageId>
<AlertParameters>
<AlertParameter1>$Data/EventDisplayNumber$</AlertParameter1>
<AlertParameter2>$Data/EventSourceName$</AlertParameter2>
<AlertParameter3>$Data/Channel$</AlertParameter3>
<AlertParameter4>$Data/EventDescription$</AlertParameter4>
</AlertParameters>
<Suppression>
<SuppressionValue>$Data/LoggingComputer$</SuppressionValue>
<SuppressionValue>$Data/Params/Param[1]$</SuppressionValue>
</Suppression>
<Custom1/>
<Custom2/>
<Custom3/>
<Custom4/>
<Custom5/>
<Custom6/>
<Custom7/>
<Custom8/>
<Custom9/>
<Custom10/>
</WriteAction>
</WriteActions>
</Rule>