Home
  •  

Microsoft Windows Server DNS Root Hints No Root Name Server

Microsoft.Windows.Server.DNS.RootHints.NoRootNameServer (Rule)

Alert generating rule for Root Hints.

Knowledge Base article:

Summary

Root hints are the names and addresses of servers that are authoritative for the root zone of the Domain Name System (DNS) namespace. Root hints can be used for resolving external names, such as the names of Internet host computers.

Causes

The DNS server does not have a cache or other database entry for root name servers.

Resolutions

Configure root hints

Every DNS server in your network must be configured with the address of at least one root server. Otherwise, the DNS server will not be able to resolve queries for names outside the zones for which it is authoritative.

To perform this procedure, you must have membership in Administrators, or you must have been delegated the appropriate authority.

To configure a DNS server's root hints:

1.On the DNS server, start Server Manager. To start Server Manager, click Start, click Administrative Tools, and then click Server Manager.

2.In the console tree, expand Roles, expand DNS Server, and then expand DNS.

3.Right-click the server, click Properties, and then click the Root Hints tab.

4.Depending on whether you can copy root hints from another DNS server, do one of the following:

Click Copy from Server, type the IP address or DNS name of a DNS server from which you can copy root hints, and then click OK.

Click Add, and then for each server you want to add to the list, type the fully qualified domain name (FQDN) of the server, and then click Resolve.

External

http://technet.microsoft.com/en-us/library/dd349609(v=ws.10).aspx

Element properties:

TargetMicrosoft.Windows.Server.DNS.Server
CategoryAlert
EnabledTrue
Alert GenerateTrue
Alert SeverityError
Alert PriorityNormal
RemotableTrue
Alert Message
Windows DNS - No Root Name Server

Event ID: {0}
Event Source: {1}
Event Log: {2}

Event Description: {3}
Event LogDNS Server

Member Modules:

ID Module Type TypeId RunAs 
DS DataSource Microsoft.Windows.EventProvider Default
Alert WriteAction System.Health.GenerateAlert Default

Source Code:

<Rule ID="Microsoft.Windows.Server.DNS.RootHints.NoRootNameServer" Enabled="true" Target="Microsoft.Windows.Server.DNS.Server" ConfirmDelivery="true" Remotable="true" Priority="Normal" DiscardLevel="100">

  <Category>Alert</Category>

  <DataSources>

    <DataSource ID="DS" TypeID="Windows!Microsoft.Windows.EventProvider">

      <ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

      <LogName>DNS Server</LogName>

      <Expression>

        <SimpleExpression>

          <ValueExpression>

            <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

          </ValueExpression>

          <Operator>Equal</Operator>

          <ValueExpression>

            <Value Type="UnsignedInteger">706</Value>

          </ValueExpression>

        </SimpleExpression>

      </Expression>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="Alert" TypeID="Health!System.Health.GenerateAlert">

      <Priority>1</Priority>

      <Severity>2</Severity>

      <AlertOwner/>

      <AlertMessageId>$MPElement[Name="Microsoft.Windows.Server.DNS.RootHints.NoRootNameServer.AlertMessage"]$</AlertMessageId>

      <AlertParameters>

        <AlertParameter1>$Data/EventDisplayNumber$</AlertParameter1>

        <AlertParameter2>$Data/EventSourceName$</AlertParameter2>

        <AlertParameter3>$Data/Channel$</AlertParameter3>

        <AlertParameter4>$Data/EventDescription$</AlertParameter4>

      </AlertParameters>

      <Suppression/>

      <Custom1/>

      <Custom2/>

      <Custom3/>

      <Custom4/>

      <Custom5/>

      <Custom6/>

      <Custom7/>

      <Custom8/>

      <Custom9/>

      <Custom10/>

    </WriteAction>

  </WriteActions>

</Rule>