SOLVED

DNS Suffix issue after update to Windows 10 2004

%3CLINGO-SUB%20id%3D%22lingo-sub-1503458%22%20slang%3D%22en-US%22%3EDNS%20Suffix%20issue%20after%20update%20to%20Windows%2010%202004%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1503458%22%20slang%3D%22en-US%22%3E%3CP%3EAfter%20update%20to%20Windows%2010%202004%2C%20I%20encountered%20following%20issue.%3C%2FP%3E%3CP%3EThe%20computer%20set%20%3CSTRONG%3Eover%2050%20DNS%20suffixes%3C%2FSTRONG%3E%20cannot%20resolve%20DNS%20servers%2C%20and%20alternatively%20nslookup%20results%26nbsp%3B%22Address%3A%20127.0.0.1%22.%3C%2FP%3E%3CP%3EIf%20I%20remove%20some%20DNS%20suffix%20to%20be%20below%2050%2C%20it%20works%20correctly.%3C%2FP%3E%3CP%3EThis%20issue%20was%20not%20appear%20in%20Windows%2010%201909.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20cannot%20find%20it%20as%20known%20issue%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fwindows%2Frelease-information%2Fstatus-windows-10-2004%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehere%3C%2FA%3E.%3C%2FP%3E%3CP%3EDoes%20anyone%20know%20how%20to%20fix%20this%20issue%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1505253%22%20slang%3D%22en-US%22%3ERe%3A%20DNS%20Suffix%20issue%20after%20update%20to%20Windows%2010%202004%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1505253%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F717388%22%20target%3D%22_blank%22%3E%40Toru_Saito%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3EDo%20you%20have%20any%20management%20software%20installed%3F%20For%20example%2C%20Cisco%20Umbrella%20works%20like%20that%2C%20rewrites%20the%20DNS%20to%20127.0.0.1.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ERegards%2C%3C%2FP%3E%3CP%3EZoltan%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1506164%22%20slang%3D%22en-US%22%3ERe%3A%20DNS%20Suffix%20issue%20after%20update%20to%20Windows%2010%202004%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1506164%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F416550%22%20target%3D%22_blank%22%3E%40IstvanffyZ%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThank%20you%20for%20your%20reply.%20This%20issue%20occurs%20without%20any%20device%20management%20application.%3C%2FP%3E%3CP%3EIn%20my%20environment%2C%20the%20administrator%20distributes%2066%20domains%20to%20DNS%20suffix%20search%20list%20as%20following%20registry%20value%20via%20script%20although%20it%20works%20correctly%20only%20top%2050%20entries.%3C%2FP%3E%3CP%3E%3CEM%3EHKEY_LOCAL_MACHINE%5CSYSTEM%5CCurrentControlSet%5CServices%5CTcpip%5CParameters%5CSearchList%3C%2FEM%3E%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Farchive%2Fblogs%2Fnetro%2Fwindows-dns-domain-suffix-search-list-entry-limitation-of-50-entries%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Farchive%2Fblogs%2Fnetro%2Fwindows-dns-domain-suffix-search-list-entry-limitation-of-50-entries%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSTRONG%3EIn%20Windows%2010%201909%3C%2FSTRONG%3E%3C%2FP%3E%3CP%3EIf%20it%20has%2066%20domains%20in%20DNS%20suffix%20search%20list%2C%20it%20can%20resolve%20DNS%20server%20address.%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%221909-001.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F203843iEA3F022DF30A450B%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20title%3D%221909-001.png%22%20alt%3D%221909-001.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSTRONG%3EIn%20Windows%2010%202004%3C%2FSTRONG%3E%3C%2FP%3E%3CP%3EI%20cannot%20access%20any%20network%20resources%20because%20it%20cannot%20resolve%20DNS%20server%20address%20like%20below.%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22002.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F203848i0118278FC3E6654C%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20title%3D%22002.png%22%20alt%3D%22002.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20know%20it%20is%20the%20best%20way%20to%20reduce%20the%20entries%20to%20under%2050%20but%26nbsp%3B%20I%20would%20like%20to%20confirm%20this%20issue%20appears%20only%20my%20environment%20or%20not.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1506903%22%20slang%3D%22en-US%22%3ERe%3A%20DNS%20Suffix%20issue%20after%20update%20to%20Windows%2010%202004%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1506903%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F717388%22%20target%3D%22_blank%22%3E%40Toru_Saito%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20can%20confirm%2C%20the%20same%20happens%20on%20my%202004%20Windows%2010%20computer.%26nbsp%3B%3C%2FP%3E%3CP%3ETime%20to%20revise%20the%20dns%20entry%20list%20method%20%3A)%3C%2Fimg%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ERegards%2C%3C%2FP%3E%3CP%3EZoltan%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
New Contributor

After update to Windows 10 2004, I encountered following issue.

The computer set over 50 DNS suffixes cannot resolve DNS servers, and alternatively nslookup results "Address: 127.0.0.1".

If I remove some DNS suffix to be below 50, it works correctly.

This issue was not appear in Windows 10 1909.

 

I cannot find it as known issue here.

Does anyone know how to fix this issue?

4 Replies
Highlighted

@Toru_Saito 

Do you have any management software installed? For example, Cisco Umbrella works like that, rewrites the DNS to 127.0.0.1.

 

Regards,

Zoltan

Highlighted

@IstvanffyZ 
Thank you for your reply.

This issue occurred without any management software.

 

In my environment, the administrator distributes DNS suffix search list as a following registry value via startup script and it contains 66 domains.

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\SerachList

 

I know DNS suffix search list works correctly up to 50 in any Windows versions from before but they can resolve DNS server address if they have more than 50 DNS suffix search list domains.

 

In Windows 10 Version 2004

If DNS suffix search list contains 66 domains, it cannot resolve DNS server address correctly, so I cannot access any network resources.

*) The result of (Get-DnsClientGlobalSetting).SuffixSearchList shows only 50 domains but it has 66 domains in "SearchList" registry value.

002.png

In Windows 10 Version 1909

It can resolve DNS server address correctly.

1909-001.png

 

I understand it is the best way to reduce DNS suffix search list domains but I would like to know the issue appears only my environment or not.

 

Regards,

Toru

Highlighted

@IstvanffyZ 

Thank you for your reply. This issue occurs without any device management application.

In my environment, the administrator distributes 66 domains to DNS suffix search list as following registry value via script although it works correctly only top 50 entries.

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\SearchList

https://docs.microsoft.com/en-us/archive/blogs/netro/windows-dns-domain-suffix-search-list-entry-lim...

 

In Windows 10 1909

If it has 66 domains in DNS suffix search list, it can resolve DNS server address.

1909-001.png

 

In Windows 10 2004

I cannot access any network resources because it cannot resolve DNS server address like below.

002.png

 

I know it is the best way to reduce the entries to under 50 but  I would like to confirm this issue appears only my environment or not.

Highlighted
Solution

@Toru_Saito 

 

I can confirm, the same happens on my 2004 Windows 10 computer. 

Time to revise the dns entry list method :)

 

Regards,

Zoltan