Disable recursion

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

You can use the following procedure to disable recursion on the Domain Name System (DNS) server.

Note

If you disable recursion on the DNS server, you will not be able to use forwarders on the same server.

Administrative credentials

To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using the RunĀ as command to perform this procedure.

Disabling recursion

  • Using the Windows interface

  • Using the command line

To disable recursion using the Windows interface

  1. Open the DNS snap-in.

  2. In the console tree, right-click the applicable DNS server, then click Properties.

  3. Click the Advanced tab.

  4. In Server options, select the Disable recursion (also disables forwarders) check box, and then click OK.

Note

To open the DNS snap-in, click Start, , point to Administrative Tools, and then click DNS.

To disable recursion using the command line

  • At a command prompt, type the following command, and then press ENTER:

    dnscmd ServerName /Config /NoRecursion {1|0}

    Value Description

    ServerName

    Required. Specifies the DNS host name of the DNS server. You can also type the Internet Protocol (IP) address of the DNS server. To specify the DNS server on the local computer, you can also type a period (.).

    /NoRecursion

    Required. Disables recursion.

    {1|0}

    Required. To disable recursion, type 1 (off). To enable recursion, type 0 (on). By default, recursion is enabled.