Why does DNS stop working across the domain after an update?
An update causes DNS to stop working across the entire domain and triggers an "Access Denied" error when trying to open dnsmgmt.msc. This failure prevents proper domain management and causes DNS to repeatedly stop working upon reboot, even though internet connectivity remains functional.
What people tried
Every workaround mentioned in the threads below. We haven’t tested any of them — and nobody here is claiming they worked.
- 1rolling back the patch
- 2shutting down the PDC
- 3manually restarting the DHCP client to temporarily restore DNS until the next reboot
In their words
Unedited, grouped by where they were said, most upvoted first within each place, each linked to the thread it came from.
“The dynamic deletion of the DNS record '_kerberos._ tcp.contoso.sites.contoso.com 600 IN SRV 0 100 88 PDC.contoso.com' failed on the following DNS server:”source ↗
“DNS stopped working across the entire domain. Was also unable to even launch dnsmgmt.msc on the DC, got an "Access Denied" error, even though the DNS Server service was running.”source ↗
“I'm less trying to troubleshoot the issue and trying to understand why it's happening on a brand new installation?”source ↗