DNS EnableLogFileRollover Update via Regedit instead of Powershell

Today we had a remote site report that two computers had limited to no connectivity.  The issue lead to the site’s DHCP / DNS server.  DHCP was no longer authorized and the DNS server would not come up.  After DHCP was re-authorized, DNS still had issues.  The server happened to the a server core install which added a further wrinkle to troubleshooting.

Once firewall rules were in order, we were able to gather two errors:

Event 2204, DNS-Server_Service - The registry value HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DNS\Parameters\EnableLogFileRollover contains an invalid value or could not be read. The DNS server cannot start. You must change this value to valid data or delete it and then attempt to restart the DNS service.

and

Event 3152, DNS-Server_Service - The DNS server was unable to open file c:\windows\system32\logfiles\dns\dns.log for write.  Most likely the file is a zone file that is already open.  Close the zone file and re-initiate zone write.

Research into the issue pointed to making a change with PowerShell.  This site describes fixing the same issue with PowerShell.

https://www.stigviewer.com/stig/microsoft_windows_2012_server_domain_name_system/2015-03-30/finding/V-58549

However the powershell cmdlets did not work.  A quick check with Microsoft showed the command should have been working.

https://technet.microsoft.com/en-us/library/dn593669.aspx

https://technet.microsoft.com/en-us/library/dn593669.aspx

https://technet.microsoft.com/en-us/library/cc735712%28v=ws.10%29.aspx

To enable the Rollover function and allow the service to start up successfully, use the following setting:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DNS\Parameters
DWORD32 - EnableLogFileRollover
Value - 1

EnableLogFileRollover

In our case, the entry did not exist.  Adding the entry allowed for DNS to successfully load and resolved all of out issues.

Hopefully this information is helpful for those that are looking to resolve a similar issue.

Tips are appreciated – BTC 16hAUEAYn5reugvNcWBXLbp7za89hTx9jA

This entry was posted in Uncategorized and tagged , , , , , , , , , , , , , . Bookmark the permalink.

10 Responses to DNS EnableLogFileRollover Update via Regedit instead of Powershell

  1. janinorthrup says:

    What’s up to every one, the contents existing at
    this website are actually awesome for people knowledge, well, keep up the
    nice work fellows.

  2. Sybil says:

    Your method of telling the whole thing in this article is actually fastidious, every one be able to without difficulty understand it, Thanks a lot.

  3. Kavin says:

    What’s up i am kavin, its my first occasion to commenting anyplace, when i read this
    paragraph i thought i could also make comment due
    to this sensible article.

  4. CollinJBudhu says:

    Hi, I think your website might be having browser compatibility
    issues. When I look at your blog site in Opera, it looks fine but when opening in Internet Explorer,
    it has some overlapping. I just wanted to give you
    a quick heads up! Other then that, great blog!

  5. NovaZIreland says:

    Thanks a bunch for sharing this with all people you actually realize what you’re speaking approximately!

    Bookmarked. Kindly also seek advice from my website =).
    We may have a link exchange arrangement between us

  6. IvetteIFavre says:

    Hi there, I found your blog via Google even while looking for a related topic, your website
    came up, it appear to be great. I have bookmarked it inside my google bookmarks.

    Hi there, just become alert to your weblog thru Google, and
    discovered that it’s truly informative. I’m gonna be mindful
    for brussels. I’ll be grateful if you continue this later
    on. Lots of other people will likely be benefited from the writing.
    Cheers!

  7. ShinIBongard says:

    Hello it’s me, I am also visiting this website on a regular
    basis, this web site is really pleasant and the visitors are in fact sharing nice thoughts.

  8. EusebioTRary says:

    I had been suggested this internet site through my cousin. I’m now not certain whether or not this put up is written by using him as no person else recognise such detailed approximately my trouble.

    You’re incredible! Many thanks!

  9. corburt erilio says:

    It’s hard to find knowledgeable people on this topic, but you sound like you know what you’re talking about! Thanks

Leave a Comment

Your email address will not be published. Required fields are marked *