DOCUMENT:Q231308  18-NOV-2000  [winnt]
TITLE   :Glue NS Records Are Lost When You Add Additional NS Records
PRODUCT :Microsoft Windows NT
PROD/VER:winnt:4.0
OPER/SYS:
KEYWORDS:

======================================================================
-------------------------------------------------------------------------------
The information in this article applies to:

 - Microsoft Windows NT Server version 4.0, Terminal Server Edition 
 - Microsoft Windows NT Server, Enterprise Edition version 4.0 
-------------------------------------------------------------------------------

SYMPTOMS
========

If you add an NS record to a DNS zone, when you restart the DNS server the glue
NS records are missing. For example:

You have a DNS domain called mycompany.com. You also have a delegated subdomain
called sales.mycompany.com that contains an existing NS record for the primary
server called srv1.sales.mycompany.com. When you look in the zone file, the
following records are displayed:

   Sales        NS  srv1.sales
   srv1.sales   A   10.2.112.5

For fault tolerance and load balancing, you want to add another NS record for the
sales.mycompany.com zone using the DNS Administration tool for
srv2.sales.mycompany.com. After you add the record, everything appears to
function normally.

After you restart the DNS server, the entries for srv1 are missing in the DNS
Administration tool and in the zone file. This is evident in the zone files when
you click Update Server Data Files, but srv1.sales.mycompany.com is still
visible in the Administration tool.

CAUSE
=====

This behavior occurs because the server writes records in ascending authority
level.

When the DNS Administration tool causes the DNS server to add an NS record to the
database, the server assigns the record the same authority level as other
records in the zone. The server also inserts them at the beginning of a list of
NS records for the subzone. However, the DNS server assigns a slightly lower
authority level to those records when reading the NS records from the zone file
at startup.

Because the new records have the highest authority level and are the first in the
list, the existing records that are read from the zone file are dropped.

RESOLUTION
==========

To resolve this problem, obtain the latest service pack for Windows NT 4.0. For
additional information, please see the following article in the Microsoft
Knowledge Base:

   Q152734 How to Obtain the Latest Windows NT 4.0 Service Pack

File details:

   Date      Time             Size    File Name   Platform
   -------------------------------------------------------
   06/29/99  00:25            177.424 Dns.exe     Intel
   06/29/99  00:24            297.744 Dns.exe     Alpha

WORKAROUND
==========

To work around this problem, use the appropriate method:

 - When you need to add NS records, delete all existing records and then add
   them again (including the new records). This is a time-intensive method if
   you have many existing records.

 - Edit the zone file directly, instead of using the DNS Administration tool. In
   this case, you need to restart the service so the changes are available.

STATUS
======

Microsoft has confirmed this to be a problem in Windows NT 4.0. This problem was
first corrected in Windows NT 4.0 Service Pack 6.

Additional query words:

======================================================================
Keywords          :  
Technology        : kbWinNTsearch kbWinNT400xsearch kbWinNTSsearch kbWinNTSEntSearch kbWinNTSEnt400 kbWinNTS400xsearch kbNTTermServ400 kbNTTermServSearch
Version           : winnt:4.0
Issue type        : kbprb
Solution Type     : kbpending

=============================================================================

THE INFORMATION PROVIDED IN THE MICROSOFT KNOWLEDGE BASE IS
PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND.  MICROSOFT DISCLAIMS
ALL WARRANTIES, EITHER EXPRESS OR IMPLIED, INCLUDING THE WARRANTIES
OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.  IN NO
EVENT SHALL MICROSOFT CORPORATION OR ITS SUPPLIERS BE LIABLE FOR
ANY DAMAGES WHATSOEVER INCLUDING DIRECT, INDIRECT, INCIDENTAL,
CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL DAMAGES, EVEN IF
MICROSOFT CORPORATION OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE
POSSIBILITY OF SUCH DAMAGES.  SOME STATES DO NOT ALLOW THE EXCLUSION
OR LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES
SO THE FOREGOING LIMITATION MAY NOT APPLY.

Copyright Microsoft Corporation 2000.