DNS TimeOut registry key values should be different, SBS 2003

After running a best practises report on our SBS 2003 Server, I need help addressing this final point:

DNS TimeOut registry key values should be different.

The DNS ForwardingTimeOut registry key value should not be the same as the RecursionTimeOut registry key value.

I am running SBS SP 2.
LVL 3
-Juddy-Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

PberSolutions ArchitectCommented:
See this:
http://technet.microsoft.com/en-us/library/cc940784.aspx
It explains why.  It refers to 2000, but is still valid.
0
PberSolutions ArchitectCommented:
You can use DNSCMD to change as opposed to doing an actual reg hack.  The format is as such:
dnscmd <ServerName> /config <DomainName> /forwardertimeout <NumSeconds>

dnscmd <ServerName> /config <DomainName> /RecursionTimeout <NumSeconds>

 
0
-Juddy-Author Commented:
Any idea as to what intervals I should use?
0
MSSPs - Are you paying too much?

WEBINAR: Managed security service providers often deploy & manage products from a variety of solution vendors. But is this really the best approach when it comes to saving time AND money? Join us on Aug. 15th to learn how you can improve your total cost of ownership today!

PberSolutions ArchitectCommented:
forward = 5 seconds
recursion = 15 seconds
0
-Juddy-Author Commented:
It fails.

I run this:
dnscmd servername /config domainname /forwardertimeout 5

DNS Server failed to reset registry property.
    Status = 9611 (0x0000258b)

Command failed:  DNS_ERROR_INVALID_ZONE_TYPE     9611  (0000258b)
0
PberSolutions ArchitectCommented:
replace "servername" with name of your dns server
replace "domainname" with the name of the DNS Zone.  i.e. yourcompany.com
0
PberSolutions ArchitectCommented:
Sorry, this is a general setting, do don't use the zone name:
 

dnscmd <ServerName> /config  /forwardertimeout <NumSeconds>

dnscmd <ServerName> /config  /RecursionTimeout <NumSeconds>  
0
PberSolutions ArchitectCommented:
This article references the default of 15 seconds for recursiontimeout
http://technet.microsoft.com/en-us/library/cc816830.aspx
This   article references the default of 5 seconds for forwardingtimeout
http://technet.microsoft.com/en-us/library/cc773370.aspx 
0
-Juddy-Author Commented:
Pber, I had changed the servername and domain name to the appropriate settings but it still fails.  I enter:

dnscmd servername /config  /forwardertimeout 5

And I get:

DNS Server failed to reset registry property.
    Status = 9553 (0x00002551)

Command failed:  DNS_ERROR_INVALID_PROPERTY     9553  (00002551)
0
PberSolutions ArchitectCommented:
Woops, I'm sorry... spelling mistake.  It's ForwardingTimeout
 

C:\WINDOWS>dnscmd servername /config /forwardertimeout 5
DNS Server failed to reset registry property.
    Status = 9553 (0x00002551)
Command failed:  DNS_ERROR_INVALID_PROPERTY     9553  (00002551)

C:\WINDOWS>dnscmd servername /config /forwardingtimeout 5
Registry property forwardingtimeout successfully reset.
Command completed successfully.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
SBS

From novice to tech pro — start learning today.