DNS error on SBS2011

Could be any number of problems, but most likely is something related to configuration changes made without the SBS console (it's picky about that). Look through the event logs to see if there are any red events associated to DNS and post them here so we can narrow down cause.

I discovered that I can't surf the internet from this domain controller. I opened Google Chrome and tried to visit a website, but it failed.
I don't know since when, but I have been able to get on the internet from this SBS2011.
In the Event viewer, I see the following:
----------------------------------------------------------------
Log Name:      System
Source:        Microsoft-Windows-DNS-Client
Date:          5/15/2019 11:27:44 AM
Event ID:      1014
Task Category: None
Level:         Warning
Keywords:      
User:          NETWORK SERVICE
Computer:      DC1.domain.local
Description:
Name resolution for the name clientservices.googleapis.com timed out after none of the configured DNS servers responded.
When I open DENS manager, every thing looks good. All workstations are connecting to the domain controller.
----------------------------------------------------------------

I used to have 8.8.8.8 and 8.8.4.4 in forwarders tab, but I took them out to see if that helps, but to no avail.
I rebooted the server multiple times.

I had a similar issue recently and it turned out the Datto Router was hijacking all DNS queries.  had to explicitly set the .local DNS to be overridden by the router and point back at the SBS Server.

I have a backup domain controller on the same network and both primary and backup controllers use the same CISCO router. The workstation computers are surfing the internet via  backup domain controller currently. So I don’t know if the problem is with the router.

I just discovered that I had to click [Recommended Settings] button in Windows Firewall.

Thank you all!