Troubleshoot Windows Server DNS forwarding failures by checking forwarders, recursion, firewall rules, routes and upstream DNS availability.
01 Test local DNS
06 Validate from clients Test the same name from a client using the production DNS server and confirm the response is correct.
Use nslookup or Resolve-DnsName against the Windows DNS server to establish whether local resolution works.
Test local DNS
Check forwarders
Review configured forwarder IPs and verify they are reachable from the DNS server. Remove stale or invalid entries only after confirming the intended design.
Check recursion
Confirm recursion is enabled where the DNS server is expected to resolve external names through forwarders.
Check firewall and ports
Verify UDP and TCP 53 traffic between the DNS server and upstream resolvers.
Review DNS Server events
Inspect DNS Server event logs for timeout, forwarding or zone errors and correlate them with the failed lookup.
Validate from clients
Test the same name from a client using the production DNS server and confirm the response is correct.
Explore more TechRunbook guides
Continue with practical infrastructure troubleshooting, PowerShell scripts and operational runbooks.
Browse all articles →