Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

When I run the Network analyzer at it reports:

The resolver at could not process the following tested types:

Medium (~1300B) TXT records
Large (~3000B) TXT records

It does not validate DNSSEC. It does not wildcard NXDOMAIN errors. The resolver reports a number of additional properties. Hide them.

Version: Microsoft DNS 6.1.7601 (1DB14556)

I have tried fixing the inability to resolve Medium and Large queries by setting MaximumUdpPacketSize to 4096 and rebooting (DNS Registry Entries). Changing that setting had no affect.

How do I fix both the record size issue and ability to validate DNSSEC while keeping all standard DNS functions working?

share|improve this question
Can you elaborate more on what you're trying to accomplish? DNS usually connects over udp for small queries and uses tcp for larger queries. – bangdang May 3 '12 at 22:44
@bangdang As I mentioned in my question, I would like to be able to have my server resolve large records and validate DNSSEC. – user119914 May 4 '12 at 15:24

Large records (and the ability to respond to them) are handled using DNSSEC, which will allow packets bigger than 4000 to go over TCP. It is NOT enabled by default in 2008R2.

Here is Microsoft's walkthrough on how to enable DNSSEC for 2008R2 and Windows 7.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.