My DNS server have several primary zone, for some reason, could i temporary disable one of primary dns zone ? I don't want to disable DNS services, it will affect all of DNS zone. I tried to use "pause" button in one of DNS zone, but it seem didn't work. Pls advice. Thx !!

What do you want to achieve, what is the aim? Is thais stand alone DNS or it is part of active directory? There may be better ways to achieve a task I we know the your target. regards Milos

Hello, In the properties of the zone, delete the read permission for everyone group. More if you ask them here: http://social.technet.microsoft.com/Forums/en-US/winserverNIS/threads This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. Microsoft Student Partner 2010 / 2011 Microsoft Certified Professional Microsoft Certified Systems Administrator: Security Microsoft Certified Systems Engineer: Security Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration Microsoft Certified Technology Specialist: Windows 7, Configuring Microsoft Certified Technology Specialist: Designing and Providing Volume Licensing Solutions to Large Organizations Microsoft Certified IT Professional: Enterprise Administrator Microsoft Certified IT Professional: Server Administrator Microsoft Certified Trainer

Just because you paused the zone doesnt mean that records are still not being used from cache. You can pause and then flush the DNS on the client and try that... ipconfig /flushdns

Hello, In the properties of the zone, delete the read permission for everyone group. More if you ask them here: http://social.technet.microsoft.com/Forums/en-US/winserverNIS/threads This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. Microsoft Student Partner 2010 / 2011 Microsoft Certified Professional Microsoft Certified Systems Administrator: Security Microsoft Certified Systems Engineer: Security Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration Microsoft Certified Technology Specialist: Windows 7, Configuring Microsoft Certified Technology Specialist: Designing and Providing Volume Licensing Solutions to Large Organizations Microsoft Certified IT Professional: Enterprise Administrator Microsoft Certified IT Professional: Server Administrator Microsoft Certified Trainer This should work as well - but still need to flush the cache of any client trying to access a dns record.