Primary DNS Suffix

Specifies the primary Domain Name System (DNS) suffix for all affected computers. The primary DNS suffix is used in DNS name registration and DNS name resolution.

This setting lets you specify a primary DNS suffix for a group of computers and prevents users, including administrators, from changing it.

If you disable this setting or do not configure it, each computer uses its local primary DNS suffix, which is usually the DNS name of Active Directory domain to which it is joined. However, administrators can use System in Control Panel to change the primary DNS suffix of a computer.

To use this setting, in the text box provided, type the entire primary DNS suffix you want to assign. For example,

This setting does not disable the DNS Suffix and NetBIOS Computer Name dialog box that administrators use to change the primary DNS suffix of a computer. However, if administrators enter a suffix, that suffix is ignored while this setting is enabled.

Important: To make changes to this setting effective, you must restart Windows on all computers affected by the setting.

Note: To change the primary DNS suffix of a computer without setting a setting, click System in Control Panel, click the Network Identification tab, click Properties, click More, and then enter a suffix in the "Primary DNS suffix of this computer" box.

For more information about DNS, see "Domain Name System (DNS)" in Help.

Supported on: At least Windows 2000

Enter a primary DNS suffix:

Registry PathSoftware\Policies\Microsoft\System\DNSClient
Value NameNV PrimaryDnsSuffix
Value TypeREG_SZ
Default Value


Administrative Templates (Computers)

Administrative Templates (Users)