Remove ISATAP from the DNS Global Query Block List

When implementing Direct Access you will have to allow name resolution for ISATAP addresses as by default this is not enabled.

You can do this by doing the following change on all your DNS servers.

  1. Open RegEdit.exe
  2. Navigate to HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesDNSParameters
  3. Right-Click modify on the  GlobalQueryBlockList value.
  4. Remove ISATAP from list
  5. Restart the DNS service

About the author