.      How to articles       Windows Services       Group Policy             Donate        
Computer step by step

Primary DNS suffix

GPO PowerShell Regedit CMD

In PowerShell we can use Get-GPRegistryValue cmled to identify the registry key(s) associated with:

More information about Get-GPRegistryValue can be found on this link:


For Enabled we get:


Specifies the primary DNS suffix used by computers in DNS name registration and DNS name resolution.

To use this policy setting, click Enabled and enter the entire primary DNS suffix you want to assign. For example: microsoft.com.

Important: In order for changes to this policy setting to be applied on computers that receive it, you must restart Windows.

If you enable this policy setting, it supersedes the primary DNS suffix configured in the DNS Suffix and NetBIOS Computer Name dialog box using the System control panel.

You can use this policy setting to prevent users, including local administrators, from changing the primary DNS suffix.

If you disable this policy setting, or if you do not configure this policy setting, each computer uses its local primary DNS suffix, which is usually the DNS name of Active Directory domain to which it is joined.

Supported on:

At least Windows 2000

For Disabled we get: