KB3145126 for Windows Server 2008 R2 breaks the DNS server
There has never been, and here again Microsoft released an untested update with a critical bug.
This time, the DNS server from Windows Server 2008 R2 suffered, which falls and no longer rises after installing KB3145126 from Patch Tuesday in May, and the following messages appear in the event log:
It is treated by removing this patch with the wusa.exe / uninstall / kb command : 3145126 followed by an overload.
Update : The problem was in the use of CNAME for root "@" records in the configuration of DNS zones. The script from KB2647170 , which must be run while the DNS Server service is running, will help determine these settings. Incorrect entries can be fixed in the dnsmgmt.msc snap-in or deleted with the command "DNSCMD / recorddelete DNS <zone name> @ cname" before installing KB3145126. ')
Most likely the problem arose in the LDR version of the update, which is marked as recommended and should fix another bug in dns.exe.Exception code means Access Violation, which can occur both when accessing an inaccessible file or a registry branch, or when memory access errors occur.