Event ID - 6536

Event Id	6536
Source	Microsoft-Windows-DNS-Server-Service
Description	Invalid IXFR (Incremental Zone Transfer) response from master DNS server at %2 during attempted incremental transfer of zone %1. Check the DNS server at %2, and verify its is running as a Windows 2000 or later Microsoft DNS server or another IXFR-compatible DNS server implementation.
Event Information	According to Microsoft : Cause : This event is logged when invalid IXFR (Incremental Zone Transfer) response from master DNS server at during attempted incremental transfer of zone. Resolution : Confirm the service version Check the source DNS server and confirm that it is running the DNS Server service on at least Windows 2000 Server or another DNS server implementation that is compatible with incremental zone transfer (IXFR). Verify : Verify that all DNS servers that are authoritative for a zone have the same serial number for the zone. To view the serial number for a zone: On the DNS server, open DNS Manager. To open DNS Manager, click Start , click Administrative Tools , and then click DNS . In the console tree, right-click DNS, and then click Connect to DNS Server . Click The following computer , type the DNS name or IP address of the secondary DNS server, and then click OK . In the console tree, expand the secondary DNS server, and then expand the folder containing the zone. Right-click the zone, and then click Properties . Click the Start of Authority tab, and note the value in Serial number . Note : If dynamic updates are enabled for the zone, or if an administrator changes the zone between the time that you check the master and secondary servers, the serial number on the master server can be slightly higher than the number on secondary servers.
Reference Links	Event ID 6536 from Microsoft-Windows-DNS-Server-Service

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught