DNSCMD is partially blocked after upgrading to Windows Server 2008 R2 domain controllers - Why?

having trouble dnscmd.exe utility provided windows server 2008 r2. options expected result. other dnscmd options print line feed in command window no error , no expected results.

i suspect problem has fact others in our company upgraded domain controllers windows server 2008 r2.

i can run commands locally on 1 of our windows server 2008 r2 domain controllers (active directory @ 2003 level). problem when attempt run dnscmd on client (the source computer).

examples work:

   dnscmd.exe server1.my.com /enumzones

   dnscmd.exe server1.my.com /statistics

examples not work:

   dnscmd.exe server1.my.com /info

   dnscmd.exe server1.my.com /zoneinfo

   dnscmd.exe server1.my.com /zoneexport

i domain administrator , both source (windows 7 enterprise) , target (windows server 2008 r2 domain controller running dns service) in single domain. can run administrative tool "dns manager" gui remotely, no errors.

the following output dnscmd when run locally on domain controller may offer insight problem:

c:\>dnscmd /info  query result:  server info          server name              = server1.my.com          version                  = 1db10106 (6.1 build 7601)          ds container             = cn=microsoftdns,cn=system,dc=my,dc=com          forest name              = my.com          domain name              = my.com          builtin forest partition = forestdnszones.my.com          builtin domain partition = domaindnszones.my.com          read dc             = 0          last scavenge cycle      = not since restart (0)    configuration:          dwloglevel               = 00000000          dwdebuglevel             = 00000000          dwrpcprotocol            = 00000005          dwnamecheckflag          = 00000002          caddressanswerlimit      = 0          dwrecursionretry         = 3          dwrecursiontimeout       = 8          dwdspollinginterval      = 180    configuration flags:          fbootmethod                  = 3          fadminconfigured             = 1          fallowupdate                 = 1          fdsavailable                 = 1          fautoreversezones            = 1          fautocacheupdate             = 0          fslave                       = 0          fnorecursion                 = 0          froundrobin                  = 1          fstrictfileparsing           = 0          floosewildcarding            = 0          fbindsecondaries             = 0          fwriteauthorityns            = 0          flocalnetpriority            = 1    aging configuration:          scavenginginterval           = 0          defaultagingstate            = 0          defaultrefreshinterval       = 168          defaultnorefreshinterval     = 168    serveraddresses:          ptr          = 00000000002fc510          maxcount     = 1          addrcount    = 1                  addr[0] => af=2, salen=16, [sub=0, flag=00000000] p=13568, addr=aaa.bbb.254.54    listenaddresses:          null ip array.    forwarders:          ptr          = 0000000000308e10          maxcount     = 5          addrcount    = 5                  addr[0] => af=2, salen=16, [sub=0, flag=00000000] p=13568, addr=xxx.xxx.14.18                  addr[1] => af=2, salen=16, [sub=0, flag=00000000] p=13568, addr=yyy.yyy.108.100                  addr[2] => af=2, salen=16, [sub=0, flag=00000000] p=13568, addr=zzz.zzz.163.100                  addr[3] => af=2, salen=16, [sub=0, flag=00000000] p=13568, addr=vvv.vvv.1.10                  addr[4] => af=2, salen=16, [sub=0, flag=00000000] p=13568, addr=uuu.uuu.1.19          forward timeout  = 3          slave            = 0  command completed successfully.    c:\>dnscmd /info /rpcauthlevel  query result:  dword:  5 (00000005)  command completed successfully.    c:\>dnscmd /info /rpcprotocol  query result:  dword:  5 (00000005)  command completed successfully.    c:\>dnscmd /info /enableglobalqueryblocklist  query result:  dword:  1 (00000001)  command completed successfully.

why won't dnscmd work target computer in our domain? please?

p.s. original question "how consistently output dnscmd.exe tool?" (http://social.technet.microsoft.com/forums/en-us/winservernis/thread/a1889413-41d1-45c3-9b28-d8ae8c4cffde) marked answered moderator, question not answered! starting new thread.

i'll close out thread answered. problem not dnscmd or rsat windows 7. has tightened security of windows. can copy win2k3 version of dnscmd , run against win2k3 infrastructure without having go through whitelisting hoops.

while appreciate response ocsetup method automate installation of features, don't want install rsat or server dns features everywhere. want run dnscmd without hassle of complete install. self-contained executable , not have dependencies (other strict security enforcement i've run into). different question.

here article on subject: "installing or removing remote server administration tools windows 7" (http://technet.microsoft.com/en-us/library/ee449483%28v=ws.10%29.aspx?ppud=4). command example in article:

for windows 7 client, rsat must installed.

dism /online /enable-feature /featurename:remoteserveradministrationtools /featurename:remoteserveradministrationtools-roles /featurename:remoteserveradministrationtools-roles-dns

for windows server 2008 r2 (member server, not dns server) client, dns server tools needs enabled.

dism /online /enable-feature /featurename:dns-server-tools

thanks patience , ace.

p.s. ocsetup article http://support.microsoft.com/kb/936209 contains broken links (example: "to determine correct optional component name windows vista use ocsetup command-line, visit following web page, , review "command-line name" column in microsoft-windows-foundation-package features table:  http://technet2.microsoft.com/windowsvista/en/library/92870ee6-516b-45f7-9f2a-9ac6772a120f1033.mspx?mfr=true"). broken link redirects http://technet.microsoft.com/en-us/library/cc706993.aspx. i've left feedback in article do.

Windows Server  >  Network Infrastructure Servers