Hello,

Here is the setup: two win2003 servers one primary, one secondary. I set up
forward looking zones (we have a subnet, didn't bother with reverse as ISP
has it covered, maybe later) correctly - they work fine.

The problem is that my secondary DNS server cannot connect and refresh zones
from the primary server, it says "access denied" in the logs. This happens
when under primary I select "allow zone transfer" and "use only servers in
name servers tab" (my secondary is there) and also when I try "Use only the
following servers" and I type secondary IP. The only time it works (zones
transfer) is when I select "to any server" which I don't really want to have
due to security issues.

I looked in few books as well as the error on MS support site and all I got
is "make sure the server is listed under the 'name servers tab'". Well it is
there, and even if it was not there it does not explain why "Use only the
following servers" with ip doesn't work. As far as my current resources are
concerned this should work just fine and is a trivial task... Then why
doesn't it work? Any ideas? Things to try? Any help in solving this strange
(at least to me) problem will be appreciated.