Symptoms

When you scan a Microsoft DNS server, you see the following error

Error executing the command 'Get-DnsServerTrustPoint'. Failed to enumerate the trust points from the input server servername.


Cause

This can occur when the EnableDnsSec setting has been changed using the Set-DnsServerSetting PowerShell cmdlet, but the DNS server service has not been restarted after making the change.


Resolution

Restart the DNS server service.