How to change DNS NS record

Hi @Mohd Ali,

Thank you for reaching out on Microsoft Q&A forum.

The reason you cannot amend or save changes to the NS (Name Server) record at the apex (root) of your Azure DNS Zone is because Azure DNS does not permit removal or modification of the pre-populated Azure DNS name servers at the zone apex.

The NS records in Azure DNS are informational and reflect Azure’s assigned nameservers.

Delegation is controlled at your domain registrar, not in Azure DNS. Any changes inside Azure DNS do not affect public DNS resolution unless your registrar points to Azure’s nameservers.

Refer: https://learn.microsoft.com/en-us/azure/dns/dns-zones-records#ns-records

So you have to make the change in your domain registrar and not in Azure DNS.

How to revert to Cloudflare:

1. Log in to your domain registrar (e.g., GoDaddy, Namecheap, Google Domains).
2. Navigate to DNS Management or Nameserver Settings for your domain.
3. Replace the Azure DNS nameservers with the Cloudflare nameservers provided in your Cloudflare dashboard.
4. Save the changes and allow DNS propagation (usually a few minutes to 48 hours).

After this update, Cloudflare will become the authoritative DNS provider again. You can ignore the NS records shown in Azure DNS—they do not impact resolution once the registrar points to Cloudflare.

Kindly let us know if the above helps or you need further assistance on this issue.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Hi @Mohd Ali

To solve this I recommend transferring your domain away from Azure (reseller for Wild West Domains/GoDaddy) to Cloudflare as your domain registrar. I do not recommend continuing to use App Service Domains due to many issues and inability to make critical changes when needed.

Once the transfer is complete you will have full ability to make changes as needed.

To transfer to different registrar (Cloudflare) you will need authorization code. You may open Azure Cloud Shell and execute command similar to below from App Service team blog (replace subscription id, resource group, domain name):

Invoke-AzRestMethod -Path "/subscriptions/<SUBSCRIPTION-ID>/resourceGroups/<RESOURCE-GROUP-NAME>/providers/Microsoft.DomainRegistration/domains/<DOMAIN-NAME>/transferout?api-version=2021-02-01" -Method PUT

In the output from the command, you need authCode, which is what you will provide the new domain registrar when requesting transfer in.

If you have any questions/concerns please add a comment below.

Please click Accept Answer and upvote if the above was helpful.

Thanks.

-TP