serverUpdateProhibited: What It Means & How to Remove It
serverUpdateProhibited locks your domain against updates at the registry level — nameserver changes, contact changes, any modification of the domain object is rejected. ICANN describes it as an uncommon status, usually enacted during legal disputes, at your request, or when a redemptionPeriod status is in place.
Because it's a server code, it's set by the registry operator and outranks anything your registrar's dashboard can toggle.
What serverUpdateProhibited means
The registry refuses all update commands for the domain, regardless of what your registrar or you request. This is the update-blocking half of a registry lock: even an attacker who fully controls your registrar account cannot repoint nameservers while it's set.
Per ICANN, some registry operators offer a Registry Lock Service that lets registrants, through their registrars, set this status as extra protection against unauthorized updates. High-value domains — major brands, heavily trafficked names — commonly run with it permanently enabled.
Is it good or bad news?
If you or your organization requested registry lock: good news, working as intended. The cost is process friction — every legitimate nameserver change requires a verified unlock request through your registrar.
If it appeared without your request: per ICANN it may indicate an issue with the domain that needs resolution, most often a legal dispute or a hold connected to redemption. Contact your registrar for more information.
Monitor every domain status automatically
Sourdough pulls live RDAP status for every domain you track and flags anything unusual — holds, locks, redemption — before it becomes a problem. 7 days free, then $10/mo. $0 due today.
How to remove it
- •Contact your registrar and request removal — they must work with the registry operator, so this takes longer than clearing clientUpdateProhibited.
- •For registry lock services, follow the provider's out-of-band verification (phone verification and named authorized contacts are typical) to unlock, make your change, and re-lock.
- •For dispute-related codes, removal generally waits on the dispute's resolution; your registrar can relay what the registry requires.
Frequently Asked Questions
Can I change nameservers with serverUpdateProhibited set?
No — nameserver delegation changes are registry updates and will be rejected. If your DNS zone is hosted at a provider you can still edit individual records there, but you cannot change which nameservers the domain delegates to until the code is lifted.
How long does removing serverUpdateProhibited take?
Longer than a registrar-level unlock: your registrar must forward the request to the registry and wait. Registry lock services with defined unlock procedures often complete in hours to a business day; dispute-related removals take as long as the dispute.