This computer cannot be promoted as a first domain controller of the %1 domain because some of the DNS servers are configured ...

This computer cannot be promoted as a first domain controller of the %1
domain because some of the DNS servers are configured to refuse queries from
this computer or another DNS server that attempted a name resolution. The
list of DNS servers configured to refuse queries can include the DNS servers
with which this computer is configured for name resolution and the DNS servers
responsible for the following: _msdcs.%2, %3 and the root zone.