Tip of the Day: Using DNSSEC with DNS Zone Scopes

Today’s tip… QUESTION Does anyone know whether the DNS ZoneScopes used by DNS Policy can be signed and DNSSEC enabled? Looking at the DNSSEC related DnsServer PowerShell cmdlets it appears that they do not support the -ZoneScope parameter. As this is the only way to manipulate ZoneScope settings it seems to indicate that signing scopes…

0

Tip of the Day: Azure Reverse DNS

In the beginning of June, the Azure team published new and updated documentation for reverse DNS. There are 3 new pages: Overview, explaining what reverse DNS is, why it’s used, how it works, and the high-level scenarios supported in Azure Detailed guidance on hosting reverse DNS zones in Azure Detailed guidance on managing reverse DNS…

0

Tip of the Day: DNS Recursion Policies

Today’s Tip… Previous DNS Policy tips discussed two uses for Query Resolution Policy; Location Aware Response policies for authoritative queries, and Selective-Filtering for non-authoritative queries. Those are just two from the list of potential policy scenarios and I’m itching to share information on policy processing behaviors and troubleshooting, but feel compelled to share just one…

0

Tip of the Day: More Uses for Windows Server 2016 DNS Policies – Selective Query Filtering

Today’s Tip… The last Network Tip of the Day series introduced new Windows Server 2016 DNS Policy capabilities and included the following topics: Have You Seen What You Can Do with Windows Server 2016 DNS Policies? How DNS Policies Work Configuring DNS Policies Because there is so much more to know, why not continue our…

0

Tip of the Day: Understanding and using DNS Policy Configuration Objects

Today’s Tip… Yesterday’s tip discussed the DNS policy processing workflow. It also introduced a few of the objects used to create policy statements. One or two of these are completely new DNS constructs that must be configured prior to use: Client Subnets for example, which can be used as evaluation criteria, and Zone Scopes, which…

1

Tip of the Day: How DNS Policies Work

Today’s Tip… Yesterday’s tip introduced Windows Server 2016 DNS Policies and the many ways they can be used to provide custom handling for name queries.  In today’s tip, we take a closer look at some of the logical components used to build a policy expression and see how they work together to provide a custom…

0

Tip of the Day: Windows Server 2016 DNS – Deploying a File-Based DNS Server on Nano

Today’s Tip… You can deploy the DNS server role in Windows Server 2016 on a Nano Server image. Because the Domain Controller role is not supported on Nano Server, the DNS server cannot host AD-integrated DNS zones; the DNS server will therefore use file-based DNS zones only. Administration of DNS, like all other Nano features,…

0

Tip of the Day: What To Do With All Those Cool New DNS Server Features

Today’s Tip… What To Do With All Those Cool New DNS Server Features Have you looked into what Windows Server 2016 DNS Server Policies can do for you?  Check out these informative links to learn how DNS Server Policies work and all the crazy-cool solutions they provide. Geo-Location Based Traffic Management Using DNS Policies Split-Brain…

0

Tip of the Day: DNSSEC

Today’s tip… DNS is a critical component of modern networking.  DNS is a huge target for attackers because if a DNS record is compromised, clients can be redirected to an attackers computer.  DNSSEC provides validity that a DNS record has not been compromised.  DNSSEC has been difficult to manage and maintain in previous versions of…