Securing the DNS Infrastructure

Applies To: Windows Server 2008

You can take multiple steps to help ensure that your Domain Name System (DNS) infrastructure can resist attack. These steps include the following:

• Securing the DNS Server service from modification by unauthorized users

• Maintaining the global block list to help protect your DNS clients from fake well-known servers

• Enhancing the security of your zones

This section includes the following tasks for securing the DNS infrastructure:

• Securing the DNS Server

• Managing the Global Query Block List

• Securing a Zone