Welcome  |  Sign in
Skip Navigation Links
Forefront Edge Security TechCenter
Printer Friendly Version      Send     
Click to Rate and Give Feedback
TechNet
TechNet Library
Operations
 Removing WPAD from DNS block list
Forefront TMG
Removing WPAD from DNS block list
[This topic is pre-release documentation and is subject to change in future releases. Blank topics are included as placeholders.]

The DNS Server role in Windows Server 2008 introduces a global query block list to reduce vulnerability associated with dynamic DNS updates. For more information, see About implementing WPAD.

If you want to use WPAD with DNS, note the following:

  • If WPAD entries are configured in DNS before the DNS server is upgraded in Windows Server 2008, no action is required.
  • If you configure or remove WPAD after you deploy the DNS server role on a server running Windows Server 2008, you must update the block list on all DNS servers that host the zones affected by the change. The affected zones are those where you registered the WPAD servers.

Use the dnscmd command-line tool to manage the global query block list. Open a command line prompt, and then do the following:

  1. To check whether the global query block is enabled, type the following:
    dnscmd /info /enableglobalqueryblocklist
  2. To display the host names in the current block list, type the following:
    dnscmd /info /globalqueryblocklist
  3. To disable the block list and ensure that the DNS Server service does not ignore queries for names in the block list, type the following:
    dnscmd /config /enableglobalqueryblocklist 0
  4. To enable the block list and ensure that the DNS Server service ignores queries for names in the block list, type the following:
    dnscmd /config /enableglobalqueryblocklist 0
  5. To remove all names from the block list, type the following:
    dnscmd /config /globalqueryblocklist
  6. To replace the current block list with a list of the names that you specify, type the following:
    dnscmd /config /globalqueryblocklist name [name]…

For more information and instructions, see the document "DNS Server Global Query Block List", available for download from Domain Name System at Microsoft TechNet.

© 2008 Microsoft Corporation. All rights reserved. Terms of Use  |  Trademarks  |  Privacy Statement
Page view tracker