Securing the DNS Infrastructure

Applies To: Windows Server 2008

You can take multiple steps to help ensure that your Domain Name System (DNS) infrastructure can resist attack. These steps include the following:

  • Securing the DNS Server service from modification by unauthorized users

  • Maintaining the global block list to help protect your DNS clients from fake well-known servers

  • Enhancing the security of your zones

This section includes the following tasks for securing the DNS infrastructure: