Donate
‹ Back
Domain Name System Security Extensions (DNSSEC) 10 January 2012

Microsoft DNSSEC Deployment Guide for Windows Server 2008R2 and Windows 7

MS DNSSEC Deployment GuideIf you are providing DNS services to your network using Windows servers and would like to understand how to deploy DNSSEC on those servers, Microsoft has a “DNSSEC Deployment Guide” available for download. Released in March 2010, it includes detailed information on configuring DNSSEC on Windows Server 2008 R2 and Windows 7. From the overview:

This guide provides detailed procedures and conceptual information to help you deploy Domain Name System Security Extensions (DNSSEC) in your organization using Windows Server® 2008 R2. DNSSEC is an important new feature that provides the ability for DNS servers and clients to trust DNS responses. This adds an additional layer of protection to your network by guaranteeing that the information received from a DNS server has not been modified or tampered with in any way. The guide also provides information about using the Name Resolution Policy Table (NRPT). The NRPT is a new feature available in Windows Server 2008 R2 that allows you to configure DNS client settings and special behavior for specified names or namespaces. The NRPT is a key component used to configure client settings for DNSSEC-protected zones.

‹ Back

Related articles

Deployment Guide: DNSSEC for Internet Service Providers (ISPs)
Deploy36011 November 2013

Deployment Guide: DNSSEC for Internet Service Providers (ISPs)

An Internet Service Provider needs to offer high value while containing costs. One way to increase your services' value is...

Google Public DNS - DNSSEC Validation
Deploy36019 March 2013

Google Public DNS – DNSSEC Validation

Google provides DNSSEC validation through the use of their "Google Public DNS" servers.  If your local DNS resolvers do not...

Deploying DNSSEC: Validation on recursive caching name servers
Domain Name System Security Extensions (DNSSEC)23 October 2012

Deploying DNSSEC: Validation on recursive caching name servers

Why should you deploy DNSSEC-validating DNS resolvers on your network?  What kind of planning should you do to prepare? What...

Join the conversation with Internet Society members around the world