Information Technology Reference
In-Depth Information
If your servers are running Windows Server 2012 R2, then you can view trust anchors
in the DNS Manager Console tree in the Trust Points container. You can also use
Windows PowerShell or Dnscmd.exe to view trust anchors. Windows PowerShell is the
recommended command-line method for viewing trust anchors. The following line is
a PowerShell command to view the trust anchors for Contoso.com :
get-dnsservertrustanchor sec.contoso.com
DNSSEC Clients
Windows 7, Windows 8, Windows Server 2008/2008 R2, and Windows Server 2012/2012
R2 are all DNS clients that receive a response to a DNS query, examine the response, and
then evaluate whether the response has been validated by a DNS server. The DNS client
itself is nonvalidating, and the DNS client relies on the local DNS server to indicate that
validation was successful. If the server doesn't perform validation, then the DNS client
service can be configured to return no results.
If you are interested in learning how to set up DNSSEC in a lab environ-
ment, Microsoft has a website that explains all about DNSSEC and how to
set up the lab environment. Visit http://technet.microsoft.com/en-us/
library/hh831411.aspx .
DNS Devolution
Using DNS devolution , if a client computer is a member of a child namespace, the client
computer will be able to access resources in the parent namespace without the need to
provide explicitly the fully qualified domain name (FQDN) of the resource. DNS devolution
removes the leftmost label of the namespace to get to the parent suffix. DNS devolution
allows the DNS resolver to create the new FQDNs. DNS devolution works by appending
the single-label, unqualified domain name with the parent suffix of the primary DNS suffix
name.
Zone Level Statistics
DNS zone level server statistics are available in Windows Server 2012 R2 by using
the Windows PowerShell cmdlet Get-DnsServerStatistics . This powerful Windows
PowerShell cmdlet retrieves statistics and data for the DNS server. The following is an
example of the Get-DnsServerStatistics cmdlet:
Get-DnsServerStatistics -ZoneName <String[]> [-AsJob][-CimSession
<CimSession[]> ][-Clear][-ComputerName <String> ][-ThrottleLimit <Int32> ]
[ <CommonParameters>]
The ZoneName parameter allows an administrator to get specific statistics for the
DNS zone that you have specified. If the ZoneName parameter is not specified during the
 
Search WWH ::




Custom Search