Start-DnsServerZoneTransfer: start dns server zone transfer against recorded identity and DNS state
Microsoft states: “Starts a zone transfer for a secondary DNS zone from master servers.”
Read the explainerDSE security knowledge hubSecurity knowledge,
Security knowledge,
without the noise.
Page 185 of the DSE Security Knowledge Hub, with source-backed guidance, checklists, explainers, and playbooks.
DSE-authoredOfficial sourcesReviewed guidance
Search the library DSE post stream
3,000 articlesGuidance and analysis from DSE
Remove-DnsServerZoneTransferPolicy: remove dns server zone transfer policy with before-and-after evidence
Microsoft states: “The Remove-DnsServerZoneTransferPolicy cmdlet removes a zone transfer policy from a Domain Name System (DNS) server.”
Read the guide
Add-DnsServerRecursionScope: stage additions to dns server recursion scope with bounded evidence
Microsoft states: “The Add-DnsServerRecursionScope cmdlet adds a recursion scope on a Domain Name System (DNS) server.”
Read the playbook
Get-DnsServerEncryptionProtocol: inventory dns server encryption protocol under AD/DNS change control
Microsoft states: “Retrieves DNS server encryption protocol settings for DNS over HTTPS (DoH) on Windows Server 2025 or later.”
Read the briefing
Add-DnsServerRootHint: stage additions to dns server root hint with rollback checks
Microsoft states: “The Add-DnsServerRootHint cmdlet adds root hints on a Domain Name System (DNS) server.”
Read the checklist
Remove-DnsServerQueryResolutionPolicy: remove dns server query resolution policy against recorded identity and DNS state
Microsoft states: “Removes a policy for query resolution from a DNS server.” It also states: “The Remove-DnsServerQueryResolutionPolicy cmdlet removes a policy for query resolution from a Domain Name System (DNS) server.”
Read the explainer
Import-DnsServerTrustAnchor: import dns server trust anchor with before-and-after evidence
Microsoft states: “The Import-DnsServerTrustAnchor cmdlet imports a trust anchor from a specified file for a Domain Name System (DNS) server.”
Read the guide
Remove-DnsServerZone: remove dns server zone with bounded evidence
Microsoft states: “The Remove-DnsServerZone cmdlet removes a zone from a Domain Name System (DNS) server.”
Read the playbook
Get-DnsServerZoneDelegation: inventory dns server zone delegation under AD/DNS change control
Microsoft states: “The Get-DnsServerZoneDelegation cmdlet gets the zone delegation objects for a Domain Name System (DNS) server zone.”
Read the briefing
Remove-DnsServerTrustAnchor: remove dns server trust anchor with rollback checks
Microsoft states: “The Remove-DnsServerTrustAnchor cmdlet removes a trust anchor from a Domain Name System (DNS) server.”
Read the checklist