Set-DnsServerZoneTransferPolicy: change dns server zone transfer policy with rollback checks
Microsoft states: “The Set-DnsServerZoneTransferPolicy cmdlet updates a zone transfer policy on a Domain Name System (DNS) server.”
Read the checklistDSE security knowledge hubMicrosoft 365 & Identity
Microsoft 365 & Identity
Knowledge
Page 24 of the DSE Microsoft 365 & Identity knowledge center, with source-backed guidance and practical next steps.
DSE-authoredOfficial sourcesReviewed guidance
Search the library Explore this topic
Start with the cornerstone guide Microsoft 365 & Identity knowledge center
Clear guidance for Microsoft 365, Entra identity, account protection, collaboration, endpoint policy, and lifecycle changes.
DSE post stream
760 articlesMicrosoft 365 & Identity
Set-DnsServerDnsSecZoneSetting: change dns server dns sec zone setting against recorded identity and DNS state
Microsoft states: “The Set-DnsServerDnsSecZoneSetting cmdlet changes Domain Name System Security Extensions (DNSSEC) settings for the specified zone on a Domain Name System (DNS) server.”
Read the explainer
Set-DnsServerPrimaryZone: change dns server primary zone with before-and-after evidence
Microsoft states: “The Set-DnsServerPrimaryZone cmdlet changes settings for an existing Domain Name System (DNS) primary zone.”
Read the guide
Add-DnsServerResponseRateLimitingExceptionlist: stage additions to dns server response rate limiting exceptionlist with bounded evidence
Microsoft states: “The Add-DnsServerResponseRateLimiting cmdlet adds a Response Rate Limiting (RRL) exception list on the DNS server.”
Read the playbook
Set-DnsServerGlobalNameZone: change dns server global name zone under AD/DNS change control
Microsoft states: “The Set-DnsServerGlobalNameZone cmdlet enables or disables single-label Domain Name System (DNS) queries.”
Read the briefing
Set-DnsServerResponseRateLimiting: change dns server response rate limiting with rollback checks
Microsoft states: “The Set-DnsServerResponseRateLimiting cmdlet enables Response Rate Limiting (RRL) on a Windows DNS server.”
Read the checklist
Add-DnsServerPrimaryZone: stage additions to dns server primary zone against recorded identity and DNS state
Microsoft states: “The Add-DnsServerPrimaryZone cmdlet adds a specified primary zone on a Domain Name System (DNS) server.”
Read the explainer
Export-DnsServerDnsSecPublicKey: export dns server dns sec public key with before-and-after evidence
Microsoft states: “The Export-DnsServerDnsSecPublicKey cmdlet exports delegation signer (DS) or Domain Name System public key (DNSKEY) information for a Domain Name System Security Extensions (DNSSEC)-signed zone.”
Read the guide
Add-DnsServerStubZone: stage additions to dns server stub zone with bounded evidence
Microsoft states: “A stub zone is a copy of a Domain Name System (DNS) zone that contains only resource records that identify the DNS servers for that zone.”
Read the playbook
Set-DnsServerCache: change dns server cache under AD/DNS change control
Microsoft states: “The Set-DnsServerCache cmdlet modifies cache settings for a Domain Name System (DNS) server.”
Read the briefing