Test-DnsServer: test dns server with rollback checks
Microsoft states: “Tests that a specified computer is a functioning DNS server.”
Read the checklistDSE security knowledge hubMicrosoft 365 & Identity
Microsoft 365 & Identity
Knowledge
Page 27 of the DSE Microsoft 365 & Identity knowledge center, with source-backed guidance and practical next steps.
DSE-authoredOfficial sourcesReviewed guidance
Search the library Explore this topic
Start with the cornerstone guide Microsoft 365 & Identity knowledge center
Clear guidance for Microsoft 365, Entra identity, account protection, collaboration, endpoint policy, and lifecycle changes.
DSE post stream
760 articlesMicrosoft 365 & Identity
Start-DnsServerZoneTransfer: start dns server zone transfer against recorded identity and DNS state
Microsoft states: “Starts a zone transfer for a secondary DNS zone from master servers.”
Read the explainer
Remove-DnsServerZoneTransferPolicy: remove dns server zone transfer policy with before-and-after evidence
Microsoft states: “The Remove-DnsServerZoneTransferPolicy cmdlet removes a zone transfer policy from a Domain Name System (DNS) server.”
Read the guide
Add-DnsServerRecursionScope: stage additions to dns server recursion scope with bounded evidence
Microsoft states: “The Add-DnsServerRecursionScope cmdlet adds a recursion scope on a Domain Name System (DNS) server.”
Read the playbook
Get-DnsServerEncryptionProtocol: inventory dns server encryption protocol under AD/DNS change control
Microsoft states: “Retrieves DNS server encryption protocol settings for DNS over HTTPS (DoH) on Windows Server 2025 or later.”
Read the briefing
Add-DnsServerRootHint: stage additions to dns server root hint with rollback checks
Microsoft states: “The Add-DnsServerRootHint cmdlet adds root hints on a Domain Name System (DNS) server.”
Read the checklist
Remove-DnsServerQueryResolutionPolicy: remove dns server query resolution policy against recorded identity and DNS state
Microsoft states: “Removes a policy for query resolution from a DNS server.” It also states: “The Remove-DnsServerQueryResolutionPolicy cmdlet removes a policy for query resolution from a Domain Name System (DNS) server.”
Read the explainer
Import-DnsServerTrustAnchor: import dns server trust anchor with before-and-after evidence
Microsoft states: “The Import-DnsServerTrustAnchor cmdlet imports a trust anchor from a specified file for a Domain Name System (DNS) server.”
Read the guide
Remove-DnsServerZone: remove dns server zone with bounded evidence
Microsoft states: “The Remove-DnsServerZone cmdlet removes a zone from a Domain Name System (DNS) server.”
Read the playbook
Get-DnsServerZoneDelegation: inventory dns server zone delegation under AD/DNS change control
Microsoft states: “The Get-DnsServerZoneDelegation cmdlet gets the zone delegation objects for a Domain Name System (DNS) server zone.”
Read the briefing