Set-DnsServer: change dns server with before-and-after evidence
Microsoft states: “The Set-DnsServer cmdlet uses an input object to overwrite a specified Domain Name System (DNS) server configuration.”
Read the guideDSE security knowledge hubNetworks & Infrastructure
Networks & Infrastructure
Knowledge
Page 102 of the DSE Networks & Infrastructure knowledge center, with source-backed guidance and practical next steps.
DSE-authoredOfficial sourcesReviewed guidance
Search the library Explore this topic
Start with the cornerstone guide Networks & Infrastructure knowledge center
Guidance for resilient networks, Wi-Fi, firewalls, cabling, power, exposure reduction, and connected-device planning.
DSE post stream
1,594 articlesNetworks & Infrastructure
Set-DnsServerGlobalQueryBlockList: change dns server global query block list with bounded evidence
Microsoft states: “The Set-DnsServerGlobalQueryBlockList cmdlet changes settings of a global query block list on a Domain Name System (DNS) server.”
Read the playbook
Add-DnsServerTrustAnchor: stage additions to dns server trust anchor under AD/DNS change control
Microsoft states: “The Add-DnsServerTrustAnchor cmdlet adds a trust anchor (DNSKEY record or DS record) to a Domain Name System (DNS) server.”
Read the briefing
Set-DnsServerStubZone: change dns server stub zone with rollback checks
Microsoft states: “The Set-DnsServerStubZone cmdlet changes settings for an existing stub zone.”
Read the checklist
Add-DnsServerZoneDelegation: stage additions to dns server zone delegation against recorded identity and DNS state
Microsoft states: “Adds a new delegated DNS zone to an existing zone.” It also states: “The Add-DnsServerZoneDelegation cmdlet adds a zone delegation to a Domain Name System (DNS) zone.”
Read the explainer
Add-DnsServerSigningKey: stage additions to dns server signing key with before-and-after evidence
Microsoft states: “The Add-DnsServerSigningKey cmdlet adds a Key Signing Key (KSK) or Zone Signing Key (ZSK) key to a Domain Name System (DNS) signed zone.”
Read the guide
Set-DnsServerClientSubnet: change dns server client subnet with bounded evidence
Microsoft states: “The Set-DnsServerClientSubnet cmdlet updates the IP addresses in a client subnet on a Domain Name System (DNS) server.”
Read the playbook
Remove-DnsServerRootHint: remove dns server root hint under AD/DNS change control
Microsoft states: “The Remove-DnsServerRootHint cmdlet removes root hints from the list of root hints on a Domain Name System (DNS) server.”
Read the briefing
Remove-DnsServerZoneDelegation: remove dns server zone delegation with rollback checks
Microsoft states: “Removes a name server or delegation from a DNS zone.” It also states: “The Remove-DnsServerZoneDelegation cmdlet removes a name server or delegation from a Domain Name System (DNS) zone.”
Read the checklist
Reset-DnsServerZoneKeyMasterRole: reset dns server zone key master role against recorded identity and DNS state
Microsoft states: “Transfers the role of Key Master for a DNS zone.” It also states: “The Reset-DnsServerZoneKeyMasterRole cmdlet transfers the role of DNS Security (DNSSEC) Key Master server.”
Read the explainer