Page 144 of the DSE Networks & Infrastructure knowledge center, with source-backed guidance and practical next steps.
Guidance for resilient networks, Wi-Fi, firewalls, cabling, power, exposure reduction, and connected-device planning.
Windows DNS architecture distinguishes domain names, the domain namespace, resource records, and zones. A DNS zone is the hosted portion of a namespace that contains the records answered by an authoritative server.
Read the guide
Windows DNS Server supports transferring the DNSSEC Key Master role between qualifying authoritative servers. If the current Key Master is offline, Microsoft describes seizing the role as a continuity action; file-backed zones cannot transfer the role.
Read the playbook
Windows Server extends DNS Policy support to Active Directory-integrated zones for split-brain deployments. The documented example selects a zone scope from the server interface on which a query arrives.
Read the briefing
Microsoft distinguishes recursive and iterative DNS queries in the Windows name-resolution process. The documented query process covers the path from a client query through cache, authoritative data, forwarding, or iterative resolution.
Read the checklist
For an IPv4 reverse lookup, the DNS client reverses the address octets and appends the in-addr.arpa suffix to form the query name. The example authoritative response returns a PTR record whose data is the fully qualified domain name associated with the queried address.
Read the explainer
Windows DNS Policy can distribute application traffic according to time of day. Microsoft states that multiple DNS policies are ordered and that the first matching policy is used.
Read the guide
Anycast assigns the same IP address to multiple endpoints and uses routing to select a destination. Microsoft describes Anycast DNS as a way to scale a stateless service and add geographic routing and redundancy.
Read the playbook
AD Recycle Bin preserves link-valued and non-link-valued attributes of deleted AD objects. A restored user can regain the group memberships and access rights held immediately before deletion.
Read the checklist
Fine-grained password policies allow multiple password and lockout policies within one domain. Different policy restrictions can be applied to different user sets, including stricter settings for privileged accounts.
Read the explainer
AD Administrative Center records the PowerShell cmdlets it runs together with arguments and values. Administrators can copy and filter the history for learning, modification, and reuse.
Read the guide