Questions tagged [dns-policies]

DNS Policies are a new feature in Windows Server 2016 DNS which allow for DNS requests to behave differently based on various criteria. This allows for scenarios such as Split Brain DNS, Application Load Balancing, Geo-Location Based Traffic Management, Filtering, Forensics, and Time of day based redirection.

Filter by
Sorted by
Tagged with
1 vote
0 answers
233 views

What is the difference between geo DNS policy and local subnet prioritization (netmask ordering)?

Starting with Windows Server 2016, MS DNS supports DNS Policies with "Geo-Location Based Traffic Management". But with older Windows Server versions I could configure local subnet ...
bahrep's user avatar
  • 687
3 votes
1 answer
3k views

Can I use server 2016 DNS policies to return alternative IPs but only for some records in a domain?

I need to provide a kind of DNS split-brain scenario with two key goals: "special" DNS clients (based on their subnet) must resolve certain A records in one domain to different IP addresses than the ...
StepCZ's user avatar
  • 153
6 votes
2 answers
1k views

DNS Policies are not properly resolving CNAMEs in Zone Scopes if the Query Resolution Policy includes the NE operator for Client Subnets

I'm fairly sure I've uncovered a bug, but I'm trying to make sense of it and maybe get a sanity check. Scenario A policy where if the request is looking for a specific record AND the client IP is ...
briantist's user avatar
  • 2,555
3 votes
2 answers
3k views

What are the minimum permissions needed to manage DNS Policies in Server 2016?

I'm implementing DNS Policies, writing PowerShell scripts for certain tasks, and of course I don't want to schedule these tasks as domain admins; I want to use a least-privileged service account. The ...
briantist's user avatar
  • 2,555
0 votes
1 answer
848 views

Windows DNS server recursive resolving issue with dns policy

I am using dns policy with windows dns server. In my scenario I want to allow recursive queries in local subnet (192.168.1.0/24) and deny for others. It works great until querying for a domain (...
Baran's user avatar
  • 149
10 votes
1 answer
3k views

Are Windows 2016 DNS Policies / Split DNS possible on AD integrated zones with older DCs?

Windows Server 2016 supports DNS Policies, which provide support for split-brain DNS among other scenarios: You can configure DNS policies to specify how a DNS server responds to DNS queries. DNS ...
briantist's user avatar
  • 2,555