| Server IP : 180.180.241.3 / Your IP : 216.73.216.252 Web Server : Microsoft-IIS/7.5 System : Windows NT NETWORK-NHRC 6.1 build 7601 (Windows Server 2008 R2 Standard Edition Service Pack 1) i586 User : IUSR ( 0) PHP Version : 5.3.28 Disable Function : NONE MySQL : ON | cURL : ON | WGET : OFF | Perl : OFF | Python : OFF | Sudo : OFF | Pkexec : OFF Directory : /Windows/Help/Windows/en-US/ |
Upload File : |
MZ @ PE L ! @ 0 qb @ .rsrc @ @.its @ @ 0 H X | |4 V S _ V E R S I O N _ I N F O S t r i n g F i l e I n f o 0 4 0 9 0 4 b 0 b ! F i l e V e r s i o n 1 . 0 0 . 0 0 l " F i l e D e s c r i p t i o n C o m p i l e d M i c r o s o f t H e l p 2 . 0 T i t l e B F i l e S t a m p 9 8 4 7 3 1 0 7 0 1 C A 0 4 1 F 4 J C o m p i l e r V e r s i o n 2 . 5 . 7 1 2 1 0 . 0 8 5 7 9 V C o m p i l e D a t e 2 0 0 9 - 0 7 - 1 4 T 0 1 : 0 8 : 2 7 > T o p i c C o u n t 2 1 3 0 0 0 0 0 0 0 0 0 0 0 0 A L e g a l C o p y r i g h t 2 0 0 5 M i c r o s o f t C o r p o r a t i o n . A l l r i g h t s r e s e r v e d . C C C C C C C C C C C C C D V a r F i l e I n f o $ T r a n s l a t i o n ti 1G PVITOLITLS ( X쌡^
V` x CAOL P HH C ITSF # I gL -Y쌡^
VY쌡^
VIFCM AOLL IFCM AOLL / /$FXFtiAttribute/ /$FXFtiAttribute/BTREEK/$FXFtiAttribute/DATA /$FXFtiAttribute/PROPERTYcN /$FXFtiMain/ /$FXFtiMain/BTREE)/$FXFtiMain/DATAA</$FXFtiMain/PROPERTY}N/$Index/$ATTRNAME1/$Index/$PROPBAG)/$Index/$STRINGS},/$Index/$SYSTEMgB
/$Index/$TOC/ /$Index/$TOC/$dnsmgr /$Index/$TOPICATTR1 /$Index/$TOPICS`/$Index/$URLSTR)6/$Index/$URLTBL_(/$Index/$VTAIDX54/$Index/AssetId/ /$Index/AssetId/$BL0i /$Index/AssetId/$LEAF_COUNTSi/$Index/AssetId/$LEAVES} /$OBJINST /assets/ 0/assets/061c03a5-199c-44a7-9565-0130767c3ce3.xml t
0/assets/08a4b951-74f2-4805-973e-e096d69b3dfa.xml ~w0/assets/0e462ebd-84fd-432b-a5cd-8c6f3cfa3225.xml um0/assets/0e78d78d-3d2b-40c5-ba88-c8adcd8341e4.xml b 0/assets/0f8cb43b-2e83-407c-8551-fe4f446a4a81.xml A0/assets/1414cb7f-7305-448e-b26c-fc6f874bb6ec.xml B20/assets/18fe1818-f1f4-4633-a0bb-92fd6b275f88.xml tu0/assets/1b10e5bb-6f3a-4b81-bcbc-3a2d0330fadf.xml i0/assets/1d130ab3-a25b-4552-aaca-a6da8e6902d2.xml s0/assets/1e0c881b-6dbb-4396-b725-61996bdc08bc.xml u0/assets/1f34d4ad-0201-400e-9219-f5818c1da2f7.xml Y0/assets/21afdef0-b5ba-4a0d-bb4e-cb9901a487ac.xml d[0/assets/247d20d9-5731-4630-8370-ce79805a1f7f.xml ?K0/assets/29c4fd38-d829-45ae-8a03-b4dc82a281a7.xml
|0/assets/2ad68d86-7a68-4363-b1b0-18fa66970dba.xml uA0/assets/2c8e760a-3c20-40f4-a692-15171ee66374.xml 6U0/assets/2e2e0678-1775-4cdd-8779-32d5c281540f.xml <0/assets/30f936d3-08e5-431c-8612-81630f5a3038.xml GE0/assets/33a1535e-7d8c-483b-8d00-ee91869c775b.xml &0/assets/3421116c-3790-4a3b-af30-1f486f568bdd.xml 2V0/assets/3739d3bb-38d5-48da-b9bf-d80401baf053.xml }0/assets/3cf4d1b1-7a6e-4438-bf4f-22d9468c1732.xml 90/assets/412a919f-4249-4341-aecd-bdb35d266338.xml >|0/assets/427144ca-37ce-4db7-a611-605338ec01ca.xml :\0/assets/473afe1a-0d68-422f-8194-0d63007ba3ef.xml g0/assets/479b0f39-c62f-445c-9c66-363be93362c2.xml }0/assets/4d785d45-dc9d-4ed2-ba73-e734d55d3319.xml n0/assets/5234e7b1-0efc-4495-8e42-8c85d7389fc3.xml $0/assets/52ec32f6-5eda-4d6a-8e38-809fee243b71.xml 50/assets/53305fd6-54fd-45ca-9ff0-19686f48257d.xml 940/assets/53661592-0f72-453e-bc5b-8ba193e1f5dc.xml mw0/assets/55e3745f-4c49-44a3-ad60-30e14638ef81.xml d
0/assets/5ad68930-7769-4385-8bd0-130ce0ec3d46.xml n40/assets/5b03fa70-89ad-4a21-a179-2e96a43dbe54.xml "#0/assets/5e93f665-7d6f-4ea2-beca-14d91ead7bb3.xml EV0/assets/60d3d60f-3e84-4c6d-b377-0713e48bea2b.xml *0/assets/6159f77f-25bb-42d2-9f6b-dd9905080d60.xml EY0/assets/6530ccbe-e6e1-4f5b-8d29-9529288ae9a6.xml $0/assets/655b928d-8a7c-4b29-9ae6-b591be845ea7.xml B~0/assets/66587c39-5a8f-401c-80f7-fa0528c1340f.xml @@0/assets/67c6abe2-d3e2-4171-b9e6-70262651d1b2.xml n0/assets/68c3652a-0c55-49b6-ae2e-9ce3f06e4d99.xml ne0/assets/69d6b9c6-8ac4-449a-a3a7-7c6ad993b22b.xml SF0/assets/6ac5194f-7b7d-405a-a229-3e04bbdc40a0.xml 0/assets/6ed1eb2f-a859-410b-a809-84952f9c2789.xml 6i0/assets/7294aebb-0452-4412-b5de-fc09e6b01ed6.xml l0/assets/72a8666b-0143-43d5-98a5-780e81d9131b.xml 0/assets/744b7d08-dfcd-4a1b-8157-fd443cb0482b.xml Y0/assets/7558126a-cc90-4854-855d-533d706e7750.xml j0/assets/761844e5-12f2-4882-8f4d-103c5dc51e1b.xml m@0/assets/76a72c3d-6c2f-489f-814b-33a94f207896.xml - 0/assets/7c47acc8-e505-4d56-9849-226e53bff23d.xml K'0/assets/7cbe9c5e-4187-4fa2-a512-f6162162f22e.xml K0/assets/7d9f6ea1-3d84-4841-b30d-fcf73a92e35d.xml Z|0/assets/7fc91f3b-c926-4dd7-a9f5-8d140d261a14.xml V;0/assets/806532cf-9b03-4777-bef4-d95c9d4136bb.xml I0/assets/81005446-0f9b-41d7-b9cb-9f61177e256d.xml Zv0/assets/81e08359-c427-45e9-93f1-399b1d54f5ab.xml PC0/assets/859fef3c-fec0-4b9f-9ac0-2b35045f527a.xml 50/assets/8e3f7e44-91dd-44c4-81cf-158cea708902.xml H}0/assets/94d8e229-ef7b-4b4f-884f-5fec92bbc911.xml E0/assets/9537da9f-7427-4358-91d8-ad5fd7be3fe6.xml TR0/assets/99060a7c-f0bd-41e7-8ec8-5eeae2fbf0ad.xml u30/assets/9cf831b9-0fe9-405a-a807-19e27aa406d3.xml (_0/assets/9f93a319-4e77-4c17-ad4a-10e3ea9847f1.xml 0/assets/a73a59b2-3140-46cc-940f-a280961c4ca5.xml E0/assets/aca0968d-b719-4943-b04e-29c5c420147d.xml ]10/assets/acf8b192-752d-4459-b7e4-a404309fcf32.xml i0/assets/ad057afb-eb26-4077-b549-728b10c2a208.xml wV0/assets/b09263e1-ab05-4f7f-a45b-7033bb490175.xml M!0/assets/b17a56a8-61b6-4c6c-a717-cde3c8099916.xml nh0/assets/b42fe706-4949-4965-bd17-1afbc909b4ad.xml VI0/assets/b6793e7e-0bec-4865-a869-f947867dcc17.xml g0/assets/ba56ad95-2877-4f56-a9cc-7e2def9242f8.xml %0/assets/bc5c7ee2-8e40-41b9-9763-7e8d4601d99d.xml +10/assets/c2c0a226-364e-4c4d-88ee-5c3ef2b3023f.xml \ 0/assets/c6a3e04d-6306-4c63-82d7-49d583de1640.xml gh0/assets/ca37b2cf-5022-4330-b567-3eacb11b7f1a.xml O%0/assets/caa5a07e-98e6-4fce-a8a5-d3556d0f3c92.xml tE0/assets/ccf07499-7a36-40bd-8b23-b8c91fa6cfd3.xml 90/assets/d30554bd-b6fc-45d2-823c-642a0880bf0f.xml S50/assets/da92dc7d-85d5-476d-ae5d-1b215665313f.xml b0/assets/dbe90e28-fea7-4962-9429-d58cc42ddffd.xml j
0/assets/df7d2a74-f697-4af1-a6b1-c2bd41e18e65.xml w0/assets/e2dd91d6-441f-4175-9d1d-d152d148d73c.xml jf0/assets/e324865f-1cbe-42ec-bf18-a220c0e26fe6.xml P?0/assets/e54b0af1-e833-4195-9f4f-c80fe34ea4e9.xml |0/assets/e8a9ee31-1613-43e4-b796-b74d5040a910.xml X0/assets/e93c32c9-0c5c-4822-9c84-d464658d6ed3.xml c60/assets/ebac15fc-5773-4cce-ae75-c67b7e3d31c0.xml 90/assets/eebcdbcb-eab3-47a8-8355-3e1189b38c7f.xml R'0/assets/f0e5d191-727c-44d9-976f-1b748f3f7876.xml y 0/assets/f145d739-af95-4773-b755-d6a2a1780a65.xml yW0/assets/f39b0f49-8a74-4f7c-8615-87df497aeffb.xml P0/assets/f4fb1647-4ad8-4a92-91e1-ccc72d1ec193.xml i'0/assets/f707d8fa-3e34-4b2a-b64e-e71adf2c6b69.xml N0/assets/f8090427-a526-435b-906e-7e961160ecb2.xml ^40/assets/f8521fc2-120f-4651-b0ce-28f62fe945a5.xml q0/assets/f85711b2-d9ac-4e08-84d0-5082e1a7a5d6.xml x0/assets/f8ca5381-d1b4-4ea1-89cd-f94f33199bc3.xml {0/assets/fbb93390-ad20-4e15-b0c9-53744e6f6e3e.xml U0/assets/ff3bc7ae-5f22-4fc7-8b87-6028d7e7caf4.xml fU /dnsmgr.h1c ;u /dnsmgr.H1F 0( /dnsmgr.H1T j /dnsmgr.H1V X8/dnsmgr_AssetId.H1K zk/dnsmgr_BestBet.H1K ek/dnsmgr_LinkTerm.H1K Pl/dnsmgr_SubjectTerm.H1K <o/relatedAssets/ 7/relatedAssets/10853d03-fe57-4f44-b77f-aa7dddd20a39.gif i7/relatedAssets/58461ea8-b284-4ecd-80b3-f2ec60869b23.gif 7/relatedAssets/624dd3fb-47aa-402e-87f8-773e8e9b828f.gif s7/relatedAssets/6d22d535-ffcf-4a3a-92ab-44de6edf6f14.gif o7/relatedAssets/7e821f18-10ac-422a-9f75-1f8f3acadb41.gif &O7/relatedAssets/a94424e0-d4de-41f8-8893-7e8e9f465bbd.gif 7/relatedAssets/c7e7d942-13ac-4678-a0a4-dbfffbee3e96.gif r 7/relatedAssets/d2d99fd8-5456-486d-95be-a01d6af7ae69.gif %::DataSpace/NameList <(::DataSpace/Storage/MSCompressed/Content +\,::DataSpace/Storage/MSCompressed/ControlData T )::DataSpace/Storage/MSCompressed/SpanInfo L/::DataSpace/Storage/MSCompressed/Transform/List <_::DataSpace/Storage/MSCompressed/Transform/{8CEC5846-07A1-11D9-B15E-000D56BFE6EE}/InstanceData/ i::DataSpace/Storage/MSCompressed/Transform/{8CEC5846-07A1-11D9-B15E-000D56BFE6EE}/InstanceData/ResetTable 3::Transform/{8CEC5846-07A1-11D9-B15E-000D56BFE6EE}/ _p]J7#
ubO;(ES q U n c o m p r e s s e d M S C o m p r e s s e d FX쌡^
V LZXC HH <maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Checklist: Secure Your DNS Server</maml:title><maml:introduction>
<maml:para>Especially in the case of Internet-facing Domain Name System (DNS) servers, it is important to ensure that your DNS infrastructure is protected from attack from outside—or even inside—your organization. You can configure your DNS server, when it is integrated with Active Directory Domain Services (AD DS), to use secure dynamic updates to prevent unauthorized modifications to DNS data. You can take additional steps to reduce the chances of an attacker being able to compromise the integrity of your DNS infrastructure.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Task</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Reference</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Determine which DNS security threats are most significant to your environment, and determine the level of security that is required.</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Security Information for DNS</maml:linkText><maml:uri href="mshelp://windows/?id=eebcdbcb-eab3-47a8-8355-3e1189b38c7f"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>To help prevent anyone outside your company from obtaining internal network information, use separate DNS servers for internal and Internet name resolution. Your internal DNS namespace should be hosted on DNS servers behind the firewall for your network. Your external, Internet DNS presence should be managed by a DNS server in a perimeter network. To provide Internet name resolution for internal hosts, you can have your internal DNS servers us a forwarder to send external queries to your external DNS server. Configure your external router and firewall to allow DNS traffic between your internal and external DNS servers only.</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Understanding Forwarders</maml:linkText><maml:uri href="mshelp://windows/?id=52ec32f6-5eda-4d6a-8e38-809fee243b71"></maml:uri></maml:navigationLink>;</maml:para>
<maml:para><maml:navigationLink><maml:linkText>Using Forwarders</maml:linkText><maml:uri href="mshelp://windows/?id=e2dd91d6-441f-4175-9d1d-d152d148d73c"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>For the DNS servers in your network that are exposed to the Internet, if zone transfer must be enabled, restrict DNS zone transfers to either DNS servers identified in the zone by name server (NS) resource records or to specific DNS servers in your network.</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Modify Zone Transfer Settings</maml:linkText><maml:uri href="mshelp://windows/?id=744b7d08-dfcd-4a1b-8157-fd443cb0482b"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>If the server running the DNS Server service is a multihomed computer, restrict the DNS Server service to listen only on the interface IP address that is used by its DNS clients and internal servers. For example, a server acting as proxy server may have two network adapters, one for the intranet and one for the Internet. If that server is also running the DNS Server service, you can configure the service to listen for DNS traffic only on the IP address that the intranet network adapter uses.</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Configuring Multihomed Servers</maml:linkText><maml:uri href="mshelp://windows/?id=ff3bc7ae-5f22-4fc7-8b87-6028d7e7caf4"></maml:uri></maml:navigationLink>;</maml:para>
<maml:para><maml:navigationLink><maml:linkText>Restrict a DNS server to listen only on selected addresses</maml:linkText><maml:uri href="mshelp://windows/?id=ebac15fc-5773-4cce-ae75-c67b7e3d31c0"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Ensure that default server options that secure the caches of all DNS servers against names pollution—have not changed. Names pollution occurs when DNS query responses contain nonauthoritative or malicious data.</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Secure the Server Cache Against Names Pollution</maml:linkText><maml:uri href="mshelp://windows/?id=f8090427-a526-435b-906e-7e961160ecb2"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Allow only secure dynamic updates for all DNS zones. This ensures that only authenticated users can submit DNS updates using a secure method, which helps prevent the IP addresses of trusted hosts from being hijacked by an attacker.</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Understanding Dynamic Update</maml:linkText><maml:uri href="mshelp://windows/?id=76a72c3d-6c2f-489f-814b-33a94f207896"></maml:uri></maml:navigationLink>; </maml:para>
<maml:para><maml:navigationLink><maml:linkText>Allow Only Secure Dynamic Updates</maml:linkText><maml:uri href="mshelp://windows/?id=55e3745f-4c49-44a3-ad60-30e14638ef81"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Disable recursion on DNS servers that do not respond to DNS clients directly and that are not configured with forwarders. A DNS server requires recursion only if it responds to recursive queries from DNS clients or if it is configured with a forwarder. DNS servers use iterative queries to communicate with each other.</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Disable Recursion on the DNS Server</maml:linkText><maml:uri href="mshelp://windows/?id=7558126a-cc90-4854-855d-533d706e7750"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>If you have a private, internal DNS namespace, configure the root hints on your internal DNS servers to point only to the DNS servers that host your internal root domain and not the DNS servers that host the Internet root domain.</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Updating Root Hints</maml:linkText><maml:uri href="mshelp://windows/?id=7fc91f3b-c926-4dd7-a9f5-8d140d261a14"></maml:uri></maml:navigationLink>;</maml:para>
<maml:para><maml:navigationLink><maml:linkText>Update Root Hints on the DNS Server</maml:linkText><maml:uri href="mshelp://windows/?id=5234e7b1-0efc-4495-8e42-8c85d7389fc3"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>If the server running the DNS Server service is a domain controller, use Active Directory access control lists (ACLs) to secure access control of the DNS Server service.</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Modify Security for the DNS Server Service on a Domain Controller</maml:linkText><maml:uri href="mshelp://windows/?id=9537da9f-7427-4358-91d8-ad5fd7be3fe6"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Use only AD DS-integrated DNS zones. DNS zones that are stored in AD DS can take advantage of Active Directory security features, such as secure dynamic update and the ability to apply AD DS security settings to DNS servers, zones, and resource records.</maml:para>
<maml:para>If a DNS zone is not stored in AD DS, secure the DNS zone file by modifying permissions on the DNS zone file or on the folder where the zone files are stored. The zone file or folder permissions should be configured to allow Full Control only to the System group. By default, zone files are stored in the %systemroot%\System32\Dns folder.</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Understanding Active Directory Domain Services Integration</maml:linkText><maml:uri href="mshelp://windows/?id=427144ca-37ce-4db7-a611-605338ec01ca"></maml:uri></maml:navigationLink>;</maml:para>
<maml:para><maml:navigationLink><maml:linkText>Configure a DNS Server for Use with Active Directory Domain Services</maml:linkText><maml:uri href="mshelp://windows/?id=b6793e7e-0bec-4865-a869-f947867dcc17"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction><maml:content><maml:sections></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Troubleshooting DNS</maml:title><maml:introduction>
<maml:para>You can use the information in the following topics to help isolate and solve problems with your Domain Name System (DNS) infrastructure.</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Troubleshooting DNS Clients</maml:linkText><maml:uri href="mshelp://windows/?id=761844e5-12f2-4882-8f4d-103c5dc51e1b"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Troubleshooting DNS Servers</maml:linkText><maml:uri href="mshelp://windows/?id=b09263e1-ab05-4f7f-a45b-7033bb490175"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Troubleshooting Dynamic Updates</maml:linkText><maml:uri href="mshelp://windows/?id=247d20d9-5731-4630-8370-ce79805a1f7f"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Troubleshooting zone problems</maml:linkText><maml:uri href="mshelp://windows/?id=9cf831b9-0fe9-405a-a807-19e27aa406d3"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction><maml:content><maml:sections></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Modify Security for a Directory-Integrated Zone</maml:title><maml:introduction>
<maml:para>You can manage the discretionary access control list (DACL) on the DNS zones that are stored in Active Directory Domain Services (AD DS). You can use the DACL to control the permissions for the Active Directory users and groups that may control the DNS zones.</maml:para>
<maml:para>Membership in <maml:phrase>DnsAdmins</maml:phrase> or <maml:phrase>Domain Admins</maml:phrase> in AD DS, or the equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To modify security for a directory-integrated zone</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open DNS Manager.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the console tree, click the applicable zone.</maml:para>
<maml:para><maml:phrase>Where?</maml:phrase></maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>DNS/<maml:replaceable>applicable DNS server</maml:replaceable>/Forward Lookup Zones (or Reverse Lookup Zones)/<maml:replaceable>applicable zone</maml:replaceable></maml:para>
</maml:listItem>
</maml:list>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>On the <maml:ui>Action</maml:ui> menu, click <maml:ui>Properties</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>On the <maml:ui>General</maml:ui> tab, verify that the zone type is <maml:ui>Active Directory-integrated</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>On the <maml:ui>Security</maml:ui> tab, modify the list of member users or groups that are allowed to securely update the applicable zone and reset their permissions as needed.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open DNS Manager, click <maml:ui>Start</maml:ui>, point to <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>DNS</maml:ui>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Secure dynamic updates are supported only for zones that are stored in AD DS.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>The security settings determine who can administer the zone, but they do not affect dynamic updates to the zone. To apply security settings for dynamic updates, see "Additional references."</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Modify Security for a Resource Record</maml:linkText><maml:uri href="mshelp://windows/?id=655b928d-8a7c-4b29-9ae6-b591be845ea7"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Security Information for DNS</maml:linkText><maml:uri href="mshelp://windows/?id=eebcdbcb-eab3-47a8-8355-3e1189b38c7f"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Securing DNS zones</maml:linkText><maml:uri href="mshelp://windows/?id=f145d739-af95-4773-b755-d6a2a1780a65"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Set Aging and Scavenging Properties for the DNS Server</maml:title><maml:introduction>
<maml:para>The DNS Server service supports aging and scavenging features. These features are provided as a mechanism for performing cleanup and removal of stale resource records, which can accumulate in zone data over time. You can use this procedure to set the default aging and scavenging properties for the zones on a server.</maml:para>
<maml:para>Membership in the <maml:phrase>Administrators</maml:phrase> group, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Setting aging and scavenging properties for the DNS server</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using the Windows interface</maml:linkText><maml:uri href="mshelp://windows/?id=0e78d78d-3d2b-40c5-ba88-c8adcd8341e4#BKMK_winui"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using a command line</maml:linkText><maml:uri href="mshelp://windows/?id=0e78d78d-3d2b-40c5-ba88-c8adcd8341e4#BKMK_cmd"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction>
<maml:sections>
<maml:section address="BKMK_winui"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To set aging and scavenging properties for the DNS server using the Windows interface</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open DNS Manager.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the console tree, right-click the applicable DNS server, and then click <maml:ui>Set Aging/Scavenging for all zones</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Select the <maml:ui>Scavenge stale resource records</maml:ui> check box.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Modify other aging and scavenging properties as needed.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open DNS Manager, click <maml:ui>Start</maml:ui>, point to <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>DNS</maml:ui>. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Aging and scavenging properties that are configured by this procedure act as server defaults that apply only to Active Directory Domain Services (AD DS)–integrated zones. For standard primary zones, you must set the appropriate properties at the applicable zone.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>When you apply changes for server aging and scavenging settings, DNS Manager prompts you to confirm the changes. You then have the option to apply your changes to new AD DS-integrated zones only. If necessary, you can also apply your changes to existing AD DS-integrated zones.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Regardless of whether the <maml:ui>Scavenge stale resource records</maml:ui> check box is selected as described in step 3, for standard primary zones, this feature is disabled unless it is manually enabled at the applicable zone.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
<maml:section address="BKMK_cmd"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To set aging and scavenging properties for the DNS server using a command line</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open a command prompt.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Type the following command, and then press ENTER: </maml:para>
<dev:code>dnscmd <ServerName> /Config {/ScavengingInterval <Value>|/DefaultAgingState <Value>|/DefaultNoRefreshInterval <Value>|/DefaultRefreshInterval <Value>}</dev:code>
</maml:section></maml:sections></maml:step></maml:procedure>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Parameter</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>dnscmd </maml:para>
</maml:entry>
<maml:entry>
<maml:para>The command-line tool for managing DNS servers.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><ServerName> </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Specifies the DNS host name of the DNS server. You can also type the IP address of the DNS server. To specify the DNS server on the local computer, you can also type a period (.)</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>/Config </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Configures the specified server.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>/ScavengingInterval </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Sets the frequency by which the server will perform scavenging for all scavenging-enabled zones.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>/DefaultAgingState </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Sets the default aging configuration for all zones on the server.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>/DefaultNoRefreshInterval </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Sets the default no-refresh interval for scavenging-enabled zones.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>/DefaultRefreshInterval </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Sets the default refresh interval for scavenging-enabled zones.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><Value> </maml:para>
</maml:entry>
<maml:entry>
<maml:para>For <maml:computerOutputInline>/ScavengingInterval</maml:computerOutputInline>, type a value in hours. The default is 168 (one week). For <maml:computerOutputInline>/DefaultAgingState</maml:computerOutputInline>, type 1 to enable aging for new zones when they are created. Type 0 to disable aging for new zones. For <maml:computerOutputInline>/DefaultNoRefreshInterval</maml:computerOutputInline>, type a value in hours. The default is 168 (one week). For <maml:computerOutputInline>/DefaultRefreshInterval</maml:computerOutputInline>, type a value in hours. The default is 168 (one week).</maml:para>
</maml:entry></maml:row>
</maml:table>
<maml:para>To view the complete syntax for this command, at a command prompt, type the following command, and then press ENTER:</maml:para>
<dev:code>dnscmd /Config /help </dev:code>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open an elevated Command Prompt window, click <maml:ui>Start</maml:ui>, point to <maml:ui>All Programs</maml:ui>, click <maml:ui>Accessories</maml:ui>, right-click <maml:ui>Command Prompt</maml:ui>, and then click <maml:ui>Run as administrator</maml:ui>. </maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Understanding Aging and Scavenging</maml:linkText><maml:uri href="mshelp://windows/?id=7d9f6ea1-3d84-4841-b30d-fcf73a92e35d"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Securing DNS</maml:title><maml:introduction></maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title><maml:introduction>
<maml:para>As an open protocol, Domain Name System (DNS) is particularly vulnerable to attackers. Successful attacks can be especially disruptive because of the critical role that DNS plays in most networks. For this reason, it is very important that you to take advantage of the enhanced security features provided for the DNS Server role in Windows Server 2008. This section provides guidance for using these security features.</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Security Information for DNS</maml:linkText><maml:uri href="mshelp://windows/?id=eebcdbcb-eab3-47a8-8355-3e1189b38c7f"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Securing DNS Deployment</maml:linkText><maml:uri href="mshelp://windows/?id=1414cb7f-7305-448e-b26c-fc6f874bb6ec"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Securing the DNS Server Service</maml:linkText><maml:uri href="mshelp://windows/?id=9f93a319-4e77-4c17-ad4a-10e3ea9847f1"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Securing DNS zones</maml:linkText><maml:uri href="mshelp://windows/?id=f145d739-af95-4773-b755-d6a2a1780a65"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Securing DNS Resource Records</maml:linkText><maml:uri href="mshelp://windows/?id=c6a3e04d-6306-4c63-82d7-49d583de1640"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Securing DNS Clients</maml:linkText><maml:uri href="mshelp://windows/?id=f707d8fa-3e34-4b2a-b64e-e71adf2c6b69"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:para><maml:navigationLink><maml:linkText>Checklist: Secure Your DNS Server</maml:linkText><maml:uri href="mshelp://windows/?id=061c03a5-199c-44a7-9565-0130767c3ce3"></maml:uri></maml:navigationLink></maml:para>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Securing DNS Deployment</maml:title><maml:introduction></maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Securing DNS deployment</maml:title><maml:introduction>
<maml:para>When you design your Domain Name System (DNS) server deployment, use the following DNS security guidelines:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>If your network hosts are not required to resolve names on the Internet, eliminate DNS communication with the Internet. </maml:para>
<maml:para>In this DNS design, you can use a private DNS namespace that is hosted entirely in your network. The private DNS namespace is distributed just as the Internet DNS namespace, with your internal DNS servers hosting zones for the root domain and top-level domains. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Split the DNS namespace for your organization between internal DNS servers behind the firewall and external DNS servers in front of the firewall. </maml:para>
<maml:para>In this DNS design, your internal DNS namespace is a subdomain of your external DNS namespace. For example, if the Internet DNS namespace for your organization is tailspintoys.com, the internal DNS namespace for your network is corp.tailspintoys.com. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Host your internal DNS namespace on internal DNS servers and host your external DNS namespace on external DNS servers that are exposed to the Internet. </maml:para>
<maml:para>To resolve queries for external names that are made by internal hosts, the internal DNS servers in this DNS design forward queries for external names to the external DNS servers. External hosts use only the external DNS servers for Internet name resolution. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Configure your packet-filtering firewall to allow only UDP and TCP port 53 communication between your external DNS server and a single internal DNS server. </maml:para>
<maml:para>This DNS design facilitates communication between internal and external DNS servers and prevents any other external computer from gaining access to your internal DNS namespace. </maml:para>
</maml:listItem>
</maml:list>
<maml:para>For more information, see <maml:navigationLink><maml:linkText>Security Information for DNS</maml:linkText><maml:uri href="mshelp://windows/?id=eebcdbcb-eab3-47a8-8355-3e1189b38c7f"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Zone Aging/Scavenging Properties Dialog Box</maml:title><maml:introduction>
<maml:para>When you configure the following settings for server properties, the settings apply as the default value for all zones. When you configure these settings at a specific zone, the settings apply only to that zone.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Item</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Details</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Scavenge stale resource records</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies whether stale resource records should be removed from the Domain Name System (DNS) database. </maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>No-refresh interval</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies an interval of time, in either days or hours. When a resource record is refreshed, it is not refreshed again until this interval of time has elapsed.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Refresh</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies the minimum time that records are expected to remain in the DNS database after the no-refresh interval expires.</maml:para>
<maml:para>This interval should not be smaller than the maximum refresh period for any resource records. In most networks, this interval corresponds to the Dynamic Host Configuration Protocol (DHCP) lease renewal interval. For DHCP servers running Windows Server 2008, the default lease renew interval is four days.</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction><maml:content><maml:sections></maml:sections></maml:content><maml:relatedLinks type="seeAlso"><maml:title>See Also</maml:title><maml:navigationLink><maml:linkText>User Interface: DNS Server</maml:linkText><maml:uri href="mshelp://windows/?id=c2c0a226-364e-4c4d-88ee-5c3ef2b3023f"></maml:uri></maml:navigationLink></maml:relatedLinks></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Configuring Zone Properties</maml:title><maml:introduction>
<maml:para>In Domain Name System (DNS), you can divide a DNS namespace into zones that store name information about one or more DNS domains. For each DNS domain name that is included in a zone, the zone becomes the authoritative source for information about that domain.</maml:para>
<maml:para>A zone starts as a storage database for a single DNS domain name. If other domains are added below the domain that is used to create the zone, these domains can either be part of the same zone or belong to another zone. After a subdomain is added, it can then either be:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Managed and included as part of the original zone records.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Delegated away to another zone that is created to support the subdomain.</maml:para>
</maml:listItem>
</maml:list>
<maml:para>You can configure a DNS server to host a zone as one of three zone types:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>A primary zone, for which the DNS server is the primary authority</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>A secondary zone, for which the DNS server maintains a copy of the zone that is transferred from a primary server</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>A stub zone, for which the DNS server provides only the name servers that are authoritative for the zone</maml:para>
</maml:listItem>
</maml:list>
<maml:para>You can also configure a zone to use Windows Internet Name Service (WINS) to resolve names, and you can determine how an Active Directory Domain Services (AD DS)–integrated zone is replicated.</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Understanding Zone Delegation</maml:linkText><maml:uri href="mshelp://windows/?id=7cbe9c5e-4187-4fa2-a512-f6162162f22e"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Understanding Zone Types</maml:linkText><maml:uri href="mshelp://windows/?id=94d8e229-ef7b-4b4f-884f-5fec92bbc911"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Create a Zone Delegation</maml:linkText><maml:uri href="mshelp://windows/?id=1f34d4ad-0201-400e-9219-f5818c1da2f7"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Enable DNS to Use WINS Resolution</maml:linkText><maml:uri href="mshelp://windows/?id=a73a59b2-3140-46cc-940f-a280961c4ca5"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Specify Other DNS Servers as Authoritative for a Zone</maml:linkText><maml:uri href="mshelp://windows/?id=30f936d3-08e5-431c-8612-81630f5a3038"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Change the Zone Type</maml:linkText><maml:uri href="mshelp://windows/?id=3739d3bb-38d5-48da-b9bf-d80401baf053"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Change the Zone Replication Scope</maml:linkText><maml:uri href="mshelp://windows/?id=dbe90e28-fea7-4962-9429-d58cc42ddffd"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Modify Security for a Directory-Integrated Zone</maml:linkText><maml:uri href="mshelp://windows/?id=0e462ebd-84fd-432b-a5cd-8c6f3cfa3225"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Modify Zone Transfer Settings</maml:linkText><maml:uri href="mshelp://windows/?id=744b7d08-dfcd-4a1b-8157-fd443cb0482b"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction><maml:content><maml:sections></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>New Features in DNS for Windows Server 2008 R2</maml:title><maml:introduction>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title>
<maml:introduction>
<maml:para>Because DNS is often subject to man-in-the-middle, spoofing, and cache-poisoning attacks that are hard to defend against, the DNS server and client in Windows Server® 2008 R2 introduce support for Domain Name System Security Extensions (DNSSEC). In short, DNSSEC allows for a DNS zone and all the records in the zone to be cryptographically signed. When a DNS server hosting a signed zone receives a query, it returns the digital signatures in addition to the records queried for. A resolver or another server can obtain the public key of the public/private key pair and validate that the responses are authentic and have not been tampered with. In order to do so, the resolver or server must be configured with a trust anchor for the signed zone, or for a parent of the signed zone.</maml:para><maml:para>The core DNSSEC extensions are specified in RFCs 4033, 4034, and 4035 and add origin authority, data integrity, and authenticated denial of existence to DNS. In addition to several new concepts and operations for both the DNS server and the DNS client, DNSSEC introduces four new resource records (DNSKEY, RRSIG, NSEC, and DS) to DNS.</maml:para>
<maml:para>The following changes are available in DNS server in Windows Server 2008 R2:</maml:para>
<maml:list class="unordered">
<maml:listItem><maml:para>Ability to sign a zone and host signed zones.</maml:para></maml:listItem>
<maml:listItem><maml:para>Support for changes to the DNSSEC protocol.</maml:para></maml:listItem>
<maml:listItem><maml:para>Support for DNSKEY, RRSIG, NSEC, and DS resource records.</maml:para></maml:listItem>
</maml:list>
<maml:para>The following changes are available in DNS client in Windows Server 2008 R2:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Ability to indicate knowledge of DNSSEC in queries.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Ability to process the DNSKEY, RRSIG, NSEC, and DS resource records.</maml:para>
</maml:listItem>
<maml:listItem><maml:para>Ability to check whether the DNS server with which it communicated has performed validation on the client’s behalf.</maml:para></maml:listItem></maml:list>
<maml:para>The DNS client’s behavior with respect to DNSSEC is controlled through the Name Resolution Policy Table (NRPT), which stores settings that define the DNS client’s behavior. The NRPT is typically managed through Group Policy.</maml:para>
</maml:introduction>
</maml:section><maml:section><maml:title>Additional references</maml:title><maml:introduction><maml:list class="unordered"><maml:listItem><maml:para><maml:navigationLink><maml:linkText>What’s New in DNS</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=139322"></maml:uri></maml:navigationLink> (http://go.microsoft.com/fwlink/?LinkId=139322)</maml:para></maml:listItem></maml:list></maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Pause or Resume a Zone</maml:title><maml:introduction>
<maml:para>You can use this procedure to control whether a zone responds to queries or transfer requests.</maml:para>
<maml:para>Membership in the <maml:phrase>Administrators</maml:phrase> group, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Pausing or resuming a zone</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using the Windows interface</maml:linkText><maml:uri href="mshelp://windows/?id=1e0c881b-6dbb-4396-b725-61996bdc08bc#BKMK_winui"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using a command line</maml:linkText><maml:uri href="mshelp://windows/?id=1e0c881b-6dbb-4396-b725-61996bdc08bc#BKMK_cmd"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction>
<maml:sections>
<maml:section address="BKMK_winui"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To pause or resume a zone using the Windows interface</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open DNS Manager.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the console tree, click the applicable zone.</maml:para>
<maml:para><maml:phrase>Where?</maml:phrase></maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>DNS/<maml:replaceable>applicable DNS server</maml:replaceable>/Forward Lookup Zones (or Reverse Lookup Zones)/<maml:replaceable>applicable zone</maml:replaceable></maml:para>
</maml:listItem>
</maml:list>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>On the <maml:ui>Action</maml:ui> menu, click <maml:ui>Properties</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>On the <maml:ui>General</maml:ui> tab, click <maml:ui>Pause</maml:ui> or <maml:ui>Start</maml:ui>, and then click <maml:ui>OK</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open DNS Manager, click <maml:ui>Start</maml:ui>, point to <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>DNS</maml:ui>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>By default, zones are started when they are created or loaded at the server. After you use this procedure to pause a zone, you must restart the zone before it is available for servicing clients or updating zones.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
<maml:section address="BKMK_cmd"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To pause or resume a zone using a command line</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open a command prompt.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Do one of the following:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To pause the zone, type the following command, and then press ENTER:</maml:para>
<dev:code>dnscmd <ServerName> /ZonePause <ZoneName></dev:code>
</maml:listItem>
<maml:listItem>
<maml:para>To resume the zone, type the following command, and then press ENTER:</maml:para>
<dev:code>dnscmd <ServerName> /ZoneResume <ZoneName></dev:code>
</maml:listItem>
</maml:list>
</maml:section></maml:sections></maml:step></maml:procedure>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Parameter</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>dnscmd</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Manages DNS servers.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>ServerName</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Specifies the Domain Name System (DNS) host name of the DNS server. You can also type the IP address of the DNS server. To specify the DNS server on the local computer, you can also type a period (.)</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>/ZonePause</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Pauses the zone.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>/ZoneResume</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Resumes the zone.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><ZoneName></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Specifies the fully qualified domain name (FQDN) of the zone.</maml:para>
</maml:entry></maml:row>
</maml:table>
<maml:para>To view the complete syntax for this command, at a command prompt, type one of the following commands, and then press ENTER:</maml:para>
<dev:code>dnscmd <ServerName> /ZonePause /help</dev:code>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open an elevated Command Prompt window, click <maml:ui>Start</maml:ui>, point to <maml:ui>All Programs</maml:ui>, click <maml:ui>Accessories</maml:ui>, right-click <maml:ui>Command Prompt</maml:ui>, and then click <maml:ui>Run as administrator</maml:ui>.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Create a Zone Delegation</maml:title><maml:introduction>
<maml:para>You can divide your Domain Name System (DNS) namespace into one or more zones. You can delegate management of part of your namespace to another location or department in your organization by delegating the management of the corresponding zone. For more information, see <maml:navigationLink><maml:linkText>Understanding Zone Delegation</maml:linkText><maml:uri href="mshelp://windows/?id=7cbe9c5e-4187-4fa2-a512-f6162162f22e"></maml:uri></maml:navigationLink>.</maml:para>
<maml:para>When you delegate a zone, remember that for each new zone that you create, you will need delegation records in other zones that point to the authoritative DNS servers for the new zone. This is necessary both to transfer authority and to provide correct referral to other DNS servers and clients of the new servers that are being made authoritative for the new zone.</maml:para>
<maml:para>Membership in the <maml:phrase>Administrators</maml:phrase> group, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Creating a zone delegation</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using the Windows interface</maml:linkText><maml:uri href="mshelp://windows/?id=1f34d4ad-0201-400e-9219-f5818c1da2f7#BKMK_winui"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using a command line</maml:linkText><maml:uri href="mshelp://windows/?id=1f34d4ad-0201-400e-9219-f5818c1da2f7#BKMK_cmd"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction>
<maml:sections>
<maml:section address="BKMK_winui"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To create a zone delegation using the Windows interface</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open DNS Manager.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the console tree, right-click the applicable subdomain, and then click <maml:ui>New Delegation</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Follow the instructions in the New Delegation Wizard to finish creating the new delegated domain.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open DNS Manager, click <maml:ui>Start</maml:ui>, point to <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>DNS</maml:ui>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>All domains (or subdomains) that appear as part of the applicable zone delegation must be created in the current zone before delegation is performed as described here. As necessary, use DNS Manager to first add domains to the zone before you complete this procedure. </maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
<maml:section address="BKMK_cmd"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To create a zone delegation using a command line</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open a command prompt.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Type the following command, and then press ENTER:</maml:para>
<dev:code>dnscmd <ServerName> /RecordAdd <ZoneName> <NodeName> [/Aging] [/OpenAcl] [<Ttl>] NS {<HostName>|<FQDN>}</dev:code>
</maml:section></maml:sections></maml:step></maml:procedure>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Parameter</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>dnscmd</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies the name of the command-line tool for managing DNS servers.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><ServerName></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Specifies the DNS host name of the DNS server. You can also type the IP address of the DNS server. To specify the DNS server on the local computer, you can also type a period (.)</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>/RecordAdd</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Specifies the command to add a resource record.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><ZoneName></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Specifies the fully qualified domain name (FQDN) of the zone.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><NodeName></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Specifies the FQDN of the node in the DNS namespace for which the start of authority (SOA) resource record is added. You can also type the node name relative to the <maml:replaceable>ZoneName</maml:replaceable> or @, which specifies the zone's root node.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>/Aging</maml:para>
</maml:entry>
<maml:entry>
<maml:para>If this command is used, this resource record is able to be aged and scavenged. If this command is not used, the resource record remains in the DNS database unless it is manually updated or removed.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>/OpenAcl</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies that new records are open to modification by any user. Without this parameter, only administrators may modify the new record.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><Ttl></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies the Time To Live (TTL) setting for the resource record. (The default TTL is defined in start of authority (SOA) resource record).</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>NS</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Specifies that you are adding a name server (NS) resource record to the zone that is specified in <maml:replaceable>ZoneName</maml:replaceable>.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><HostName>|<FQDN></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Specifies the host name or FQDN of the new authoritative server.</maml:para>
</maml:entry></maml:row>
</maml:table>
<maml:para>To view the complete syntax for this command, at a command prompt, type the following command, and then press ENTER:</maml:para>
<dev:code>dnscmd /RecordAdd /help</dev:code>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open an elevated Command Prompt window, click <maml:ui>Start</maml:ui>, point to <maml:ui>All Programs</maml:ui>, click <maml:ui>Accessories</maml:ui>, right-click <maml:ui>Command Prompt</maml:ui>, and then click <maml:ui>Run as administrator</maml:ui>.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Checklist: Automatically Remove Stale Resource Records</maml:title><maml:introduction>
<maml:para>Aging and scavenging together provide a mechanism for removing stale resource records. These resource records can accumulate in Domain Name System (DNS) zone data over time when computers permanently leave the network. For example, if a computer registers its host (A) resource record at startup and is later disconnected from the network, its host (A) resource record might not be deleted. If your network has mobile users and computers, this situation can occur frequently.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Task</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Reference</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Read about aging and scavenging.</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Understanding Aging and Scavenging</maml:linkText><maml:uri href="mshelp://windows/?id=7d9f6ea1-3d84-4841-b30d-fcf73a92e35d"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Enable and configure aging and scavenging for the DNS server.</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Set Aging and Scavenging Properties for the DNS Server</maml:linkText><maml:uri href="mshelp://windows/?id=0e78d78d-3d2b-40c5-ba88-c8adcd8341e4"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Enable and configure aging and scavenging for zones</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Set Aging and Scavenging Properties for a Zone</maml:linkText><maml:uri href="mshelp://windows/?id=81005446-0f9b-41d7-b9cb-9f61177e256d"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Configure aging and scavenging for individual resource records.</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Reset Aging and Scavenging Properties for a Specified Resource Record</maml:linkText><maml:uri href="mshelp://windows/?id=72a8666b-0143-43d5-98a5-780e81d9131b"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction><maml:content><maml:sections></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Troubleshooting Dynamic Updates</maml:title><maml:introduction></maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>What problem are you having?</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>The DNS client is not performing dynamic updates</maml:linkText><maml:uri href="mshelp://windows/?id=247d20d9-5731-4630-8370-ce79805a1f7f#BKMK_1"></maml:uri></maml:navigationLink>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>The DNS server is not performing dynamic updates</maml:linkText><maml:uri href="mshelp://windows/?id=247d20d9-5731-4630-8370-ce79805a1f7f#BKMK_2"></maml:uri></maml:navigationLink>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>I am having a different problem related to dynamic updates than those described here</maml:linkText><maml:uri href="mshelp://windows/?id=247d20d9-5731-4630-8370-ce79805a1f7f#BKMK_3"></maml:uri></maml:navigationLink>.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section address="BKMK_1">
<maml:title>The DNS client is not performing dynamic updates.</maml:title><maml:introduction>
<maml:para><maml:phrase>Cause:</maml:phrase> The client, or its Dynamic Host Configuration Protocol (DHCP) server, does not support the use of the Domain Name System (DNS) dynamic update protocol.</maml:para>
<maml:para><maml:phrase>Solution:</maml:phrase> Verify that your clients or servers support the DNS dynamic update protocol.</maml:para>
<maml:para>For client computers to be registered and updated dynamically with a DNS server, either:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Install or upgrade client computers to the current version of Windows.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Install and use the DHCP Server service on your network to lease client computers.</maml:para>
</maml:listItem>
</maml:list>
<maml:para>By default, computers attempt to register and perform dynamic update of their DNS names and IP addresses with a DNS server.</maml:para>
<maml:para>For other types of computers, you can deploy Windows Server 2008 DHCP servers, which can perform proxied registrations and updates as needed for nondynamic clients.</maml:para>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>By default, the DNS client on Microsoft Windows XP or Windows Vista does not attempt dynamic update over a Remote Access Service (RAS) or virtual private network (VPN) connection. To modify this configuration, you can modify the advanced TCP/IP settings of the particular network connection or modify the registry. For more information, see the Windows Server 2003 Resource Kit Registry Reference (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=428</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=428"></maml:uri></maml:navigationLink>).</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>By default, the DNS client does not attempt dynamic update of top-level domain (TLD) zones. Any zone that is named with a single-label name is considered a TLD zone, for example, com, edu, blank, my-company. To configure the DNS client to allow the dynamic update of TLD zones, you can use the <maml:phrase>Update Top Level Domain Zones</maml:phrase> policy setting or you can modify the registry.</maml:para>
</maml:listItem>
</maml:list>
<maml:para><maml:phrase>Cause:</maml:phrase> The client was not able to register with the DNS server because of intermittent problems with either the DNS server or the network.</maml:para>
<maml:para><maml:phrase>Solution:</maml:phrase> At the client computer, use the <maml:computerOutputInline>ipconfig</maml:computerOutputInline> command as appropriate to retry registration or renewal and update client information with the DNS server.</maml:para>
<maml:para>You can use the <maml:computerOutputInline>ipconfig /regsiterdns</maml:computerOutputInline> command option to manually force a retry of the client computer's dynamic registration.</maml:para>
<maml:para>For computers running earlier versions of Windows, you can use the options of the <maml:computerOutputInline>ipconfig</maml:computerOutputInline> command to verify, view, or renew the client TCP/IP configuration details as appropriate.</maml:para>
<maml:para>For example, if the client computer obtains its IP address lease from a DHCP server, you might use the <maml:computerOutputInline>ipconfig /renew</maml:computerOutputInline> command to force the client to renew its lease with the DHCP server. This action then causes the DHCP server to submit an update request to its configured DNS server on behalf of the client.</maml:para>
<maml:para>If the DHCP server succeeds in performing the update with the DNS server, the result is an updated DNS host name and updated IP address information for the client computer in the DNS database.</maml:para>
<maml:para><maml:phrase>Cause:</maml:phrase> The client was not able to register and update with the DNS server because of missing or incomplete DNS configuration.</maml:para>
<maml:para><maml:phrase>Solution:</maml:phrase> Verify that the client is fully and correctly configured for DNS, and update its configuration as needed.</maml:para>
<maml:para>One common cause of the client failing to update with the DNS server is that it does not have a DNS suffix (either a primary suffix or connection-specific suffix) configured. This might result in the client attempting to register an incorrect or unintended DNS domain name.</maml:para>
<maml:para>For example, the client might be attempting to register its short or unqualified computer or host name as a top-level domain name in the root zone. This happens because, without a DNS suffix configured for the client computer, it determines the configured short name of a computer (such as host-a) is its fully qualified domain name (FQDN). This occurs only because the computer name does not have a DNS suffix to append to it and qualify the computer name when registering it for the client in DNS.</maml:para>
<maml:para>To update the DNS configuration for a client, either:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Configure a primary DNS suffix at the client computer for static TCP/IP clients.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Configure a connection-specific DNS suffix for use at one of the installed network connections at the client computer.</maml:para>
</maml:listItem>
</maml:list>
<maml:para>For more information, see <maml:navigationLink><maml:linkText>Managing Clients</maml:linkText><maml:uri href="mshelp://windows/?id=bc5c7ee2-8e40-41b9-9763-7e8d4601d99d"></maml:uri></maml:navigationLink>.</maml:para>
<maml:para><maml:phrase>Cause:</maml:phrase> The DNS client attempted to update its information with the DNS server but failed because of a problem related to the server.</maml:para>
<maml:para><maml:phrase>Solution:</maml:phrase> If a client can reach its preferred and alternate DNS servers as configured, it is likely that the cause of its failed updates can be found elsewhere.</maml:para>
<maml:para>At Windows-based client computers, you can use Event Viewer to check the System log for any event messages that explain why attempts by the client to dynamically update its host (A) or pointer (PTR) resource records failed.</maml:para>
<maml:para>When youi review messages in the System log, filter or order the display of all messages to view the messages that specify <maml:phrase>DnsApi</maml:phrase> as the source for the message. Typically, these messages are related to the performance of DNS activities, such as DNS queries or dynamic updates.</maml:para>
<maml:para>A common reason that updates might fail for a mobile client is that the DNS server that is required to accept and perform the update does not respond when the client starts at a remote location on the network. This might be due to network performance issues or it might indicate a problem in the underlying design of your network. Where these issues persist or seem likely, review your DNS deployment and modify it accordingly.</maml:para>
<maml:para>For more information, see <maml:navigationLink><maml:linkText>Understanding Dynamic Update</maml:linkText><maml:uri href="mshelp://windows/?id=76a72c3d-6c2f-489f-814b-33a94f207896"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction></maml:section>
<maml:section address="BKMK_2">
<maml:title>The DNS server is not performing dynamic updates.</maml:title><maml:introduction>
<maml:para><maml:phrase>Cause:</maml:phrase> The DNS server does not support dynamic updates.</maml:para>
<maml:para><maml:phrase>Solution:</maml:phrase> Verify that the DNS server that is used by the client can support the DNS dynamic update protocol, as described in RFC 2136.</maml:para>
<maml:para>If you are using other DNS servers on your network, verify that they are running a DNS server implementation that supports dynamic updates.</maml:para>
<maml:para>For more information, see <maml:navigationLink><maml:linkText>Understanding Dynamic Update</maml:linkText><maml:uri href="mshelp://windows/?id=76a72c3d-6c2f-489f-814b-33a94f207896"></maml:uri></maml:navigationLink>.</maml:para>
<maml:para><maml:phrase>Cause:</maml:phrase> The DNS server supports dynamic updates, but it is not configured to accept them.</maml:para>
<maml:para><maml:phrase>Solution:</maml:phrase> Verify that the primary zone where clients require updates is configured to allow dynamic updates.</maml:para>
<maml:para>The default for a new primary zone is to not accept dynamic updates. At the DNS server that loads the applicable primary zone, modify zone properties to allow updates.</maml:para>
<maml:para>For more information, see <maml:navigationLink><maml:linkText>Allow Dynamic Updates</maml:linkText><maml:uri href="mshelp://windows/?id=2c8e760a-3c20-40f4-a692-15171ee66374"></maml:uri></maml:navigationLink>.</maml:para>
<maml:para><maml:phrase>Cause:</maml:phrase> The zone database is not available.</maml:para>
<maml:para><maml:phrase>Solution:</maml:phrase> Verify that the zone is available for update.</maml:para>
<maml:para>First, if necessary, verify that the zone exists. For a standard primary zone, verify that the zone file exists at the server and that the zone is not paused. If you are using Active Directory–integrated zones, verify that the DNS server is running as a domain controller and that it has access to the Active Directory database where zone data is stored.</maml:para>
<maml:para>Secondary zones do not support dynamic updates. If you are trying to determine which server is the primary server for a standard zone, review zone authority records to determine which server is referenced in both the start of authority (SOA) and name server (NS) resource records for the zone. This is the primary server for the zone that can accept dynamic updates to it.</maml:para>
<maml:para>If you need to, you can use DNS Manager to change a secondary zone to become a primary zone so that it can accommodate dynamic updates. However, because standard primary zones use a single-master update model, you can configure only one server to accept dynamic updates for the zone.</maml:para>
<maml:para>If you change the zone type at a secondary server so that it becomes the primary server for that zone, either remove the zone or convert it to another zone type (such as a secondary zone) at the original primary server. Otherwise, zone data becomes inconsistent and causes additional problems.</maml:para>
<maml:para>If you want to have more than one DNS server be able to update a zone, we recommend that you change the zone type so that it becomes Active Directory–integrated. For this zone type to be used, Active Directory Domain Services (AD DS) must be installed and the server computer must be promoted to a domain controller.</maml:para>
<maml:para>After the zone is stored in the directory, other domain controllers can load the zone automatically and they are allowed to update it when they are running the DNS Server service. This is because AD DS supports a multiple (or floating) master update model in which more than one computer can process updates to the directory database.</maml:para>
<maml:para>For more information, see <maml:navigationLink><maml:linkText>Change the Zone Type</maml:linkText><maml:uri href="mshelp://windows/?id=3739d3bb-38d5-48da-b9bf-d80401baf053"></maml:uri></maml:navigationLink>; <maml:navigationLink><maml:linkText>Adding Zones</maml:linkText><maml:uri href="mshelp://windows/?id=6ac5194f-7b7d-405a-a229-3e04bbdc40a0"></maml:uri></maml:navigationLink>; <maml:navigationLink><maml:linkText>Understanding Active Directory Domain Services Integration</maml:linkText><maml:uri href="mshelp://windows/?id=427144ca-37ce-4db7-a611-605338ec01ca"></maml:uri></maml:navigationLink>.</maml:para>
<maml:para><maml:phrase>Cause:</maml:phrase> The DNS server is configured to allow only secure dynamic updates, and it has a security-related problem.</maml:para>
<maml:para><maml:phrase>Solution:</maml:phrase> Verify that zone or resource record security does not block or prevent dynamic updates at the server.</maml:para>
<maml:para>Secure update can be enabled for directory-integrated zones and their resource records. If secure dynamic update is in effect for a directory-integrated zone, only users, groups, or computers that have Write permissions may add new resource records to the zone. If secure dynamic update is in effect for resource records, only users, groups, or computers that have Write permissions can update these resource records. Consequently, security might block or prevent a DNS client (or its DHCP server) from performing an update of its host (A) and pointer (PTR) resource records.</maml:para>
<maml:para>In most cases, secure dynamic update does not prevent new records from being created or added to a zone, but it does restrict who is given default permissions to update or modify records. Where necessary, you can use the access control list (ACL) editing features that are available for directory-integrated zones to modify security permissions on a zone or its resource records and enable update by another user, group, or computer.</maml:para>
<maml:para>Typically, this is necessary only if the computer requesting the update is different from the computer that owns the client records and originally created them.</maml:para>
<maml:para>For more information, see <maml:navigationLink><maml:linkText>Understanding Dynamic Update</maml:linkText><maml:uri href="mshelp://windows/?id=76a72c3d-6c2f-489f-814b-33a94f207896"></maml:uri></maml:navigationLink></maml:para>
<maml:para><maml:phrase>Cause:</maml:phrase> The DNS server that is required to perform the updates is not available on the network.</maml:para>
<maml:para><maml:phrase>Solution:</maml:phrase> Verify that the DNS server is available on the network, or troubleshoot any further issues as necessary.</maml:para>
<maml:para>For more information, see <maml:navigationLink><maml:linkText>Troubleshooting DNS Servers</maml:linkText><maml:uri href="mshelp://windows/?id=b09263e1-ab05-4f7f-a45b-7033bb490175"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction></maml:section>
<maml:section address="BKMK_3">
<maml:title>I am having a different problem related to dynamic updates than those described here.</maml:title><maml:introduction>
<maml:para><maml:phrase>Cause:</maml:phrase> My problem is not described here.</maml:para>
<maml:para><maml:phrase>Solution:</maml:phrase> Search TechNet (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=170</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=170"></maml:uri></maml:navigationLink>) for the latest technical information that might relate to the problem. If necessary, you can obtain information and instructions that pertain to your problem or issue.</maml:para>
<maml:para>If you are connected to the Internet, the latest operating system updates are available at Microsoft Update (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=284</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=284"></maml:uri></maml:navigationLink>).</maml:para>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Remove a Server from DNS Manager</maml:title><maml:introduction>
<maml:para>You can use this procedure to remove a remote server from DNS Manager.</maml:para>
<maml:para>Membership in the <maml:phrase>Administrators</maml:phrase> group, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To remove a server from DNS Manager</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open DNS Manager.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the console tree, click the applicable Domain Name System (DNS) server.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>On the <maml:ui>Action</maml:ui> menu, click <maml:ui>Delete</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>When you are prompted to confirm that you want to delete this server from the list, click <maml:ui>OK</maml:ui></maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open DNS Manager, click <maml:ui>Start</maml:ui>, point to <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>DNS</maml:ui>.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Add a Server to DNS Manager</maml:linkText><maml:uri href="mshelp://windows/?id=6ed1eb2f-a859-410b-a809-84952f9c2789"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual>GIF89aOp , O $ $$$ 0$0< 400044888<< < < @@<<<@@0@P@D@@@DHHH H L L8La L P P$P(P U$UPPP,U$Y0Y(] e,]D]u,a8]0a8a8a0e4eaaam<e@e4i8iPi8m8mDmHm<qLm@uPqYu$}qqqPuDyUuHyuuuH}YyL}Y}L]}aP}}}PPaaUe@Yi
YiiH]]qiauyeqyyii╕}mey΅}q杝҉ҍuꡡڍҁڑ֕}֕ځցډ慺ډڡމޥލުޮ⾾ή H*\ȰÇ#JHŋ3jU C Iɓ(S\ћ(0XIJ͛8sɳgAg
aϣH*]ʴ)E~ JʩիXjJRwp Kٳ6 ۷p5fP
siv
lqַÈ1ʣc. Bk\JLe0 [G
t]^ͺ5̛wT'@ xiP(U] N - ̀+y1 fν{-B +@,D `yO>a @_p !5bB@!٧
cP[wx ďF0
< (^<H@ E!yH?@ h88nŊo4Ѓ
h@ToA>8#>H vyc ;` DIP'42:tH@ `xf4f :f BE R 5 }>B
B@]B&62颍 :9Bm+&aZNď W29 ^* ҡY:HCF!'k-wKA
FيZ讶,$x2"5B/eBɣkҞq,Hp gò
klSm&rCVLtDzJ y]dJP3H&b}tT EBߴ6W-vHWHF0@Et\S-ENrRtZ ^K]܀'T7,M&E iA(F{ɬ2?>7aĂ#vO{Z5 :?qr8&(]8FP0ZD= E/Z=](vR1# P (=oPksSZ&_BL8.p 䌗d&A`t1,)d˔&aO*0ԥ|$m Oj#B*pA(A`d4$2r.q7)N8eK R &JEK"q )NK ?Ž0wф3MJ.ǔE\+)h VXQ*CKJڲ85s Y)W@ƻF HR8a @R0 L 1JbHS1| J H8J99cPR03J%>(| 2Y# a u#,jAmn dbCrd;9D8K'/Q!L ! 8s'H7ēh
+$ =:)CJ?10 eF72Ep4Tk4ᘃ*9X ĜZGQ"d|fTqLRF,Sbxt%PHXAU&<;(UlҬ钇T(mC"\O,PRnEk"`CBB?)HjҲq)jld=e
WR6rֳZJtKմVj"^9BbVY
t&@N7*bAm;.YHEX'
%Ꚕ tQ*O]N
*zRE2+h/MJE-epE#X [ ' Y"^~Bv}"HP cAD8V<!.J.y8'J@*DpJ- ӑR Ȅ
Bup~6ъ^)+0DX@ s810Z'θD'QFt ^3rES*sM)@,=L Dӛ 7iR NDe^/2^! H:@a2`T`6]@pe )x5*Uʾ +A!Iη]X:4LQu8=Nt, roR<a !ϸyQׁ
ئ56 7QiW;as@'B] _ ?LAF*x @pjP-Au /Q!,"r uUS 0<9%@ u8Am\E) Ox?]F:a
X
u :AvWm HT ظ-\x~
/ \\C,@@1PU'Ώ~Oa{r~xPv0
?c쩶P4 TC4a-э~B rJ
@Ral`
~@ 8{ "c
y rנ~
X
M@ 8({S 7'ya'es Р
)8xS@ -@z
p 4 (2r$BA+
Ѓ-
RxoqrJ8"N",
pgVnx
p "gL2\ pX o8' p `ݱ^@q@ Hxu` by];`
` h X
Pmp* 3~@"膪W]H # x8c0BXF|x
Px
`
>Ս ڐ X
@]`y@CB `8°
G8'wx̨ ݀Xx7$
6BW@=4
Q{$YϠ 4DW+`|c@=x5Y0>V;&
øUXTy
}K ' 0
0xTYPB! \Y 0 XvY
0
kɖ" xv '~ '" :( w) Z=
!hxi 9є98@EIx@9q+3 X@ 7P !p bL
8m@ +Іnx00x@ jG&P{ Њw>` nP 9xY
``npY PnP
Z͐ } 5
rvp 0? @ 0xPn@> U:JG@np>)p$Z #"0H7 `GYVZ
=ZxjZ
UPnZ
Yףsҙx
Q٥ IQIRzZ ~z7>w:ZڧSj' 5M@`jJ= sqڤ=xdêڦ:x!:#\/bqPk!`I!@lJʩ cҊD h6 iWJU xnஉﺰ W`PS(A&B
@ Pڬy
@&ש&P@
bO`v +@ %{({
B!C.1P醘0@ V:d>h3 @ A[ݠ>&v# AE g?0@pYk\۵$) ) FRx{z/09lX
pZ{zK@&#vг&hG;py3r[m g
`(h{ pɺx
*auP
(
\`9Oy+
Z/{A eۀ0{gqh a)" C'0o~3z0+Qk+3G @
|;Q"{[;X
u *%B9{kM 2iη#hd! ;{O\0HB\ P?TmxT X(H|Ʋұ
x+@eID)}P6 g~x'L )a up
w{$|"
9\ɋ' ~= C`T)׀qpj 7[ؠA&-\
g
0}"
gp
qP̱W -QO\Y;X bpC\čg f̀d_y 3P;ݬx+P 1ZA4"
RhE>xϏ WIJ! :xG@X
~ *B %LW-#+*Y7:G@qDz ˑ$J<Cg`@>pxz!
LT<'!kn-0\U w 9JzV- )Pے 9 6ۡ>Z\ p0P z 5
;.4mDZnhpm <xJv -ރI )qT F qo$h@yP@ k& c=0,kWZ)
2
E@/X o;
4 !B|o 6 `\ cVq{q~P`m ! .P.qey
QpF`pqWzNt9{ up
puڱطh vr1\
[:s tCL0y yq,d&.{E=N 4
` >` Ȁ
9"
0ڨ- 뭗 8 `s|`
p
Xen .{p<6B4P .~
cQ ~' H50s @0
|$@ `"Q'Oa'
sS /H'
`ũ 2[ ,:?x 7S `{s
ʠ2 ! g:/ U"` 7Eu; Ux[o1z0%I( (讛'S : ø ?
N1 P\<g 0o3P:?r<'y4 6<
p @S ol 6q BPB
>,kQF =~RH%M IE
ɒSL +5i@ D4eӤ%*SR 50A605Ś94CVXen'":eZQ:: ,
D >
E6B a-;ŜY撦R)ɥ#a!
O=+֫F0 n< 0n#<{
d
g͝fn@"/TM_[rU8cB w/65?0@3+hJ;"f,2 s ` E2J #|nf@ wܬ ǕÄ@Tr` i4-! B@>(őJ R
S!¢FxN$@eR&LxR覜NOQf%2 FQBY`K hh0p$ F]э3݈:i ;_$~$a ,}~[k¢µ!Yƹ #ӈ (-6//:><#[BTU\s")i/Z09R>VH qסS"rlV*I^\ Y45\y]( 39bSSa6c61l`` 0!2Dm*DARb?08 YMљ 45!mʘM 9+V !"GDȑ*܀![;E `!coZхL 8L.+Gp#s 6ZM<ti/pFdg)qYwpZr1 * 0-P R <E,q䗯ZrG+]'ׇHnl6Bp/Y6IvLXƈmV
2Ĉ Lb> ` B
]l_q+\E?~7˟ A[" ܳ
"iAl蒆Q--!:(Ě#P,"``̈́;4P! g$
Q) 'LT
L`p P!!hB|زP1| Y! 5 dq12hIX1/M8a
/wG?e 3PAdb"V# l l#hY#ʱLf0PBMC(; GP$&#C
X#a2bo!DblY~zERuuD !F USQF"ȳqӢ IʁIwi1(LfفIfQ8 4YG ڧS Q.ӎ !h3,i)qIIs7jH3]/!` <Fa5)ZoT rVG@ (C u~
GI #alX \2 [AT0c,::.v0y*a
Ex<EiD}Et
V،y4ټhv Z`L
Y+FH
0!!]\>m+#Kv`:,[h` n
!
Xu@Q3~q?~I0@ F{Zcku
kZ p懾-.! |Utx) t nH*e 8 z5&G bD|I1 UQ\hC 0P`_+ΏiQ>5^_pFDٿʀ3bY@ pL0*w ǚ[\5`V`BWÙb%A Pr5m
xX
Ef[a ڄH"DL1&`5
_d?xGY2wBAi ' @k%(,8 E
Pr\5.)|q
rZq aWy0R)x
iSC(0eG:!If>Pd1tYl0`C2{8-Veڅ94B 6a =F6u\ "X*V
gY%49狧2 fYG' s0``/n/m)ގk; ,ꠅlDE^` ߝ #29cAxXEX1 VA
^K9TzmuU~u`l6" |+xD#Q3a;6g <V
t5 tFC_!x@Nd<GeT"^#@[L П l .Ug>4>lӔ#A`j
̈c" HY2:? da ~`Vh:pAD@>4xAl тD?Ł-:s&$ y6ċє!h<Xhp1D o|+,G -̚Sp?
C2C`?!C9ԙ<4=tď%
A$ 7TCBjG$ES
;` p
7Ā.!#PC1,]<[
@ń`EwE\QGI xc,OEFf|>$?Fi4FֈE$ l=4C@o
:+lLGBÓBw=J'KBBaz$C @皐#$$$H' <H%E1AGD s>(VpȈۘHl9PȰX<; A5@I>_ 7X&'TZ,,E;DzX0 K(xʭ|h3 ;%&Z$AJPɻ4ǧ .yq@Hax 3 ̋ܘ$ S `oǙ8iY!LI8D :Cx)XIt< Ѐs蹞8wH
L yxȂM!0 % @q
!!60 ߐhtM E4 q(kN 3! -9sZmBN :P{A{LO L|tOX| 2Ȋ ˍ T;x`87tRU
xhXЦP- H <*L hxṗL+!%" R1Pp;hq+_}x p5P<
lQ@ ` Ʉ_ I&>0;5OP:P%2 v{x ;S%SN:028ȉY,PT0KE5SEU?mG(a vh8JXNee Pr H RMaEUeUL.Y L8jY TQ&*x
8a%oeT= -P eVh [b14#Vp%2 G W,J'B(8 ~WN; X(*ְVx+?逃_RE i Yp* 䇩zx2HY@XmMY&I)22 1yq~I(/@S/EH0ڤU2T
vsBV,`Zv|`ΚݑrR0<X D\%\ 5J B]ttA(>6pAش Օp q]Ӏ]ۍ " 9ެ@ H^h۸
!
a !Oe\UߐuaQ~u9yX_I t߄8d]u8 ՓI
`G1L9Ȉyp cp ֈ9`ތ p< 2 p @p9'HPaGA
I
t ЈO X2%~y˼Xߌ b/X(a
4Kxа=f
%y/-.>bAޑu0ۂL\_5 d=a c> 'c%FbYd@ TpuT ן<`S
;NfdN0SNZ m9p,p,00^if/m `/uN(2#mAĴm0vg^3^ (>Ha ^p1Ugh^P GW5P,FCܤa X6N= G31M<d`p@[GXIތ9KɚFmKa|(3|TMp-fꌐeHH y@0cpjY>N=8 H @k xh @$8#y 5*W`rKiEQ>HƁpb!c9P p`%>0 _ d:dH8cof (G۹
7[.-K=m k>bވZIni茈, cvKt34_U\Iq+7^@c (82@vn a<n<kcid ~nH>k@TB[ nӐ;dvT@-PpTF.#c nhnI6+6ؽWӂF|[pcP[|F 4PcFb4kj708X /0WN6
G I0^(Ϲk͆p=?H#3yX!6;bY;2ok! BZ( sE>kt[; : u&mߦZ:0%gq'KvnWwVvӽr_@x@4VPu:[xS82&O xfgGT=|&xx*'G:gPZyzPAyy!<#\4h <?eX#i7G06x|x[`z
#(a\ȇonJ(w{{JRx *Pqx|o1_o I@xo}xn}G~g}0qu}P$~@dR~;0g 8 ~>>u$qҷ3{[.}OhwGR>=U$_A TR(S/4g
2l!Ĉ'Rh"ƌ7r#ȋ(ra$ʔ*S
$%̘2gҬi&ΜG\u-j(ҤJ$ )ˁCRj*֬U!2\j-k,ڴj-اp.zzDE;pDBM|3n8/ (TfW/w5A@ĺǢG.]Ь"EwR&dL`</ "RΦ`҃zfr`uаn#jou#i>{?
8 x *
: J8!7f8 z8< |x"AL0@
F
0 T&)QNO8 111a
9A<y%3BAh a9fFf& 2@8AaiИL mE|Y&,1M(=Rމh ?F:!<Ԫ|?z+++UH),Q
G4aaE,CDC6 ѺP&Bnk- a8o꥓ bb0Hfx.zꯉʫ!zੋJy d0v*rB)h k8rB ))p쪫R?BVY(]瑐,eG
⛃̩.CsA+td; 3&A5:/NwiО6Bw5{ s7N :Ayo}v2[
9FRb>>u;yB~ 8>yӵ&#˵obV<$d&_z$ BO x҉^˻?U0;A1$\&r}T˗ghV) $cQP"}HOF%2nK ̴Ũ)g Ej#
CA'l ;<maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Understanding Zones</maml:title><maml:introduction>
<maml:para>In addition to dividing your Domain Name System (DNS) namespace into domains, you can also divide your DNS namespace into zones that store name information about one or more DNS domains. A zone is the authoritative source for information about each DNS domain name that is included in the zone.</maml:para>
<maml:para>A zone starts with a single DNS domain name. If other domains are added below the initial domain, these domains can either be part of the same zone or belong to another zone. That is, when you add a subdomain, you can either include it as part of the original zone, or you can delegate it away to another zone that you create to support the subdomain.</maml:para>
<maml:para>For example, the following illustration shows the microsoft.com domain, which contains domain names for Microsoft. When the microsoft.com domain is first created at a single server, it is configured as a single zone for all of the Microsoft DNS namespace. If, however, the microsoft.com domain must use subdomains, those subdomains must be included in the zone or delegated away to another zone.</maml:para>
<maml:para><maml:embedObject><maml:caption>Zone delegation</maml:caption><maml:objectUri href="mshelp://windows/?id=6d22d535-ffcf-4a3a-92ab-44de6edf6f14" mimeType="image/gif"><maml:summary>Difference between a zone and a domain</maml:summary></maml:objectUri></maml:embedObject></maml:para>
<maml:para>In this illustration, the example.microsoft.com domain has a new subdomain—the example.microsoft.com domain—delegated away from the microsoft.com zone and managed in its own zone. However, the microsoft.com zone must contain a few resource records to provide the delegation information that references the DNS servers that are authoritative for the delegated example.microsoft.com subdomain.</maml:para>
<maml:para>If the microsoft.com zone does not use delegation for a subdomain, any data for the subdomain remains part of the microsoft.com zone. For example, the subdomain dev.microsoft.com is not delegated away, but it is managed by the microsoft.com zone.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Zone replication and transfers</maml:title><maml:introduction>
<maml:para>Because of the important role that zones play in DNS, they must be available from more than one DNS server on the network so that they can provide availability and fault tolerance. Otherwise, if only a single server is available and that server is not responding, queries for names in the zone can fail. So that additional servers can host a zone, zone transfers are required for replication and synchronization of all copies of the zone that are used at each server that is configured to host the zone.</maml:para>
<maml:para>When a new DNS server is added to the network and it is configured as a new secondary server for an existing zone, it performs a full initial transfer of the zone to obtain and replicate a full copy of resource records for the zone. Most earlier DNS server implementations use this same method of full transfer for a zone when the zone requires updating after changes are made to the zone. For DNS servers running Windows Server 2003 and Windows Server 2008, the DNS Server service supports incremental zone transfer, a revised DNS zone transfer process for intermediate changes. Incremental transfers provide a more efficient method of propagating zone changes and updates. Unlike in earlier DNS implementations in which any request for an update of zone data required a full transfer of the entire zone database, with incremental transfer the secondary server can pull only those zone changes that it needs to synchronize its copy of the zone with its source, either a primary or secondary copy of the zone that is maintained by another DNS server.</maml:para>
</maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Allow Dynamic Updates</maml:title><maml:introduction>
<maml:para>Domain Name System (DNS) client computers can use dynamic update to register and dynamically update their resource records with a DNS server whenever changes occur. This reduces the need for manual administration of zone records, especially for clients that frequently move or change locations and use Dynamic Host Configuration Protocol (DHCP) to obtain an IP address.</maml:para>
<maml:para>Dynamic updates can be both secure and nonsecure. For more information, see <maml:navigationLink><maml:linkText>Understanding Dynamic Update</maml:linkText><maml:uri href="mshelp://windows/?id=76a72c3d-6c2f-489f-814b-33a94f207896"></maml:uri></maml:navigationLink>.</maml:para>
<maml:para>Membership in the <maml:phrase>Administrators</maml:phrase> group, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Allowing dynamic updates</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using the Windows interface</maml:linkText><maml:uri href="mshelp://windows/?id=2c8e760a-3c20-40f4-a692-15171ee66374#BKMK_winui"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using a command line</maml:linkText><maml:uri href="mshelp://windows/?id=2c8e760a-3c20-40f4-a692-15171ee66374#BKMK_cmd"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction>
<maml:sections>
<maml:section address="BKMK_winui"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To allow dynamic updates using the Windows interface</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open DNS Manager.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the console tree, right-click the applicable zone, and then click <maml:ui>Properties</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>On the <maml:ui>General</maml:ui> tab, verify that the zone type is either <maml:ui>Primary</maml:ui> or <maml:ui>Active Directory-integrated</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In <maml:ui>Dynamic Updates</maml:ui>, click <maml:ui>Nonsecure and secure</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open DNS Manager, click <maml:ui>Start</maml:ui>, point to <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>DNS</maml:ui>. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Dynamic update is a Request for Comments (RFC)–compliant extension to the DNS standard. The DNS update process is defined in RFC 2136, "Dynamic Updates in the Domain Name System (DNS UPDATES)."</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
<maml:section address="BKMK_cmd"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To allow dynamic updates using a command line</maml:title><maml:introduction><maml:sections><maml:section><maml:title></maml:title><maml:introduction></maml:introduction></maml:section></maml:sections></maml:introduction><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open a command prompt.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Type the following command, and then press ENTER: </maml:para>
<dev:code>dnscmd <ServerName> /Config {<ZoneName>|..AllZones} /AllowUpdate {1|0}
</dev:code>
</maml:section></maml:sections></maml:step></maml:procedure>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Parameter</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>dnscmd</maml:para>
</maml:entry>
<maml:entry>
<maml:para>The command-line tool for managing DNS servers.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><ServerName></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Specifies the DNS host name of the DNS server. You can also type the IP address of the DNS server. To specify the DNS server on the local computer, you can also type a period (.)</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>/Config</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Configures the specified zone.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><ZoneName>|..AllZones</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Specifies the fully qualified domain name (FQDN) of the zone. To configure all zones that are hosted on the specified DNS server to allow dynamic updates, type <maml:phrase>..AllZones</maml:phrase>.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>/AllowUpdate </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Enables dynamic updates for the specified zones.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>1|0</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Configures dynamic update. To allow dynamic updates, enter a value of 1. To not allow dynamic updates, enter a value of 0.</maml:para>
</maml:entry></maml:row>
</maml:table>
<maml:para>To view the complete syntax for this command, at a command prompt, type the following command, and then press ENTER:</maml:para>
<dev:code>dnscmd /Config /help </dev:code>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open an elevated Command Prompt window, click <maml:ui>Start</maml:ui>, point to <maml:ui>All Programs</maml:ui>, click <maml:ui>Accessories</maml:ui>, right-click <maml:ui>Command Prompt</maml:ui>, and then click <maml:ui>Run as administrator</maml:ui>. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Dynamic update is an RFC-compliant extension to the DNS standard. The DNS update process is defined in RFC 2136, "Dynamic Updates in the Domain Name System (DNS UPDATES)."</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Understanding Dynamic Update</maml:linkText><maml:uri href="mshelp://windows/?id=76a72c3d-6c2f-489f-814b-33a94f207896"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Allow Only Secure Dynamic Updates</maml:linkText><maml:uri href="mshelp://windows/?id=55e3745f-4c49-44a3-ad60-30e14638ef81"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Checklist: Store Data in an AD DS Application Partition</maml:title><maml:introduction>
<maml:para>You can store Domain Name System (DNS) zones in the domain or application directory partitions of Active Directory Domain Services (AD DS). An application directory partition is a data structure in AD DS that distinguishes data for different replication purposes. When you store a DNS zone in an application directory partition, you can control the zone replication scope by controlling the replication scope of the application directory partition. For a zone to be stored in the specified application directory partition, the DNS server hosting the zone must be enlisted in the specified application directory partition. By default, each AD DS-integrated DNS server maintains enlistments for itself in the appropriate DomainDnsZones and ForestDnsZones application directory partitions.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Task</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Reference</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Read about AD DS integration.</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Understanding Active Directory Domain Services Integration</maml:linkText><maml:uri href="mshelp://windows/?id=427144ca-37ce-4db7-a611-605338ec01ca"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Read about zone replication.</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Understanding DNS Zone Replication in Active Directory Domain Services</maml:linkText><maml:uri href="mshelp://windows/?id=e93c32c9-0c5c-4822-9c84-d464658d6ed3"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Create an application directory partition.</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Create a DNS Application Directory Partition</maml:linkText><maml:uri href="mshelp://windows/?id=66587c39-5a8f-401c-80f7-fa0528c1340f"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Enlist additional domain controllers in the application directory partition.</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Enlist a DNS Server in a DNS Application Directory Partition</maml:linkText><maml:uri href="mshelp://windows/?id=479b0f39-c62f-445c-9c66-363be93362c2"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Configure the replication scope of the zones to the scope of the application directory partition.</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Change the Zone Replication Scope</maml:linkText><maml:uri href="mshelp://windows/?id=dbe90e28-fea7-4962-9429-d58cc42ddffd"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction><maml:content><maml:sections></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Specify Other DNS Servers as Authoritative for a Zone</maml:title><maml:introduction>
<maml:para>Use this procedure to add secondary servers for your existing zones to the name server (NS) record to make them authoritative for the zone. Typically, it may be necessary to perform this procedure at the primary zone only when you add Domain Name System (DNS) servers to act as secondary servers. You can also perform this procedure to specify that these servers are known to be authoritative when they answer queries for zone data. DNS servers automatically add and perform initial configuration of the name server NS resource record for each new primary zone that is added to the server.</maml:para>
<maml:para>Membership in the <maml:phrase>Administrators</maml:phrase> group, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Specifying other DNS servers as authoritative for a zone</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using the Windows interface</maml:linkText><maml:uri href="mshelp://windows/?id=30f936d3-08e5-431c-8612-81630f5a3038#BKMK_winui"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using a command line</maml:linkText><maml:uri href="mshelp://windows/?id=30f936d3-08e5-431c-8612-81630f5a3038#BKMK_cmd"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction>
<maml:sections>
<maml:section address="BKMK_winui"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To specify other DNS servers as authoritative for a zone using the Windows interface</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open DNS Manager.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the console tree, right-click the applicable zone, and then click <maml:ui>Properties</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Click the <maml:ui>Name Servers</maml:ui> tab.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Click <maml:ui>Add</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Specify additional DNS servers by their names and IP addresses, and then click <maml:ui>Add</maml:ui> to add them to the list. </maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open DNS Manager, click <maml:ui>Start</maml:ui>, point to <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>DNS</maml:ui>. </maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
<maml:section address="BKMK_cmd"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To specify other DNS servers as authoritative for a zone using a command line</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open a command prompt.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Type the following command, and then press ENTER: </maml:para>
<dev:code>dnscmd <ServerName> /RecordAdd <ZoneName> <NodeName> [/Aging] [/OpenAcl] [<Ttl>] NS {<HostName>|<DomainName>} </dev:code>
</maml:section></maml:sections></maml:step></maml:procedure>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Parameter</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>dnscmd </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies the name of the command-line tool for managing DNS servers.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><ServerName> </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Specifies the DNS host name of the DNS server. You can also type the IP address of the DNS server. To specify the DNS server on the local computer, you can also type a period (.)</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>/RecordAdd </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Adds a resource record.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><ZoneName> </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Specifies the fully qualified domain name (FQDN) of the zone.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><NodeName> </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Specifies the FQDN of the node in the DNS namespace for which the start of authority (SOA) record is added. You can also type the node name relative to <maml:replaceable>ZoneName</maml:replaceable> or @, which specifies the zone's root node.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>/Aging </maml:para>
</maml:entry>
<maml:entry>
<maml:para>If you use this parameter, this resource record can be aged and scavenged. If you do not use this parameter, the resource record remains in the DNS database unless it is manually updated or removed.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>/OpenAcl </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies that new records are open to modification by any user. Without this parameter, only administrators may modify the new record.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><Ttl></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies the Time-To-Live (TTL) setting for the resource record. (The default TTL is defined in SOA resource record).</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>NS </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Specifies that you are adding a name server (NS) resource record to the zone that is specified in <maml:replaceable>ZoneName</maml:replaceable>.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><HostName>|<FQDN></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Specifies the host name or FQDN of the new authoritative server.</maml:para>
</maml:entry></maml:row>
</maml:table>
<maml:para>To view the complete syntax for this command, at a command prompt, type the following command, and then press ENTER:</maml:para>
<dev:code>dnscmd /RecordAdd /help </dev:code>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open an elevated Command Prompt window, click <maml:ui>Start</maml:ui>, point to <maml:ui>All Programs</maml:ui>, click <maml:ui>Accessories</maml:ui>, right-click <maml:ui>Command Prompt</maml:ui>, and then click <maml:ui>Run as administrator</maml:ui>. </maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Start Immediate Scavenging of Stale Resource Records</maml:title><maml:introduction>
<maml:para>You can use this procedure to immediately remove server resource records that have exceeded the allotted time since they were created.</maml:para>
<maml:para>Membership in the <maml:phrase>Administrators</maml:phrase> group, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Starting immediate scavenging of stale resource records</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using the Windows interface</maml:linkText><maml:uri href="mshelp://windows/?id=33a1535e-7d8c-483b-8d00-ee91869c775b#BKMK_winui"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using a command line</maml:linkText><maml:uri href="mshelp://windows/?id=33a1535e-7d8c-483b-8d00-ee91869c775b#BKMK_cmd"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction>
<maml:sections>
<maml:section address="BKMK_winui"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To start immediate scavenging of stale resource records using the Windows interface</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open DNS Manager.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the console tree, right-click the applicable Domain Name System (DNS) server, and then click <maml:ui>Scavenge Stale Resource Records</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>When you are asked to confirm that you want to scavenge all stale resource records on the server, click <maml:ui>OK</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open DNS Manager, click <maml:ui>Start</maml:ui>, point to <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>DNS</maml:ui>. </maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
<maml:section address="BKMK_cmd"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To start immediate scavenging of stale resource records using a command line</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open a command prompt.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Type the following command, and then press ENTER: </maml:para>
<dev:code>dnscmd <ServerName> /StartScavenging</dev:code>
</maml:section></maml:sections></maml:step></maml:procedure>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Parameter</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>dnscmd </maml:para>
</maml:entry>
<maml:entry>
<maml:para>The command-line tool for managing DNS servers.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><ServerName></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Specifies the DNS host name of the DNS server. You can also type the IP address of the DNS server. To specify the DNS server on the local computer, you can also type a period (.)</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>/StartScavenging </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Initiates resource record scavenging.</maml:para>
</maml:entry></maml:row>
</maml:table>
<maml:para>To view the complete syntax for this command, at a command prompt, type the following command, and then press ENTER:</maml:para>
<dev:code>dnscmd /StartScavenging /help</dev:code>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open an elevated Command Prompt window, click <maml:ui>Start</maml:ui>, point to <maml:ui>All Programs</maml:ui>, click <maml:ui>Accessories</maml:ui>, right-click <maml:ui>Command Prompt</maml:ui>, and then click <maml:ui>Run as administrator</maml:ui>. </maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Understanding Aging and Scavenging</maml:linkText><maml:uri href="mshelp://windows/?id=7d9f6ea1-3d84-4841-b30d-fcf73a92e35d"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Configure a New DNS Server</maml:title><maml:introduction>
<maml:para>When a new Domain Name System (DNS) server is not installed on a domain controller, you typically perform the following tasks to configure it:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Create a forward and (optional) reverse lookup zone.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Determine whether the server will allow dynamic updates, including whether nonsecure updates are allowed.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Determine whether queries will be forwarded and to what servers.</maml:para>
</maml:listItem>
</maml:list>
<maml:para>Instead of configuring these settings, you can choose instead to configure the server to use root hints so that you can perform these configuration tasks at a later time.</maml:para>
<maml:para>Membership in the <maml:phrase>Administrators</maml:phrase> group, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Configuring a new DNS server</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using the Windows interface</maml:linkText><maml:uri href="mshelp://windows/?id=3421116c-3790-4a3b-af30-1f486f568bdd#BKMK_winui"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using a command line</maml:linkText><maml:uri href="mshelp://windows/?id=3421116c-3790-4a3b-af30-1f486f568bdd#BKMK_cmd"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction>
<maml:sections>
<maml:section address="BKMK_winui"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To configure a new DNS server using the Windows interface</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open DNS Manager.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>If necessary, add the applicable server to the snap-in, and then connect to it.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the console tree, click the applicable DNS server.</maml:para>
<maml:para><maml:phrase>Where?</maml:phrase></maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>DNS/<maml:replaceable>DNS server</maml:replaceable></maml:para>
</maml:listItem>
</maml:list>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>On the <maml:ui>Action</maml:ui> menu, click <maml:ui>Configure a DNS Server</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Follow the instructions in the Configure a DNS Server Wizard.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open DNS Manager, click <maml:ui>Start</maml:ui>, point to <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>DNS</maml:ui>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>If the DNS server is running locally, you do not have to perform step 2.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>When you finish configuring the server, you may have to complete additional tasks, such as enabling dynamic updates for its zones or adding resource records to its zones.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
<maml:section address="BKMK_cmd"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To configure a new DNS server using a command line</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open a command prompt.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Type the following command, and then press ENTER:</maml:para>
<dev:code>dnscmd <ServerName> /Config {<ZoneName>|..AllZones} <Property> {1|0}</dev:code>
</maml:section></maml:sections></maml:step></maml:procedure>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Parameter</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>dnscmd</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies the name of the command-line tool for managing DNS servers.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><ServerName></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Specifies the DNS host name of the DNS server. You can also type the IP address of the DNS server. To specify the DNS server on the local computer, you can also type a period (.).</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>/Config</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies that the command configures the specified zone.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>{<ZoneName>|..AllZones}</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies the name of the zone to be configured. To apply the configuration for all zones hosted by the specified DNS server, type <maml:computerOutputInline>..AllZones</maml:computerOutputInline>.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><Property></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies the server property or zone property to be configured. There are different properties available for servers and zones. For a list of the available properties, at the command prompt, type: <maml:computerOutputInline>dnscmd /Config /help</maml:computerOutputInline>.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>{1|0}</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Sets configuration options to either <maml:computerOutputInline>1</maml:computerOutputInline> (on) or <maml:computerOutputInline>0</maml:computerOutputInline> (off). Note that some server and zone properties must be reset as part of a more complex operation.</maml:para>
</maml:entry></maml:row>
</maml:table>
<maml:para>To view the complete syntax for this command, at a command prompt, type the following command, and then press ENTER:</maml:para>
<dev:code>dnscmd /Config /help</dev:code>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open an elevated Command Prompt window, click <maml:ui>Start</maml:ui>, point to <maml:ui>All Programs</maml:ui>, click <maml:ui>Accessories</maml:ui>, right-click <maml:ui>Command Prompt</maml:ui>, and then click <maml:ui>Run as administrator</maml:ui>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>When you finish configuring the server, you may have to complete additional tasks, such as enabling dynamic updates for its zones or adding resource records to its zones.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Installing and Configuring Servers</maml:linkText><maml:uri href="mshelp://windows/?id=f0e5d191-727c-44d9-976f-1b748f3f7876"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Install a DNS Server</maml:linkText><maml:uri href="mshelp://windows/?id=3cf4d1b1-7a6e-4438-bf4f-22d9468c1732"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Change the Zone Type</maml:title><maml:introduction>
<maml:para>You can use this procedure to change make a zone a primary, secondary, or stub zone. You can also use it to integrate a zone with Active Directory Domain Services (AD DS). For more information, see <maml:navigationLink><maml:linkText>Understanding Zone Types</maml:linkText><maml:uri href="mshelp://windows/?id=94d8e229-ef7b-4b4f-884f-5fec92bbc911"></maml:uri></maml:navigationLink>.</maml:para>
<maml:para>Membership in the <maml:phrase>Administrators</maml:phrase> group, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Changing the zone type</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using the Windows interface</maml:linkText><maml:uri href="mshelp://windows/?id=3739d3bb-38d5-48da-b9bf-d80401baf053#BKMK_winui"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using a command line</maml:linkText><maml:uri href="mshelp://windows/?id=3739d3bb-38d5-48da-b9bf-d80401baf053#BKMK_cmd"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction>
<maml:sections>
<maml:section address="BKMK_winui"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To change the zone type using the Windows interface</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open DNS Manager.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the console tree, right-click the applicable zone, and then select <maml:ui>Properties</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>On the <maml:ui>General</maml:ui> tab, note the current zone type, and then click <maml:ui>Change</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In <maml:ui>Change Zone Type</maml:ui>, select a zone type other than the current zone type, and then click <maml:ui>OK</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open DNS Manager, click <maml:ui>Start</maml:ui>, point to <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>DNS</maml:ui>. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>You can select either <maml:ui>Primary zone</maml:ui>, <maml:ui>Secondary zone</maml:ui> or <maml:ui>Stub zone</maml:ui>. When you select the secondary or stub zone types, you must specify the IP address of another Domain Name System (DNS) server to be used as the source for obtaining updated information for the zone.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>If the DNS server computer is operating as a domain controller, the option to store the zone in AD DS is available. This option is not otherwise available. When this zone type is selected for use, zone data is stored and replicated as part of the AD DS database.</maml:para>
<maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>You cannot change the zone type (primary, secondary, or stub) and the method for storing the zone at the same time. You must perform the two operations separately.</maml:para>
</maml:alertSet>
</maml:listItem>
<maml:listItem>
<maml:para>Changing a zone from a secondary to primary type can affect other zone activities, including management of dynamic updates and zone transfers and the use of DNS notify lists to notify other servers about changes in the zone.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Changing a zone from stub to primary or the reverse is not recommended. This contradicts the purpose of stub zones. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Changing the DNS zone type or storage can be time consuming for large zones.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
<maml:section address="BKMK_cmd"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To change the zone type using a command line</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open a command prompt.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Type the following command, and then press ENTER: </maml:para>
<dev:code>dnscmd <ServerName> /ZoneResetType <ZoneName Property> [<MasterIPaddress...>] [/file <FileName>] {/OverWrite_Mem|/OverWrite_Ds|/DirectoryPartition <FQDN>}</dev:code>
</maml:section></maml:sections></maml:step></maml:procedure>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Parameter</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>dnscmd </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies the name of the command-line tool for managing DNS servers.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><ServerName> </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Specifies the DNS host name of the DNS server. You can also type the IP address of the DNS server. To specify the DNS server on the local computer, you can also type a period (.)</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><ZoneName> </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Specifies the fully qualified domain name (FQDN) of zone.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><Property> </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. One of the following zone types:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:computerOutputInline>/Primary </maml:computerOutputInline></maml:para>
<maml:para>Standard primary zone. The <maml:computerOutputInline>/file</maml:computerOutputInline> <maml:replaceable>FileName</maml:replaceable> option is required.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:computerOutputInline>/DsPrimary </maml:computerOutputInline></maml:para>
<maml:para>AD DS-integrated primary zone. If the zone is not already a primary zone, you must convert it to a primary zone (using <maml:computerOutputInline>/Primary</maml:computerOutputInline>) before you use this parameter to integrate the zone with AD DS.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:computerOutputInline>/Secondary </maml:computerOutputInline></maml:para>
<maml:para>Secondary zone. You must specify at least one <maml:replaceable>MasterIPaddress.</maml:replaceable></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:computerOutputInline>/Stub </maml:computerOutputInline></maml:para>
<maml:para>Stub zone. You must specify at least one <maml:replaceable>MasterIPaddress.</maml:replaceable> If the zone is an AD DS-integrated primary zone, you must use <maml:computerOutputInline>/DsStub</maml:computerOutputInline> to convert it to an AD DS-integrated stub zone before you use this parameter.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:computerOutputInline>/DsStub </maml:computerOutputInline></maml:para>
<maml:para>AD DS -integrated stub zone. You must specify at least one <maml:replaceable>MasterIPaddress.</maml:replaceable> If the zone is not already a stub zone, you must convert it to a stub zone (using <maml:computerOutputInline>/Stub</maml:computerOutputInline>) before you use this parameter to integrate the zone with AD DS.</maml:para>
</maml:listItem>
</maml:list>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>/file <FileName></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required for <maml:computerOutputInline>/Primary</maml:computerOutputInline>. Specifies the name of a file for the new zone. This parameter is not valid for the <maml:computerOutputInline>/DsPrimary</maml:computerOutputInline> zone type.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><MasterIPaddress...> </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required for <maml:computerOutputInline>/Secondary</maml:computerOutputInline>, <maml:computerOutputInline>/Stub</maml:computerOutputInline> and <maml:computerOutputInline>/DsStub</maml:computerOutputInline>. Specifies one or more IP addresses for the master servers of the secondary zone or stub zone, from which zone data is copied.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>/OverWrite_Mem | /OverWrite_Ds | /DirectoryPartition <FQDN></maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:computerOutputInline>/OverWrite_Mem</maml:computerOutputInline> overwrites existing DNS data using the data in AD DS. <maml:computerOutputInline>/OverWrite_Ds</maml:computerOutputInline> overwrites Active Directory data with data in DNS. <maml:computerOutputInline>/DirectoryPartition</maml:computerOutputInline> stores the new zone in the application directory partition that is specified by <maml:replaceable>FQDN</maml:replaceable>, such as DomainDnsZones.corp.widgets.tailspintoys.com.</maml:para>
</maml:entry></maml:row>
</maml:table>
<maml:para>To view the complete syntax for this command, at a command prompt, type the following command, and then press ENTER:</maml:para>
<dev:code>dnscmd /ZoneResetType /help </dev:code>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open an elevated Command Prompt window, click <maml:ui>Start</maml:ui>, point to <maml:ui>All Programs</maml:ui>, click <maml:ui>Accessories</maml:ui>, right-click <maml:ui>Command Prompt</maml:ui>, and then click <maml:ui>Run as administrator</maml:ui>. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>You can select either primary zones, secondary zones, or stub zones. When you select the secondary or stub zone type, specify the IP address of another DNS server to be used as the source for obtaining updated information for the zone.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>If the DNS server computer is operating as a domain controller, you can use the <maml:computerOutputInline>/DsPrimary</maml:computerOutputInline> or <maml:computerOutputInline>/DsStub</maml:computerOutputInline> parameters. These options are not otherwise available. When either zone type is selected for use, zone data is stored and replicated as part of the AD DS database.</maml:para>
<maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>Before you use these options, you must first convert the zone to the appropriate type, if necessary. That is, the zone must already be a primary zone before you can use <maml:computerOutputInline>/DsPrimary</maml:computerOutputInline> to integrate the zone with AD DS. Similarly, the zone must already be a stub zone before you can use <maml:computerOutputInline>/DsStub</maml:computerOutputInline> to integrate the zone with AD DS.</maml:para>
</maml:alertSet>
</maml:listItem>
<maml:listItem>
<maml:para>Changing a zone from a secondary zone to a primary zone can affect other zone activities, including management of dynamic updates and zone transfers, and the use of DNS notify lists to notify other servers about changes in the zone. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Changing a zone from a stub zone to a primary zone or the reverse is not recommended. This contradicts the purpose of stub zones. </maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Install a DNS Server</maml:title><maml:introduction>
<maml:para>Installing a Domain Name System (DNS) server involves adding the DNS server role to an existing Windows Server 2008 server. You can also install the DNS server role when you install the Active Directory Domain Services (AD DS) role. This is the preferred method for installing the DNS Server role if you want to integrate your DNS domain namespace with the AD DS domain namespace.</maml:para>
<maml:para>Membership in the <maml:phrase>Administrators</maml:phrase> group, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To install a DNS server</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open Server Manager. To open Server Manager, click <maml:ui>Start</maml:ui>, and then click <maml:ui>Server Manager</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the results pane, under <maml:ui>Roles Summary</maml:ui>, click <maml:ui>Add roles</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the Add Roles Wizard, if the <maml:ui>Before You Begin</maml:ui> page appears, click <maml:ui>Next</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the <maml:ui>Roles</maml:ui> list, click <maml:ui>DNS Server</maml:ui>, and then click <maml:ui>Next</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Read the information on the <maml:ui>DNS Server</maml:ui> page, and then click <maml:ui>Next</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>On the <maml:ui>Confirm Installation Options</maml:ui> page, verify that the DNS Server role will be installed, and then click <maml:ui>Install</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>We recommend that you configure the computer to use a static IP address. If the DNS server is configured to use DHCP-assigned dynamic addresses, when the DHCP server assigns a new IP address to the DNS server, the DNS clients that are configured to use that DNS server's previous IP address will not be able to resolve the previous IP address and locate the DNS server.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>After you install a DNS server, you can decide how to administer it and its zones. Although you can use a text editor to make changes to server boot and zone files, this method is not recommended. DNS Manager and the DNS command-line tool, <maml:computerOutputInline>dnscmd</maml:computerOutputInline>, simplify maintenance of these files, and they should be used whenever possible. After you begin using DNS Manager or command-line management of these files, editing them manually is not recommended. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>You can administer DNS zones that are integrated with AD DS only with DNS Manager or the <maml:computerOutputInline>dnscmd</maml:computerOutputInline> command-line tool. You cannot administer these zones with a text editor.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>If you uninstall a DNS server that hosts AD DS-integrated zones, these zones are saved or deleted according to their storage type. For all storage types, the zone data is stored on other domain controllers or DNS servers. The zone data is not deleted unless the DNS server that you uninstall is the last DNS server hosting that zone.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>If you uninstall a DNS server that hosts standard DNS zones, the zone files remain in the %systemroot%\system32\Dns directory, but they are not reloaded if the DNS server is reinstalled. If you create a new zone with the same name as an old zone, the old zone file is replaced with the new zone file.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>When they write DNS server boot and zone data to text files, DNS servers use the Berkeley Internet Name Domain (BIND) file format that is recognized by legacy BIND 4 servers, not the more recent BIND 8 format.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Configure a DNS Server for Use with Active Directory Domain Services</maml:linkText><maml:uri href="mshelp://windows/?id=b6793e7e-0bec-4865-a869-f947867dcc17"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Configure a New DNS Server</maml:linkText><maml:uri href="mshelp://windows/?id=3421116c-3790-4a3b-af30-1f486f568bdd"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>DNS Tools</maml:title><maml:introduction>
<maml:para>There are a number of utilities for administering, monitoring, and troubleshooting both Domain Name System (DNS) servers and clients. These utilities include the following:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>DNS Manager (<maml:ui>DNS </maml:ui>on the <maml:ui>Administrative Tools</maml:ui> menu).</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Command-line utilities, such as Nslookup, which you can use to troubleshoot DNS problems.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Logging features, such as the DNS server log, which you can view by using DNS Manager or Event Viewer. You can also use file-based logs temporarily as an advanced debugging option to log and trace selected service events.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Performance-monitoring utilities, such as statistical counters to measure and monitor DNS server activity with System Monitor.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Windows Management Instrumentation (WMI), a standard technology for accessing management information in an enterprise environment.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Platform Software Developer Kit (SDK).</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction><maml:content><maml:sections><maml:section address="H2_56772577">
<maml:title>DNS Manager</maml:title><maml:introduction>
<maml:para>The primary tool that you use to manage DNS servers is DNS Manager, the DNS snap-in in Microsoft Management Console (MMC), which appears as <maml:ui>DNS</maml:ui> in <maml:ui>Administrative Tools</maml:ui> on the <maml:ui>Start</maml:ui> menu. You can use DNS Manager along with other snap-ins in MMC, further integrating DNS administration into your total network management. It is also available in Server Manager on computers with the DNS Server role installed.</maml:para>
<maml:para>You can use DNS Manager to perform the following basic administrative server tasks:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Performing initial configuration of a new DNS server.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Connecting to and managing a local DNS server on the same computer or remote DNS servers on other computers.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Adding and removing forward and reverse lookup zones, as necessary.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Adding, removing, and updating resource records in zones.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Modifying how zones are stored and replicated between servers.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Modifying how servers process queries and handle dynamic updates.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Modifying security for specific zones or resource records.</maml:para>
</maml:listItem>
</maml:list>
<maml:para>In addition, you can also use DNS Manager to perform the following tasks:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Perform maintenance on the server. You can start, stop, pause, or resume the server or manually update server data files.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Monitor the contents of the server cache and, as necessary, clear it.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Tune advanced server options.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Configure and perform aging and scavenging of stale resource records that are stored by the server.</maml:para>
</maml:listItem>
</maml:list>
<maml:para>In addition, you can also operate DNS Manager from a workstation to remotely administer DNS servers.</maml:para>
<maml:alertSet class="important"><maml:title>Important </maml:title>
<maml:para>You can use DNS Manager only to manage DNS servers running Windows Server operating systems. The console cannot be used to manage other DNS servers, such as BIND servers.</maml:para>
</maml:alertSet>
</maml:introduction></maml:section><maml:section address="H2_56775150">
<maml:title>Command-line utilities</maml:title><maml:introduction>
<maml:para>There are several command-line utilities that you can use to manage and troubleshoot DNS servers and clients. The following table describes each of these utilities, which you can run either by typing them at a command prompt or by entering them in batch files for scripted use.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Command</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Nslookup</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Performs query testing of the DNS domain namespace. </maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Dnscmd</maml:para>
</maml:entry>
<maml:entry>
<maml:para>A command-line interface for managing DNS servers. This utility is useful in scripting batch files to help automate routine DNS management tasks or to perform simple unattended setup and configuration of new DNS servers on your network. </maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Ipconfig</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Displays and modifies IP configuration details that are used by the computer. Additional command-line options are included with this utility to provide help in troubleshooting and supporting DNS clients. </maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction></maml:section><maml:section address="H2_56776880">
<maml:title>Event-monitoring utilities</maml:title><maml:introduction>
<maml:para>The Windows Server 2008 family includes two options for monitoring DNS servers:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Default logging of DNS server event messages to the DNS server log. </maml:para>
<maml:para>DNS server event messages are separated and kept in their own system event log, the DNS server log, which you can view using DNS Manager or Event Viewer.</maml:para>
<maml:para>The DNS server log contains events that are logged by the DNS Server service. For example, when the DNS server starts or stops, a corresponding event message is written to this log. Most additional critical DNS Server service events are also logged here, for example, when the server starts but cannot locate initializing data and zones or boot information stored in the registry or (in some cases) Active Directory Domain Services (AD DS).</maml:para>
<maml:para>You can use Event Viewer to view and monitor client-related DNS events. These events appear in the System log, and they are written by the DNS Client service at any computers running Windows (all versions). </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Optional debug options for trace logging to a text file on the DNS server computer. </maml:para>
<maml:para>You can also use DNS Manager to selectively enable additional debug logging options for temporary trace logging to a text-based file of DNS server activity. The file that is created and used for this feature, Dns.log, is stored in the %systemroot%\System32\Dns folder.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section><maml:section address="H2_56778826">
<maml:title>Performance-monitoring utilities</maml:title><maml:introduction>
<maml:para>You can do performance monitoring for DNS servers using additional service-specific counters that measure DNS server performance. These counters are accessible through System Monitor, which is provided in the Performance snap-in.</maml:para>
<maml:para>When you use System Monitor, you can create charts and graphs of server performance trends over time for any of your DNS servers. These can be further studied and analyzed to determine if additional server tuning is needed.</maml:para>
<maml:para>Through measurement and review of server metrics over a period of time, it is possible to determine performance benchmarks and decide if further adjustments can be made to optimize the system.</maml:para>
</maml:introduction></maml:section><maml:section address="DNS_WMI">
<maml:title>Windows Management Instrumentation</maml:title><maml:introduction>
<maml:para>WMI is the Microsoft implementation of Web-Based Enterprise Management (WBEM), which is an industry initiative to develop a standard technology for accessing management information in an enterprise environment. WMI uses the Common Information Model (CIM) industry standard to represent systems, applications, networks, devices, and other managed components in an enterprise environment. For more information about WMI, see Windows Management Instrumentation (WMI) (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=80947</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=80947"></maml:uri></maml:navigationLink>). </maml:para>
</maml:introduction></maml:section><maml:section address="DNS_SDK">
<maml:title>Platform Software Developer Kit</maml:title><maml:introduction>
<maml:para>Computers that run a product in the Windows Server 2008 family provide functions that make it possible for application programmers to use DNS, for example, programmatically making DNS queries, comparing records, and looking up names.</maml:para>
<maml:para>Programmable DNS components are designed for use by C/C++ programmers. Familiarity with networking and DNS is required. Programmers should be familiar with the IP protocol suite, as well as the DNS protocol and DNS operations.</maml:para>
</maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Understanding Active Directory Domain Services Integration</maml:title><maml:introduction>
<maml:para>The DNS Server service is integrated into the design and implementation of Active Directory Domain Services (AD DS). AD DS provides an enterprise-level tool for organizing, managing, and locating resources in a network.</maml:para>
<maml:para>When you deploy Domain Name System (DNS) servers with AD DS, consider the following:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>DNS is required for locating domain controllers. </maml:para>
<maml:para>The Net Logon service uses DNS server support to provide registration of domain controllers in your DNS domain namespace.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>DNS servers running Windows Server 2003 or Windows Server 2008 can use AD DS for storing and replicating your zones.</maml:para>
<maml:para>By integrating your zones with AD DS, you can take advantage of DNS features, such as AD DS replication, secure dynamic updates, and record aging and scavenging.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>How DNS integrates with AD DS</maml:title><maml:introduction>
<maml:para>When you install AD DS on a server, you promote the server to the role of a domain controller for a specified domain. As part of this process, you are prompted to specify a DNS domain name for the AD DS domain which you are joining and for which you are promoting the server, and you are offered the option to install the DNS Server role. This option is provided because a DNS server is required to locate this server or other domain controllers for members of an AD DS domain. </maml:para>
</maml:introduction></maml:section><maml:section>
<maml:title>Benefits of AD DS integration</maml:title><maml:introduction>
<maml:para>For networks that deploy DNS to support AD DS, directory-integrated primary zones are strongly recommended. They provide the following benefits:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>DNS features multimaster data replication and enhanced security based on the capabilities of AD DS. </maml:para>
<maml:para>In a standard zone storage model, DNS updates are conducted based on a single-master update model. In this model, a single authoritative DNS server for a zone is designated as the primary source for the zone. This server maintains the master copy of the zone in a local file. With this model, the primary server for the zone represents a single fixed point of failure. If this server is not available, update requests from DNS clients are not processed for the zone.</maml:para>
<maml:para>With directory-integrated storage, dynamic updates to DNS are sent to any AD DS-integrated DNS server and are replicated to all other AD DS-integrated DNS servers by means of AD DS replication. In this model, any AD DS-integrated DNS servercan accept dynamic updates for the zone. Because the master copy of the zone is maintained in the AD DS database, which is fully replicated to all domain controllers, the zone can be updated by the DNS servers operating at any domain controller for the domain. With the multimaster update model of AD DS, any of the primary servers for the directory-integrated zone can process requests from DNS clients to update the zone as long as a domain controller is available and reachable on the network.</maml:para>
<maml:para>Also, when you use directory-integrated zones, you can use access control list (ACL) editing to secure a dnsZone object container in the directory tree. This feature provides detailed access to either the zone or a specified resource record in the zone. For example, an ACL for a zone resource record can be restricted so that dynamic updates are allowed only for a specified client computer or a secure group, such as a domain administrators group. This security feature is not available with standard primary zones.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Zones are replicated and synchronized to new domain controllers automatically whenever a new one is added to an AD DS domain. </maml:para>
<maml:para>Although the DNS Server service can be selectively removed from a domain controller, directory-integrated zones are already stored at each domain controller. Therefore, zone storage and management is not an additional resource. Also, the methods that are used to synchronize directory-stored information offer performance improvement over standard zone update methods, which can potentially require transfer of the entire zone.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para> By integrating storage of your DNS zone databases in AD DS, you can streamline database replication planning for your network. </maml:para>
<maml:para>When your DNS namespace and AD DS domains are stored and replicated separately, you must plan and potentially administer each of these items separately. For example, when you use standard DNS zone storage and AD DS together, you have to design, implement, test, and maintain two different database replication topologies. </maml:para>
<maml:para>For example, one replication topology is needed for replicating directory data between domain controllers, and another topology is needed for replicating zone databases between DNS servers. This can create additional administrative complexity for planning and designing your network and allowing for its eventual growth. By integrating DNS storage, you unify storage management and replication issues for both DNS and AD DS, merging and viewing them together as a single administrative entity.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Directory-integrated replication is faster and more efficient than standard DNS replication. </maml:para>
<maml:para>Because AD DS replication processing is performed on a per-property basis, only relevant changes are propagated. Less data is used and submitted in updates for directory-stored zones.</maml:para>
</maml:listItem>
</maml:list>
<maml:para>Only primary zones can be stored in the directory. A DNS server cannot store secondary zones in the directory. It must store them in standard text files. The multimaster replication model of AD DS removes the need for secondary zones when all zones are stored in AD DS.</maml:para>
<maml:para>For more information about configuring DNS for AD DS integration, see <maml:navigationLink><maml:linkText>Configure a DNS Server for Use with Active Directory Domain Services</maml:linkText><maml:uri href="mshelp://windows/?id=b6793e7e-0bec-4865-a869-f947867dcc17"></maml:uri></maml:navigationLink> and <maml:navigationLink><maml:linkText>Checklist: Add a Domain Controller with the DNS Server Service</maml:linkText><maml:uri href="mshelp://windows/?id=7c47acc8-e505-4d56-9849-226e53bff23d"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Checklist: Configure DNS Client Settings</maml:title><maml:introduction>
<maml:para>Domain Name System (DNS) client configuration is as important to the proper functioning of your DNS infrastructure as DNS server configuration. Considerations for configuring DNS clients include client-naming conventions (including host name and primary DNS suffix); specifying the DNS servers for a client or allowing Dynamic Host Configuration Protocol (DHCP) to assign DNS servers; and configuring a suffix search list for resolving short, unqualified host names. You can also configure connection-specific DNS settings for computers with multiple network adapters or Remote Access Service (RAS) connections.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Task</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Reference</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Read about client configuration.</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Understanding DNS Client Settings</maml:linkText><maml:uri href="mshelp://windows/?id=4d785d45-dc9d-4ed2-ba73-e734d55d3319"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Configure static DNS clients.</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Configure DNS for Static Clients</maml:linkText><maml:uri href="mshelp://windows/?id=ad057afb-eb26-4077-b549-728b10c2a208"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Configure DHCP servers and DHCP-enabled clients.</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Enable DNS for DHCP-Enabled Clients</maml:linkText><maml:uri href="mshelp://windows/?id=806532cf-9b03-4777-bef4-d95c9d4136bb"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction><maml:content><maml:sections></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Enlist a DNS Server in a DNS Application Directory Partition</maml:title><maml:introduction>
<maml:para>After you create a Domain Name System (DNS) application directory partition to store a zone, you must enlist the DNS server that hosts the zone in the application directory partition. For more information, see <maml:navigationLink><maml:linkText>Understanding DNS Zone Replication in Active Directory Domain Services</maml:linkText><maml:uri href="mshelp://windows/?id=e93c32c9-0c5c-4822-9c84-d464658d6ed3"></maml:uri></maml:navigationLink>.</maml:para>
<maml:para>Membership in <maml:phrase>DnsAdmins</maml:phrase> or <maml:phrase>Domain Admins</maml:phrase>, or the equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To enlist a DNS server in a DNS application directory partition</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open a command prompt.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Type the following command, and then press ENTER:</maml:para>
<dev:code>dnscmd <ServerName> /EnlistDirectoryPartition <FQDN> </dev:code>
</maml:section></maml:sections></maml:step></maml:procedure>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Value</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>dnscmd </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies the name of the command-line tool for managing DNS servers.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><ServerName> </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Specifies the DNS host name of the DNS server. You can also type the IP address of the DNS server. To specify the DNS server on the local computer, you can also type a period (.).</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>/EnlistDirectoryPartition </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Enlists a DNS server in a DNS application directory partition.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><FQDN> </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Specifies the fully qualified domain name (FQDN) of the DNS application directory partition.</maml:para>
</maml:entry></maml:row>
</maml:table>
<maml:para>To view the complete syntax for this command, at a command prompt, type the following command, and then press ENTER:</maml:para>
<dev:code>dnscmd /EnlistDirectoryPartition /?</dev:code>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open an elevated Command Prompt window, click <maml:ui>Start</maml:ui>, point to <maml:ui>All Programs</maml:ui>, click <maml:ui>Accessories</maml:ui>, right-click <maml:ui>Command Prompt</maml:ui>, and then click <maml:ui>Run as administrator</maml:ui>.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Checklist: Store Data in an AD DS Application Partition</maml:linkText><maml:uri href="mshelp://windows/?id=2e2e0678-1775-4cdd-8779-32d5c281540f"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual>GIF89a 3 f 3 33 3f 3 3 3 f f3 ff f f f 3 f 3 f ̙ 3 f 3 3 33 f3 3 3 33 33333f3333333f 3f33ff3f3f3f3 333f3333 333f3̙333 333f333f f 3f ff f f f3 f33f3ff3f3f3ff ff3ffffffffff f3ffffff f3fff̙fff f3fffff 3 f ̙ 3 333f33̙3f f3ffff̙f 3f̙ 3f̙̙ 3f̙ 3 f 3 333f333f f3fffff̙ ̙3̙f̙̙̙ 3f̙ 3f 3 f 3 333f333f f3fffff 3f 3f̙ 3f ! , H*\ȰÇ#JHŋ3jȱǏ C Iɓ(S\ɲ˗0cʜI͛8sɳϟ@
JѣH*]ʴӧPJJիJhJ@ مb~UvKgi6dk/]wm`Vv-`>Kwqz+lʐ~NYeA/.k05gϢES<ԉWqܴg}<,\-j\u )~+;6yoƋw~z˻{GwGW`kI`lg~%ke rN-ןc)I(",0(4h8<@)DiH&L6PF)TVYVe8ie5[rٞ`'Kd~egl j rVeY |Pxީ6砏ZĨZhD]hrf
6E j:i
QiZʫFE
+ [f2;Vҵ*Z -
B4칵nK뮷Klz/o7/+l p|Zp^|[ T&S<r%ug"֙q
qz9sss2<GTt@<syK?Jj?]5Zu]]Iص+fy@-k;(`Kiܾ N.! rZ7C&̂_x^W!3lИM ׆q[:ʌ_z~5GOzyh[NF"K *ϼ ?kNc/H
9s<+Οj#y4?e)+~39g
|
ZTI7BЄwjX
cTALg[ł z!`2 Qk3hèmRK"BސP,
V!0+nB+:qw` cAyiܚFq㓶:Nw.>S7>:~-̗ I7 ol# Jb .xIRaY >t_$(&J$C%U/5RK;1 0myJ^>qy-'RO+-5̂ $ Ebmf6MyUߴƙMlnbL86tԟ39{SQ'9@X~P{mL OͳG<A(EAi鈦Rvެ EZJO0Nwe8IyRFD *Q
R!J]jQZJXYծJyXQdMH+RSJWuZuͫX͊`՟P_X*mcC vOe َhvR> ZgMmO}DZik
b -nw ɖnmKܸMpG.'m^*]>WB.pnW'mtUzߵ :;^bռI\q{rE}PQ{}4LruW5 .Ԑ xT-NqApVyp1#V:@0IR.Lix""&&$_jb4q$'4Jb|/VWI D.{ 7C1¢c1,Y[ej1Xuld\89 g'y kM>z\3$YJ= Q |f?gt-O$}Hjy6qXnNWud*qO IR9;){ijAKՙC⩯^W.4FjҞMss-m^s9jǔD6<%;V^۠^vm;SX.j½쏾\>7;;n%"Yͧ o3[>Q/|縭7}c|8':+' NC1'RԨ~IaxގBW9߫E'<^9Z~ADG}VoFtY`/x8hm$WyѯNu3z5z:9WU{I>x
G~b7A&}o;ةy>_OyiÛ 5o'|;^잏_b5?;C ߧgGc~1|+]aǽyg}Q_cW_}skoͯ djdqtQ6Wg}7ٗ|ևzGz}g\Tzʅ^^]tvHʗ~1w56g65Wxb_]cQ2]WWU=n%#iW6\`BXZ9KYM8OYQSYrUV^iu_d_7Oȅaq#jnln\Tvqlsx~x\^ՇU%{H^^X^H (^Drh(YԉxQr5WoKrknqJ?$HpnCG{|k(2勱=6ȃ¸k$VH!،BEGۘ@SJ(hS㸊֨Zt\XI(VxQF5b]rL`78sŐsd6cS'
Y^
aHC5" ;4U*42R+ia1C3A.7y>e!Dy}&9'/?ILiLA 'B~K M ZsFYRE"\ ! iip!ZOqv6 aU9 !}IW`Y6~ i]#A٘Ia6S)y9hTu /9I њ y i!Icٛɛ1&)
9йjiai!)I!S !)yt9;mɛ1ѝ9YO<YICIZ 1i 0+z
\ FQ3ɡq *%J5i"% IiyQ"+ʜ
p!$B,q)ҁ'I Ҥ M W
F, ɢk !EQPzv#A>d`! P!y: {g~^ʥ٨1VI sʤiYz*A rX
ZxJcfjg / :
z8S`C2zJ3ڬ%Cz
z1ڬۚ0z:/ʥ.J*-麝J,z+
b $*i(ʬʚ6# [)k*#(
K#(#'+UG8E
k ? {q1~b.(&/86²%krM96#1+&A<Fd72Y+Q4Hk#L[%SN>>2R Z(qS8vh+58WFP@p{e;q[v{*+Fs~s=Jm1t[DrLk3I,A8 y{F#CA`%e1{͚V<e#OJs 48(k3,
[+/ jn7k#&
(Ԣʩ.JSnm;(w&y⛾ ˪0f>%[8*۞+ { oZYYcTh;+'d:4*\s<#iKI2<*\㻼"k5|י y@iR<)i6#aþ>|óCLU1^Uc-A:ƬJ|Ḷt4\4k|L<4<ǿ2:F& )nLpLe Kܘ1m2y|B\S e z. <@L)¾)
̿ Ϋj+ ~l <\,-̟J=[*jq,9ڐ\ *ۼ<έ;$Lο˧Vli1LL|tz [5ϒ`
f mj{Dгk+Уc\c,4ɫ jj|(*,.0 2=4]6}8:<>@ B=D]F!Ҽ'W"(:(Kd 3ʘ1;I/<X8~W)V']- fa" e
˞F| T\H~|I Ձ]LzȘȓ!ɷYڕ,Y!$ׇۋ}ڝr\OlI
mR\'ҙm5<ٸ]`{?\ۂ}ɟ
emyѺܼWK ޛI
LΝݹ}h"-ݶl]maަm vMG} }߇
m,˥,͞9$~{4&
.n˅G>@N Y.54)m_Ά -0[Le֞uzV&O^vb.J u♧1S] @:ٙ|Y>b|ުꢠsu}q֭.jmlz ϗͯ:ꕚS͡"n 婮 ͝.p:>Zb 馌 mnINZN2~ gKT"-Nڦ,nϣ.͜6z,..̧.l꽮 P*h
JZo _F-nO>#O.컎 &բ- S*ծ\j z媉NMOP na?דNr"o >PךgJ
x ;<maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Understanding DNS Client Settings</maml:title><maml:introduction>
<maml:para>Domain Name System (DNS) configuration involves the following configuration tasks for TCP/IP properties on each computer:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Set a DNS computer or host name for each computer. For example, in the fully qualified domain name (FQDN) wkstn1.widgets.tailspintoys.com., the DNS computer name is the left-most label wkstn1.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Set a primary DNS suffix for each computer, which is placed after the computer or host name to form the FQDN. Using the previous example, the primary DNS suffix is widgets.tailspintoys.com.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Set a list of DNS servers for clients to use when resolving DNS names, such as a preferred DNS server, and any alternate DNS servers to use if the preferred server is not available.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Set the DNS suffix search list or search method to be used by a client when it performs DNS query searches for short, unqualified domain names.</maml:para>
</maml:listItem>
</maml:list>
<maml:para>These tasks are discussed in more detail in each of the following sections.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Setting computer names</maml:title><maml:introduction>
<maml:para>When you set computer names for DNS, it is useful to think of the name as the left-most portion of an FQDN. For example, in wkstn1.widgets.tailspintoys.com., wkstn1 is the computer name.</maml:para>
<maml:para>You can configure all Windows DNS clients with a computer name based on any of the standard supported characters that are defined in Request for Comments (RFC) 1123, "Requirements for Internet Hosts — Application and Support." These characters include the following:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Uppercase letters, A through Z</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Lowercase letters, a through z</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Numbers, 0 through 9</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Hyphens (<maml:phrase>-</maml:phrase>)</maml:para>
</maml:listItem>
</maml:list>
<maml:para>If you are supporting both NetBIOS and DNS namespaces on your network, you can use a different computer name within each namespace. It is recommended that wherever possible, however, you try to use computer names that are 15 characters or less and that you follow these RFC 1123 naming requirements.</maml:para>
<maml:para>By default, the left-most label in the FQDN for clients equals the NetBIOS computer name, unless this label is 16 or more characters, which is the maximum for NetBIOS names. When the computer name exceeds the maximum length for NetBIOS, the NetBIOS computer name is truncated based on the full label that is specified.</maml:para>
<maml:para>Before you configure computers with varying DNS and NetBIOS names, consider the following implications and their related issues for your deployment:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>If Windows Internet Name Service (WINS) lookup is enabled for zones that are hosted by your DNS servers, use the same name for both NetBIOS and DNS computer naming. Otherwise, the results of clients attempting to query and resolve the names of these computers will be inconsistent.</maml:para>
</maml:listItem>
</maml:list>
<maml:para>If you have an investment in using NetBIOS names to support legacy Microsoft networking technology, we recommend that you revise NetBIOS computer names that are used on your network to prepare for migration to a standard, DNS-only environment. This prepares your network well for long-term growth and interoperability with future naming requirements. For example, if you use the same computer name for both NetBIOS and DNS resolution, consider converting any special characters such as the underscore (<maml:phrase>_</maml:phrase>) in your current NetBIOS names that do not comply with DNS naming standards. While these characters are permitted in NetBIOS names, they are more often incompatible with traditional DNS host naming requirements and most existing DNS resolver client software.</maml:para>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Although the use of the underscore (<maml:phrase>_</maml:phrase>) in DNS host names or in host (A) resource records has been traditionally prohibited by DNS standards, the use of underscores in service-related names—such as the names that are used for service locator (SRV) resource records—has been proposed to avoid naming collisions in the Internet DNS namespace. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>In addition to DNS standard naming conventions, Windows Server 2008 DNS supports the use of extended ASCII and Unicode characters. However, because most resolver software written for other platforms (such as UNIX) is based on the Internet DNS standards, this enhanced character support can be used only in private networks with computers running Windows 2000, Windows Server 2003, or Windows Server 2008 DNS.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>The initial setup of DNS and TCP/IP displays a warning to suggest a standard DNS name if a nonstandard DNS name is entered.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>By default, computers and servers use DNS to resolve any name that is greater than 15 characters in length. If the name is less than or equal to 15 characters, both NetBIOS and DNS name resolution can be attempted and used to resolve the name. </maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section><maml:section>
<maml:title>Setting domain names</maml:title><maml:introduction>
<maml:para>The domain name is used with the client computer name to form the FQDN, also known as the full computer name. In general, the DNS domain name is the remainder of the FQDN that is not used as the unique host name for the computer.</maml:para>
<maml:para>For example, the DNS domain name for a client computer can be the following: If the FQDN, or full computer name, is wkstn1.widgets.tailspintoys.com, the domain name is the widgets.tailspintoys.com portion of this name.</maml:para>
<maml:para>DNS domain names have two variations—a DNS name and a NetBIOS name. The full computer name (a fully qualified DNS name) is used during querying and location of named resources on your network. For earlier version clients, the NetBIOS name is used to locate various types of NetBIOS services that are shared on your network.</maml:para>
<maml:para>An example of a component that has a need for both NetBIOS and DNS names is the Net Logon service. In Windows Server 2008 DNS, the Net Logon service on a domain controller registers its service locator (SRV) resource records on a DNS server. For Windows NT Server 4.0 and earlier versions, domain controllers register a DomainName entry in WINS to perform the same registration and to advertise their availability for providing authentication service to the network.</maml:para>
<maml:para>When a client computer is started on the network, it uses the DNS resolver to query a DNS server for service locator (SRV) resource records for its configured domain name. This query is used to locate domain controllers and provide logon authentication for accessing network resources. A client or a domain controller on the network can also use the NetBIOS resolver service to query WINS servers, attempting to locate DomainName [1C] entries to complete the logon process.</maml:para>
<maml:para>Your DNS domain names should follow the same standards and recommended practices that apply to DNS computer naming described in the previous section. In general, acceptable naming conventions for domain names include the use of letters A through Z, numerals 0 through 9, and the hyphen (<maml:phrase>-</maml:phrase>). A period (.) in a domain name is always used to separate the discrete parts of a domain name, which are commonly known as labels. Each label corresponds to an additional level that is defined in the DNS namespace tree.</maml:para>
<maml:para>For most computers, the primary DNS suffix that is configured for the computer can be the same as its Active Directory Domain Services (AD DS) domain name, although the two values can also be different.</maml:para>
<maml:alertSet class="important"><maml:title>Important </maml:title>
<maml:para>By default, the primary DNS suffix portion of a computer's FQDN must be the same as the name of the AD DS domain where the computer is located. To allow different primary DNS suffixes, a domain administrator may create a restricted list of allowed suffixes by creating the <maml:phrase>msDS-AllowedDNSSuffixes</maml:phrase> attribute in the domain object container. A domain administrator creates and manages this attribute using Active Directory Service Interfaces (ADSI) or the Lightweight Directory Access Protocol (LDAP). </maml:para>
</maml:alertSet>
</maml:introduction></maml:section><maml:section>
<maml:title>Configuring a DNS servers list</maml:title><maml:introduction>
<maml:para>For DNS clients to operate effectively, a prioritized list of DNS name servers must be configured for each computer to use when it processes queries and resolves DNS names. In most cases, the client computer contacts and uses its preferred DNS server, which is the first DNS server on its locally configured list. Listed alternate DNS servers are contacted and used when the preferred server is not available. For this reason, it is important that the preferred DNS server be appropriate for continuous client use under normal conditions.</maml:para>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>For computers running Microsoft Windows XP or Windows Vista®, the DNS server list is used by clients only to resolve DNS names. When clients send dynamic updates, for example, when they change their DNS domain name or a configured IP address, they might contact these servers or other DNS servers as needed to update their DNS resource records. For more information, see <maml:navigationLink><maml:linkText>Understanding Dynamic Update</maml:linkText><maml:uri href="mshelp://windows/?id=76a72c3d-6c2f-489f-814b-33a94f207896"></maml:uri></maml:navigationLink>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>By default, the DNS client on Windows XP or Windows Vista does not attempt dynamic update over a Remote Access Service (RAS) or virtual private network (VPN) connection. To modify this configuration, you can modify the advanced TCP/IP settings of the particular network connection or you can modify the registry. For more information, see Windows Server 2003 Resource Kit Registry Reference (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=428</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=428"></maml:uri></maml:navigationLink>). </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>By default, the DNS client does not attempt dynamic update of top-level domain (TLD) zones. Any zone that is named with a single-label name is considered to be a TLD zone, for example, com, edu, blank, my-company. To configure the DNS client to allow the dynamic update of TLD zones, you can use the <maml:phrase>Update Top Level Domain Zones</maml:phrase> policy setting or you can modify the registry.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>When DNS clients are configured dynamically using a Dynamic Host Configuration Protocol (DHCP) server, it is possible to have a larger list of provided DNS servers. To provide an IP address list of DNS servers to your DHCP clients, enable option code 6 on the configured options types that is provided by your DHCP server. For Windows Server 2003 and Windows Server 2008 DHCP servers, you can configure a list of up to 25 DNS servers for each client with this option.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>To effectively share the load when multiple DNS servers are provided in a DHCP options-specified list, you can configure a separate DHCP scope that rotates the listed order of DNS and WINS servers that is provided to clients.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section><maml:section>
<maml:title>Configuring a DNS suffix search list</maml:title><maml:introduction>
<maml:para>For DNS clients, you can configure a DNS domain suffix search list that extends or revises their DNS search capabilities. By adding additional suffixes to the list, you can search for short, unqualified computer names in more than one specified DNS domain. Then, if a DNS query fails, the DNS Client service can use this list to append other name suffix endings to your original name and repeat DNS queries to the DNS server for these alternate FQDNs.</maml:para>
<maml:para>For computers and servers, the following default DNS search behavior is predetermined and used when completing and resolving short, unqualified names.</maml:para>
<maml:para>When the suffix search list is empty or unspecified, the primary DNS suffix of the computer is appended to short unqualified names, and a DNS query is used to resolve the resultant FQDN. If this query fails, the computer can try additional queries for alternate FQDNs by appending any connection-specific DNS suffix that is configured for network connections.</maml:para>
<maml:para>If no connection-specific suffixes are configured or queries for these resultant connection-specific FQDNs fail, the client can then begin to retry queries based on systematic reduction of the primary suffix (also known as devolution).</maml:para>
<maml:para>For example, if the primary suffix is "widgets.tailspintoys.com", the devolution process is able to retry queries for the short name by searching for it in the "microsoft.com" and "com" domains.</maml:para>
<maml:para>When the suffix search list is not empty and has at least one DNS suffix specified, attempts to qualify and resolve short DNS names are limited to searching only those FQDNs that are made possible by the specified suffix list. If queries for all FQDNs that are formed as a result of appending and trying each suffix in the list are not resolved, the query process fails, which produces a "Name not found" result. </maml:para>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>If the domain suffix list is used, clients continue to send additional alternate queries based on different DNS domain names when a query is not answered or resolved. When a name is resolved using an entry in the suffix list, unused list entries are not tried. For this reason, it is most efficient to order the list with the most-used domain suffixes first.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Domain name suffix searches are used only when a DNS name entry is not fully qualified. To fully qualify a DNS name, enter a trailing period (.) at the end of the name.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Windows Server 2008 supports a specially named zone, called GlobalNames, to provide resolution of a limited set of globally unique, single-label names in an enterprise network. You can use this zone when network requirements make it impractical to use a suffix search list for this purpose. For more information, see <maml:navigationLink><maml:linkText>Deploying a GlobalNames Zone</maml:linkText><maml:uri href="mshelp://windows/?id=acf8b192-752d-4459-b7e4-a404309fcf32"></maml:uri></maml:navigationLink>.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section><maml:section>
<maml:title>Configuring multiple names</maml:title><maml:introduction>
<maml:para>Computers running Windows XP, Windows Vista, Windows Server 2003, and Windows Server 2008 are given DNS names by default. Each computer can have its DNS names configured using one of two possible methods:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>A primary DNS domain name, which applies as the default fully qualified DNS name for the computer and all of its configured network connections</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>A connection-specific DNS domain name, which can be configured as an alternate DNS domain name that applies only for a single network adapter that is installed and configured on the computer</maml:para>
</maml:listItem>
</maml:list>
<maml:para>Although most computers do not need to support or use more than one name in DNS, support for configuring multiple, connection-specific DNS names is sometimes useful. For example, by using multiple names, a user can specify which network connection to use when connecting to a multihomed computer.</maml:para>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Example: using connection-specific names</maml:title><maml:introduction>
<maml:para>As shown in the following illustration, a multihomed server computer named host-a can be named according to both its primary and connection-specific DNS domain names.</maml:para>
<maml:para><maml:embedObject><maml:caption>Connection-specific name</maml:caption><maml:objectUri href="mshelp://windows/?id=58461ea8-b284-4ecd-80b3-f2ec60869b23" mimeType="image/gif"><maml:summary>Multihomed DNS computer configured with many names</maml:summary></maml:objectUri></maml:embedObject></maml:para>
<maml:para>In this example, the server computer host-a attaches to two separate subnets—Subnet 1 and Subnet 2—which are also linked at redundant points using two routers for additional paths between each subnet. Given this configuration, host-a provides access as follows through its separately named local area network (LAN) connections:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>The name host-a.public.example.microsoft.com provides access using LAN connection 1 over Subnet 1, a lower-speed (10 megabit) Ethernet LAN, for normal access to users who have typical file and print service needs.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>The name host-a.backup.example.microsoft.com" provides access using LAN connection 2 over Subnet 2, a higher-speed (100 megabit) Ethernet LAN, for reserved access by server applications and administrators who have special needs, such as troubleshooting server networking problems, performing network-based backup, or replicating zone data between servers.</maml:para>
</maml:listItem>
</maml:list>
<maml:para>In addition to the connection-specific DNS names, the computer can also be accessible using either of the two LAN connections by specifying its primary DNS domain name, "host-a.example.microsoft.com".</maml:para>
<maml:para>When it is configured as shown, a computer can register resource records in DNS according to its three distinct names and sets of IP addresses, as shown in the following table.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>DNS name</maml:para>
</maml:entry>
<maml:entry>
<maml:para>IP addresses</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>host-a.example.microsoft.com</maml:para>
</maml:entry>
<maml:entry>
<maml:para>10.1.1.11, 10.2.2.22</maml:para>
</maml:entry>
<maml:entry>
<maml:para>The primary DNS name for computer. The computer registers host (A) and pointer (PTR) resource records for all configured IP addresses under this name in the widgets.tailspintoys.com zone.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>host-a.public.example.microsoft.com</maml:para>
</maml:entry>
<maml:entry>
<maml:para>10.1.1.11</maml:para>
</maml:entry>
<maml:entry>
<maml:para>The connection-specific DNS name for LAN connection 1, which registers host (A) and pointer (PTR) resource records for IP address 10.1.1.11 in the public.widgets.tailspintoys.com zone.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>host-a.backup.example.microsoft.com</maml:para>
</maml:entry>
<maml:entry>
<maml:para>10.2.2.22</maml:para>
</maml:entry>
<maml:entry>
<maml:para>The connection-specific DNS name for LAN connection 2, which registers host (A) and pointer (PTR) resource records for IP address 10.2.2.22 in the backup.widgets.tailspintoys.com zone.</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>DNS names can be set using remote administration and other remote configuration services, such as DHCP. For a DNS server running Windows Server 2008, the primary DNS domain name can be set using either remote administration or the unattended setup option.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>For connection-specific naming, you can use TCP/IP configuration methods. You can manually configure the DNS domain name for each connection that appears in the Network Connections folder, or you can use a DHCP option type (option code 15). </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>For more information about DHCP options, see "DHCP Options" in the Networking Collection (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=4639</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=4639"></maml:uri></maml:navigationLink>). </maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Update Root Hints on the DNS Server</maml:title><maml:introduction>
<maml:para>You can use root hints to prepare servers that are authoritative for nonroot zones so that they can discover authoritative servers that manage domains at a higher level or in other subtrees of the DNS domain namespace. These root hints are essential for servers that are authoritative at lower levels of the namespace when locating and finding other servers under these conditions.</maml:para>
<maml:para>Membership in the <maml:phrase>Administrators</maml:phrase> group, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To update root hints on the DNS server</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open DNS Manager.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the console tree, click the applicable DNS server.</maml:para>
<maml:para><maml:phrase>Where?</maml:phrase></maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>DNS/<maml:replaceable>applicable DNS server</maml:replaceable></maml:para>
</maml:listItem>
</maml:list>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>On the <maml:ui>Action</maml:ui> menu, click <maml:ui>Properties</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Click the <maml:ui>Root Hints</maml:ui> tab.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Modify server root hints as follows:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To add a root server to the list, click <maml:ui>Add</maml:ui>, and then specify the name and IP address of the server to be added to the list.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>To modify a root server in the list, click <maml:ui>Edit</maml:ui>, and then specify the name and IP address of the server to be modified in the list.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>To remove a root server from the list, select it in the list, and then click <maml:ui>Remove</maml:ui>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>To copy root hints from a DNS server, click <maml:ui>Copy from server</maml:ui>, and then specify the IP address of the DNS server from which you want to copy a list of root servers to use in resolving queries. These root hints will not overwrite any existing root hints.</maml:para>
</maml:listItem>
</maml:list>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open DNS Manager, click <maml:ui>Start</maml:ui>, point to <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>DNS</maml:ui>.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Updating Root Hints</maml:linkText><maml:uri href="mshelp://windows/?id=7fc91f3b-c926-4dd7-a9f5-8d140d261a14"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Security Information for DNS</maml:linkText><maml:uri href="mshelp://windows/?id=eebcdbcb-eab3-47a8-8355-3e1189b38c7f"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Securing the DNS Server Service</maml:linkText><maml:uri href="mshelp://windows/?id=9f93a319-4e77-4c17-ad4a-10e3ea9847f1"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual>GIF89a 3 f 3 33 3f 3 3 3 f f3 ff f f f 3 f 3 f ̙ 3 f 3 3 33 f3 3 3 33 33333f3333333f 3f33ff3f3f3f3 333f3333 333f3̙333 333f333f f 3f ff f f f3 f33f3ff3f3f3ff ff3ffffffffff f3ffffff f3fff̙fff f3fffff 3 f ̙ 3 333f33̙3f f3ffff̙f 3f̙ 3f̙̙ 3f̙ 3 f 3 333f333f f3fffff̙ ̙3̙f̙̙̙ 3f̙ 3f 3 f 3 333f333f f3fffff 3f 3f̙ 3f ! , H*\ȰÇ#JHŋ3jȱǏ C Iɓ(S\ɲ˗0cʜI͛8sɳϟ@
JѣH*]ʴӧPJJիXjʵׯ`Ê K٤ ҪM{۷?ZKwZxU ߿l
Lb߿.̸q&L˘ g˙CƺgΣSvϫc Zmg]vMI<ܸ'9!JnnzǓn [{|}߀ s`eDF_g
*FIم1a6Ƞvn(d%z(\ ba$vhba^٨"3ic;F%`F yr)&YZ ))Q{X^sWDI~zii%GG Bõ Aj6&y@_湘el})P^p.%y tgIni饁*iIhV騕fj AmqNzQmv_46ꪰZzJkiF{lڪ[îJ#!N+2-*.Zo螶ԒWd>y 6'¸ʰ 5|I<[ m|f`Eȯ,2Fo.kQC +S$q+<TR6'
QJZ_=Sn@mQG#t m}B9uKS=tS#uQ^_cs[Ԩr94swն@o'XMx +u7_5zD.G8Me j>sQ8ǍP[~9LbLDB@ۦ/:;A} ",!+u
1vB*_:i:#~\;DCT9VzD7R5OÃR*/!ߋN8ρ l R, ̓ aE( @p`!n3P[a^>l^S
oCЄ @{4 ^cC$v*I\"It=$F$Rr'^<" m'^ aԋ*}]`CҢ-R).|#8 ٤~ wh>q !3CB~<"@:4l 'ɣ5އorM*m|b+ Q&>z*Zb!]"RA6L&+OI6~Ɨ'kĐq *anS^|iɞprwL|rQd2$+ʬԣT~z0
h.CC}fM !UqD1ARz"UF? ,٭?Mt.^gB7Qd TD*Uxi %FKSVT!3$(w|PHN ʩ;=(my iGN* zɇ}jA4f(ZhQxhkW_9t=Jռ{Q L
F/Q]c ّ9,f3īr(OQ;ڧPծ:' *VM[NVo3s qfZz>\責E%)ɸ:ݶVݞTgr2tꕷ JH ]n)%ҷu+Dԧ~
yK3 0I -R+ՃN
Xsq4+YG))BX{Q VZ;^J&*V*o7^ X@~L MB9Gu V!#}f;x-+ /o5xf^a|24 فaWF[Û4?3*&BG6WdVXFȽYeO~ZLMTl]7Sym Srƕ+5nAmޅ.*P
>(VOQ}S!s:&[>4W8I9}mύthV'<>QU!Ma>`'zOojz,+簞Ǖ{<ĉ7÷ {)-I'Rz4bGjW _/{Io flOVd<fka Ҟf+/e ,tqzL{Ց?G9ATn<K&Cdlݍ ;n¾.~e{V}_;̛=v%=yR,+u=k+rw3ڒ#xā٬{{b +Wh|oLC;?ח<HƖEOwڲ V|]Cw'DU YӘdGaUtVo,y cJ'~̧jz#qCf97tWie9w9.tG|t @Ky7~79=z`=ctT~/swp|"a'i3B8 .5,M6hhz#Y@'B6_y;XV .@y-]ry|}N;Phygv%HtQe7qo:8GWw|၆+x<F5`*aBl>aƂk/Ȉb.]>NoxHwjpD8&W$Htw5/9kU(GI#XvH xX ƊȌk28GטA_9Zĉwu3gCqx&;҈[CuXYvHhOWOc(5|b9Gx,Ζ%!F&dHrgCm{che
وF&q5p Cnń +VƎ2),3()6ucTwf=.9>PCi35Y_yKiR:Q>UObn]x9)hgsDFgTG pFyyaLB6DTniFSymH< :ak9WzNYsٙAhT$sxwyF:Yr92$&NSSb֛iB t Alكy\̖2U3{.]oo8XI0SvXP!瑼iw_q6O]QIYVyg}TI `Y (fBc4zؠߙrөm6Y~vmbi{%ɩ(s(Elӡ&h7:oCV>*S@W2LF}beKʤrK(<*jUHL\LIezȅy甦71ѦhET8bgvWxj4zZGai~9|3eW'c4HZb^aJ{ZeFufF':0LBNMɅ` :ngxMVU
V|j,AYjӭIdJBYيRfIl=D\ &WzOGZ\ گhۤ{W?w8cc1{ Bc9S懱x8 kGG&z嚫,I੩94K6{JV 14<Z-9FK% ѝQ;I@4EDN^>N6DXZyi72 R
I9'u{Yʯzqۥ# ^]vKk䭒At︅긂KdÖ(Loy|HRK= )`:ExVȺ#>CO*rv˻Cj2:L+9Gqaez5̻7{Sg *5ag۽GHpuZrxJ9I[dvz'C9z˼{`K媰Jnu #z~XF2I Sk: eӖy;t虅&=3[[$:saΔ ;48CF 8x;W!AI=ZIe+HWcz~y+7.jgF] *+6 p8? ${Ȕ%L"ظ16Q;vk%wy8h,kL%iog4j38%uL jlp 6qȲ -D+vǣW<
N- 4j5~QL3M7 rJ|GWD9Ÿl`Z2FuڬW{լs1Z{+̓ VdYGǀ)tP&l uSHj7Dпe E (<R=M]{#<+h䈆'ɲкAw}Ԛv }qmLrTD?ͭ+E@
*|<Λeя|*ݷڱ-X5]-Wat\ALg--RC H;dt=mD(K7z4;ͯ旈 R:M;PFM
մKV mT7˵ՄZ=özڱJMΕ # <
]!Jvů^hM-&
ݪ{sJO 1q4[;@ע={LMNCwTqv;2:{SR& ";/"o
Qy
<n|3j ;8}=nN>%- ν1]se~i I<7m>~hs/1Z&MT!:=~.D3CcHKiI^v-F.8U>}'
J\0g<a)UXNhTgdt~9n _TݔeՀ^AdmYskɧ[菵h֗{sN=EԻL[|AX*Sn0G؊ڙ)` ]5N-g( ~{ʾn ;<maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Understanding Forwarders</maml:title><maml:introduction>
<maml:para>A forwarder is a Domain Name System (DNS) server on a network that forwards DNS queries for external DNS names to DNS servers outside that network. You can also forward queries according to specific domain names using conditional forwarders. </maml:para>
<maml:para>You designate a DNS server on a network as a forwarder by configuring the other DNS servers in the network to forward the queries that they cannot resolve locally to that DNS server. By using a forwarder, you can manage name resolution for names outside your network, such as names on the Internet, and improve the efficiency of name resolution for the computers in your network. For more information about forwarders and conditional forwarders, see <maml:navigationLink><maml:linkText>Using Forwarders</maml:linkText><maml:uri href="mshelp://windows/?id=e2dd91d6-441f-4175-9d1d-d152d148d73c"></maml:uri></maml:navigationLink>.</maml:para>
<maml:para>The following figure illustrates how external name queries are directed with forwarders.</maml:para>
<maml:para><maml:embedObject><maml:caption>External name queries and forwarders</maml:caption><maml:objectUri href="mshelp://windows/?id=d2d99fd8-5456-486d-95be-a01d6af7ae69" mimeType="image/gif"><maml:summary>Example of a common forwarder configuration</maml:summary></maml:objectUri></maml:embedObject></maml:para>
<maml:para>When you designate a DNS server as a forwarder, you make that forwarder responsible for handling external traffic, which limits DNS server exposure to the Internet. A forwarder builds up a large cache of external DNS information because all the external DNS queries in the network are resolved through it. In a small amount of time, a forwarder resolves a large number of external DNS queries using this cached data. This decreases the Internet traffic over the network and the response time for DNS clients. </maml:para>
<maml:para>A DNS server that is configured to use a forwarder behaves differently than a DNS server that is not configured to use a forwarder. A DNS server that is configured to use a forwarder behaves as follows:</maml:para>
<maml:list class="ordered">
<maml:listItem>
<maml:para>When the DNS server receives a query, it attempts to resolve this query by using the zones that it hosts and by using its cache.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>If the query cannot be resolved using local data, the DNS server forwards the query to the DNS server that is designated as a forwarder.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>If forwarders are unavailable, the DNS server attempts to use its root hints to resolve the query..</maml:para>
</maml:listItem>
</maml:list>
<maml:para>When a DNS server forwards a query to a forwarder, it sends a recursive query to the forwarder. This is different than the iterative query that a DNS server sends to another DNS server during standard name resolution (name resolution that does not involve a forwarder).</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Conditional forwarders</maml:title><maml:introduction>
<maml:para>A conditional forwarder is a DNS server on a network that forwards DNS queries according to the DNS domain name in the query. For example, you can configure a DNS server to forward all the queries that it receives for names ending with corp.contoso.com to the IP address of a specific DNS server or to the IP addresses of multiple DNS servers.</maml:para>
</maml:introduction></maml:section><maml:section>
<maml:title>Internet name resolution</maml:title><maml:introduction>
<maml:para>DNS servers can use conditional forwarders to resolve queries between the DNS domain names of companies that share information. For example, two companies, Wingtip Toys and Tailspin Toys, want to improve how the DNS clients of Wingtip Toys resolve the names of the DNS clients of Tailspin Toys. The administrators from Tailspin Toys inform the administrators of Wingtip Toys about the set of DNS servers in the Tailspin Toys network where Wingtip Toys can send queries for the domain dolls.tailspintoys.com. The DNS servers in the Wingtip Toys network are configured to forward all queries for names ending with dolls.tailspintoys.com to the designated DNS servers in the network for Tailspin Toys. Consequently, the DNS servers in the Wingtip Toys network do not have to query their internal root servers—or the Internet root servers—to resolve queries for names ending with dolls.tailspintoys.com.</maml:para>
</maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>DNS Overview</maml:title><maml:introduction>
<maml:para>Domain Name System (DNS) is a system for naming computers and network services that is organized into a hierarchy of domains. DNS naming is used in TCP/IP networks, such as the Internet, to locate computers and services with user-friendly names. When a user enters a DNS name in an application, DNS services can resolve the name to other information that is associated with the name, such as an IP address.</maml:para>
<maml:para>For example, most users prefer a friendly name, such as corp.contoso.com, to locate a computer, such as a mail server or Web server, on a network. A friendly name can be easier to learn and remember. However, computers communicate over a network by using numeric addresses. To make the use of network resources easier, name systems such as DNS provide a way to map the user-friendly name for a computer or service to its numeric address. </maml:para>
<maml:para>The DNS Server role in Windows Server 2008 combines support for standard DNS protocols with the benefits of integration with Active Directory Domain Services (AD DS) and other Windows networking and security features, including such advanced capabilities as secure dynamic update of DNS resource records.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Server features</maml:title><maml:introduction>
<maml:para>The DNS Server role provides the following:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>A Request for Comments (RFC)-compliant DNS server</maml:para>
<maml:para>DNS is an open protocol. It is standardized by a set of RFCs. Microsoft supports and complies with these standard specifications.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Interoperability with other DNS server implementations </maml:para>
<maml:para>Because the DNS Server service in Windows Server 2008 is RFC-compliant and it can use standard DNS data file and resource record formats, it can successfully work with most other DNS server implementations, such as those that use the Berkeley Internet Name Domain (BIND) software.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Support for Active Directory Domain Services (AD DS)</maml:para>
<maml:para>DNS is required for support of AD DS to give network computers the ability to locate domain controllers and to support AD DS replication. If you install the AD DS server role on a server, you should install and configure the DNS Server service on the new domain controller at the same time. This ensures the best possible integration and support of AD DS and enhanced DNS server features. You can, however, use another type of DNS server to support AD DS deployment. When you use other types of DNS servers, consider additional issues that are related to DNS interoperability. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Enhancements to DNS zone storage in AD DS </maml:para>
<maml:para>DNS zones can be stored in the domain or application directory partitions of AD DS. An application directory partition is a data structure in AD DS that distinguishes data for different replication purposes. You can specify in which AD DS application directory partition a zone is stored and, consequently, the set of domain controllers between which that zone's data will be replicated. The DNS Server service maintains two application directory partitions, DomainDnsZones and ForestDnsZones, in every domain and forest to store zones for standard replication.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Conditional forwarders </maml:para>
<maml:para>The DNS Server service extends the functionality of standard forwarders by providing conditional forwarders. A conditional forwarder is a DNS server on a network that forwards DNS queries according to the DNS domain name in the query. For example, you can configure a DNS server to forward all the queries it receives for names ending with corp.contoso.com to the IP address of a specific DNS server or to the IP addresses of multiple DNS servers.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Stub zones </maml:para>
<maml:para>DNS supports a type of zone called a stub zone. A stub zone is a copy of a zone that contains only those resource records that are necessary to identify the authoritative DNS servers for that zone. A stub zone keeps a DNS server that hosts a parent zone updated with the authoritative DNS servers for its child zone. This helps maintain DNS name resolution efficiency.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Enhanced DNS security features </maml:para>
<maml:para>DNS provides enhanced security administration for the DNS Server service, the DNS Client service, and DNS data. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Integration with other Microsoft networking services </maml:para>
<maml:para>The DNS Server service offers integration with other services and contains features beyond the features that are specified in the RFCs. These features include integration with AD DS, Windows Internet Name Service (WINS), and Dynamic Host Configuration Protocol (DHCP) services.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Improved ease of administration </maml:para>
<maml:para>DNS Manager, the DNS snap-in in Microsoft Management Console (MMC) offers an improved graphical user interface (GUI) for managing the DNS Server service. Also, there are several configuration wizards for performing common server administration tasks. In addition to the DNS snap-in, other tools are provided to help you better manage and support DNS servers and clients on your network.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>RFC-compliant dynamic update protocol support </maml:para>
<maml:para>The DNS Server service enables clients to dynamically update resource records, based on the dynamic update protocol (RFC 2136). This improves DNS administration by reducing the time needed to manage these records manually. Computers running the DNS Client service can register their DNS names and IP addresses dynamically.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Support for incremental zone transfer between servers </maml:para>
<maml:para>DNS servers that store DNS data in files use zone transfers to replicate information about a portion of the DNS namespace. When it transfers zones that are not integrated with AD DS, the DNS Server service uses incremental zone transfer to replicate only the changed portions of a zone, which conserves network bandwidth.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Single-label host-name resolution without WINS</maml:para>
<maml:para>The DNS Server service supports a zone called GlobalNames to hold single-label names, that is, names that do not contain the name of a parent domain (such as .com). In networks in which the use of WINS is not an option, the GlobalNames zone provides single-label name resolution for a limited set of centrally administered servers with fixed IP addresses.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Planning DNS Zones</maml:title><maml:introduction>
<maml:para>When you first partition your namespace into zones, review the traffic patterns in your current or proposed network. Although Domain Name System (DNS) is designed to help reduce broadcast traffic between local subnets, it does create some traffic between servers and clients that should be reviewed. This is particularly true in cases where DNS is used on routed networks. To review DNS traffic, you can use DNS server statistics or the DNS performance counters that are provided with System Monitor. </maml:para>
<maml:para>In addition to traffic routing, consider the impact of the following common types of DNS-related communication, especially when you are operating across slow-speed links on a wide area network (WAN):</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Server-to-server traffic that is caused both by zone transfers with other DNS servers and by DNS interoperability with other servers (for example, when Windows Internet Name Service (WINS) lookup is enabled)</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Client-to-server traffic that is caused by both query loads and dynamic updates that are sent by DNS client computers or DHCP servers providing dynamic updating for earlier-version DNS clients that do not support dynamic updates</maml:para>
</maml:listItem>
</maml:list>
<maml:para>For small, flat namespaces, you might use full replication of all DNS zones to all DNS servers in your network. For large, vertical namespaces, this is neither possible nor recommended. In larger networks, it is often necessary to study, test, analyze, and revise your zone plans based on observed or estimated traffic patterns. After careful analysis, you can partition and delegate your DNS zones based on the requirements for providing efficient and fault-tolerant name service to each location or site.</maml:para>
<maml:para>The DNS Server service supports incremental zone transfers between servers that replicate a standard zone. This feature can reduce DNS replication traffic considerations, and you should review it in zone planning. </maml:para>
<maml:para>You might also want to explore the use of caching-only servers, which do not host DNS zones. Caching-only servers are a good option at small remote sites that have a stable and minimal use for DNS name service but are located across a WAN where the transfer of a large zone over a slower link can consume large amounts of resources. </maml:para>
</maml:introduction><maml:content><maml:sections></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Allow Only Secure Dynamic Updates</maml:title><maml:introduction>
<maml:para>Domain Name System (DNS) client computers can use dynamic update to register and dynamically update their resource records with a DNS server whenever changes occur. This reduces the need for manual administration of zone records, especially for clients that frequently move or change locations and use Dynamic Host Configuration Protocol (DHCP) to obtain an IP address.</maml:para>
<maml:para>Dynamic updates can be secure or nonsecure. DNS update security is available only for zones that are integrated into Active Directory Domain Services (AD DS). After you directory-integrate a zone, access control list (ACL) editing features are available in DNS Manager so that you can add or remove users or groups from the ACL for a specified zone or resource record. </maml:para>
<maml:para>Membership in the <maml:phrase>Administrators</maml:phrase> group, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Allowing only secure dynamic updates</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using the Windows interface</maml:linkText><maml:uri href="mshelp://windows/?id=55e3745f-4c49-44a3-ad60-30e14638ef81#BKMK_winui"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using a command line</maml:linkText><maml:uri href="mshelp://windows/?id=55e3745f-4c49-44a3-ad60-30e14638ef81#BKMK_cmd"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction>
<maml:sections>
<maml:section address="BKMK_winui"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To allow only secure dynamic updates using the Windows interface</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open DNS Manager.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the console tree, right-click the applicable zone, and then click <maml:ui>Properties</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>On the <maml:ui>General</maml:ui> tab, verify that the zone type is <maml:ui>Active Directory-integrated</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In <maml:ui>Dynamic Updates</maml:ui>, click <maml:ui>secure only</maml:ui>. </maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open DNS Manager, click <maml:ui>Start</maml:ui>, point to <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>DNS</maml:ui>. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Secure dynamic update is supported only for AD DS-integrated zones. If the zone type is configured differently, you must change the zone type and directory-integrate the zone before securing it for DNS dynamic updates.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Dynamic update is a Request for Comments (RFC)–compliant extension to the DNS standard. The DNS update process is defined in RFC 2136, "Dynamic Updates in the Domain Name System (DNS UPDATE)."</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>By default, the DNS server allows a zone transfer only to authoritative DNS servers that are listed in the name server (NS) resource records for the zone.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
<maml:section address="BKMK_cmd"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To allow only secure dynamic updates using a command line</maml:title><maml:introduction><maml:sections><maml:section><maml:title></maml:title><maml:introduction></maml:introduction></maml:section></maml:sections></maml:introduction><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open a command prompt.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Type the following command, and then press ENTER: </maml:para>
<dev:code>dnscmd <ServerName> /Config {<ZoneName>|..AllZones} /AllowUpdate 2
</dev:code>
</maml:section></maml:sections></maml:step></maml:procedure>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Parameter</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>dnscmd </maml:para>
</maml:entry>
<maml:entry>
<maml:para>The command-line tool for managing DNS servers.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><ServerName> </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Specifies the DNS host name of the DNS server. You can also type the IP address of the DNS server. To specify the DNS server on the local computer, you can also type a period (.)</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>/Config </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Configures the specified zone.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><ZoneName>|..AllZones</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Specifies the fully qualified domain name (FQDN) of the zone. To configure all zones that are hosted on the specified DNS server to allow dynamic updates, type <maml:phrase>..AllZones</maml:phrase>.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>/AllowUpdate </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Enables the zone to perform dynamic updates.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>2 </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Configures the server to allow secure update. If you exclude the 2, the zone will be set to perform standard dynamic updates only.</maml:para>
</maml:entry></maml:row>
</maml:table>
<maml:para>To view the complete syntax for this command, at a command prompt, type the following command, and then press ENTER:</maml:para>
<dev:code>dnscmd /Config /help </dev:code>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para> To open an elevated Command Prompt window, click <maml:ui>Start</maml:ui>, point to <maml:ui>All Programs</maml:ui>, click <maml:ui>Accessories</maml:ui>, right-click <maml:ui>Command Prompt</maml:ui>, and then click <maml:ui>Run as administrator</maml:ui>. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Dynamic update is an RFC-compliant extension to the DNS standard. The DNS update process is defined in RFC 2136, "Dynamic Updates in the Domain Name System (DNS UPDATE)."</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>By default, the DNS server allows a zone transfer only to authoritative DNS servers that are listed in the name server (NS) resource records for the zone.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Understanding Dynamic Update</maml:linkText><maml:uri href="mshelp://windows/?id=76a72c3d-6c2f-489f-814b-33a94f207896"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Allow Dynamic Updates</maml:linkText><maml:uri href="mshelp://windows/?id=2c8e760a-3c20-40f4-a692-15171ee66374"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title><DNS Server Name> Properties Sheet</maml:title><maml:introduction>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Item</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Details</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Interfaces</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Use this tab to select the IP addresses that the Domain Name System (DNS) server will use to listen for DNS queries. </maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Forwarders</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Use this tab to specify the DNS servers to which this server will refer queries when it cannot resolve them itself. Using forwarders prevents this server from using recursion to resolve DNS queries. </maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Advanced</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Use this tab to perform the following actions:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>View the server version number.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Set advanced server options.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Select the type of name checking to be performed for all zones.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Select where the server obtains zone data when it starts.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Enable and configure default scavenging settings.</maml:para>
</maml:listItem>
</maml:list>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Root Hints</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Use this tab to specify the servers to be used for root hints when forwarders are not configured or do not respond.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Debug Logging</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Use this tab to configure packet-level logging for debugging purposes.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Event Logging</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Use this tab to specify the types of events that will be recorded in the DNS event log.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Monitoring</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Use this tab to perform tests to verify the correct server configuration.</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction><maml:content><maml:sections></maml:sections></maml:content><maml:relatedLinks type="seeAlso"><maml:title>See Also</maml:title><maml:navigationLink><maml:linkText>User Interface: DNS Server</maml:linkText><maml:uri href="mshelp://windows/?id=c2c0a226-364e-4c4d-88ee-5c3ef2b3023f"></maml:uri></maml:navigationLink></maml:relatedLinks></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Add a Reverse Lookup Zone</maml:title><maml:introduction>
<maml:para>Reverse lookup zones support the resolution of IP addresses to host names. Although they are optional in most networks, reverse lookup zones might be necessary for certain secure applications that require the validation of IP addresses. For more information, see <maml:navigationLink><maml:linkText>Understanding Zone Types</maml:linkText><maml:uri href="mshelp://windows/?id=94d8e229-ef7b-4b4f-884f-5fec92bbc911"></maml:uri></maml:navigationLink>.</maml:para>
<maml:para>Membership in the <maml:phrase>Administrators</maml:phrase> group, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Adding a reverse lookup zone</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using the Windows interface</maml:linkText><maml:uri href="mshelp://windows/?id=5b03fa70-89ad-4a21-a179-2e96a43dbe54#BKMK_winui"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using a command line</maml:linkText><maml:uri href="mshelp://windows/?id=5b03fa70-89ad-4a21-a179-2e96a43dbe54#BKMK_cmd"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction>
<maml:sections>
<maml:section address="BKMK_winui"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To add a reverse lookup zone using the Windows interface</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open DNS Manager.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the console tree, right-click a Domain Name System (DNS) server, and then click <maml:ui>New Zone</maml:ui> to open the New Zone Wizard. </maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Follow the instructions to create a new reverse lookup zone.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open DNS Manager, click <maml:ui>Start</maml:ui>, point to <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>DNS</maml:ui>. </maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
<maml:section address="BKMK_cmd"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To add a reverse lookup zone using a command line</maml:title><maml:introduction><maml:sections><maml:section><maml:title></maml:title><maml:introduction>
<dev:code>dnscmd <ServerName> /ZoneAdd <ZoneName> {/Primary|/DsPrimary} [/file <FileName>] [/load] [/a <AdminEmail>] [/DP <FQDN>]
</dev:code>
</maml:introduction></maml:section></maml:sections></maml:introduction><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open a command prompt.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Type the following command, and then press ENTER: </maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Parameter</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>dnscmd </maml:para>
</maml:entry>
<maml:entry>
<maml:para>The command-line tool for managing DNS servers.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><ServerName> </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Specifies the DNS host name of the DNS server. You can also type the IP address of the DNS server. To specify the DNS server on the local computer, you can also type a period (.)</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>/ZoneAdd </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Adds a zone.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><ZoneName> </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Specifies the fully qualified domain name (FQDN) of the in-addr.arpa domain for the zone, for example, 20.1.168.192.in-addr.arpa.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>/Primary|/DsPrimary</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Specifies the type of zone. To specify an Active Directory–integrated zone, type <maml:computerOutputInline>/DsPrimary</maml:computerOutputInline>.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>/file </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required for <maml:computerOutputInline>/Primary</maml:computerOutputInline>. Specifies a file for the new zone. This parameter is not valid for the <maml:computerOutputInline>/DsPrimary</maml:computerOutputInline> zone type.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><FileName> </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required for <maml:phrase>/Primary</maml:phrase>. Specifies the name of the zone file. This parameter is not valid for the <maml:computerOutputInline>/DsPrimary</maml:computerOutputInline> zone type.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>/load </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Loads an existing file for the zone. If this parameter is not specified, default zone records are created automatically. This parameter does not apply to <maml:computerOutputInline>/DsPrimary</maml:computerOutputInline>.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>/a </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Adds an administrator e-mail address for the zone.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><AdminEmail> </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies the administrator e-mail name for the zone.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>/DP </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Adds the zone to an application directory partition. You may also use one of the following:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:computerOutputInline>/DP /domain</maml:computerOutputInline>—For a domain directory partition (replicates to all DNS servers in the domain).</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:computerOutputInline>/DP /forest</maml:computerOutputInline>—For a forest directory partition (replicates to all DNS server in the forest).</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:computerOutputInline>/DP /legacy</maml:computerOutputInline>—For a legacy directory partition (replicates to all domain controllers in the domain). This setting supports domains that have legacy Windows 2000 Server domain controllers.</maml:para>
</maml:listItem>
</maml:list>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><FQDN> </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies the FQDN of the directory partition.</maml:para>
</maml:entry></maml:row>
</maml:table>
<maml:para>To view the complete syntax for this command, at a command prompt, type the following command, and then press ENTER:</maml:para>
<dev:code>dnscmd /ZoneAdd /help</dev:code>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open an elevated Command Prompt window, click <maml:ui>Start</maml:ui>, point to <maml:ui>All Programs</maml:ui>, click <maml:ui>Accessories</maml:ui>, right-click <maml:ui>Command Prompt</maml:ui>, and then click <maml:ui>Run as administrator</maml:ui>.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Add a Stub Zone</maml:title><maml:introduction>
<maml:para>A stub zone is a copy of a zone that contains only those resource records that are necessary to identify the authoritative Domain Name System (DNS) servers for that zone. Typically, you use a stub zone to resolve names between separate DNS namespaces. For more information, see <maml:navigationLink><maml:linkText>Understanding Zone Types</maml:linkText><maml:uri href="mshelp://windows/?id=94d8e229-ef7b-4b4f-884f-5fec92bbc911"></maml:uri></maml:navigationLink>.</maml:para>
<maml:para>Membership in the <maml:phrase>Administrators</maml:phrase> group, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Adding a stub zone</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using the Windows interface</maml:linkText><maml:uri href="mshelp://windows/?id=5e93f665-7d6f-4ea2-beca-14d91ead7bb3#BKMK_winui"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using a command line</maml:linkText><maml:uri href="mshelp://windows/?id=5e93f665-7d6f-4ea2-beca-14d91ead7bb3#BKMK_cmd"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction>
<maml:sections>
<maml:section address="BKMK_winui"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To add a stub zone using the Windows interface</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open DNS Manager. </maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the console tree, right-click a DNS server, and then click <maml:ui>New Zone</maml:ui> to open the New Zone Wizard. </maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Follow the instructions to create a new stub zone.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open DNS Manager, click <maml:ui>Start</maml:ui>, point to <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>DNS</maml:ui>. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>The stub zone cannot be hosted on a DNS server that is authoritative for the same zone.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>If you integrate the stub zone into Active Directory Domain Services(AD DS), you have the option to specify that the DNS server hosting the stub zone uses a local list of master servers when it updates the stub zone's resource records, rather than having the DNS server use the master servers list that is stored in AD DS. If you want to use a local master servers list, you must have the IP addresses of the local master servers. </maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
<maml:section address="BKMK_cmd"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To add a stub zone using a command line</maml:title><maml:introduction><maml:sections><maml:section><maml:title></maml:title><maml:introduction>
<maml:para>To view the complete syntax for this command, at a command prompt, type the following command, and then press ENTER:</maml:para>
<dev:code>dnscmd /ZoneAdd /help </dev:code>
</maml:introduction></maml:section></maml:sections></maml:introduction><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open a command prompt.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Type the following command, and then press ENTER: </maml:para>
<dev:code>dnscmd <ServerName> /ZoneAdd <ZoneName> {/Stub|/DsStub} <MasterIPaddress...> [/file <FileName>] [/load] [/DP <FQDN>]</dev:code>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Parameter</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>dsncmd </maml:para>
</maml:entry>
<maml:entry>
<maml:para>The command-line tool for managing DNS servers.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><ServerName> </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Specifies the DNS host name of the DNS server. You can also type the IP address of the DNS server. To specify the DNS server on the local computer, you can also type a period (.)</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>/ZoneAdd </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Adds a zone.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><ZoneName> </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Specifies the fully qualified domain name (FQDN) of the zone.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>/Stub|/DsStub</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Specifies the type of zone. To specify an Active Directory–integrated stub zone, type <maml:computerOutputInline>/DsStub</maml:computerOutputInline>.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><MasterIPaddress...> </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Specifies one or more IP addresses for the master servers of the stub zone, from which it copies zone data.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>/file </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Adds a file for the new zone.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><FileName> </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies the name of the zone file.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>/load </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Loads an existing file for the zone. If this parameter is not specified, default zone records are created automatically.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>/DP </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Adds the zone to an application directory partition. You may also use one of the following:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:computerOutputInline>/DP /domain</maml:computerOutputInline>—For a domain directory partition (replicates to all DNS servers in the domain).</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:computerOutputInline>/DP /forest</maml:computerOutputInline>—For a forest directory partition (replicates to all DNS server in the forest).</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:computerOutputInline>/DP /legacy</maml:computerOutputInline>—For a legacy directory partition (replicates to all domain controllers in the domain). This setting supports domains that have legacy domain controllers running Windows 2000 Server.</maml:para>
</maml:listItem>
</maml:list>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><FQDN> </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies the FQDN of the directory partition.</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open an elevated Command Prompt window, click <maml:ui>Start</maml:ui>, point to <maml:ui>All Programs</maml:ui>, click <maml:ui>Accessories</maml:ui>, right-click <maml:ui>Command Prompt</maml:ui>, and then click <maml:ui>Run as administrator</maml:ui>. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>The stub zone cannot be hosted on a DNS server that is authoritative for the same zone.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>If you integrate the stub zone into AD DS, you have the option to specify that the DNS server that hosts the stub zone uses a local list of master servers when it updates the stub zone's resource records, rather than having the DNS server use the master servers list that is stored in AD DS. If you want to use a local master servers list, you must have the IP addresses of the local master servers. </maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Add a Resource Record to a Zone</maml:title><maml:introduction>
<maml:para>After you create a zone, typically you add additional resource records to it. The most common resource records to be added are the following:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Host (A) resource record for mapping a Domain Name System (DNS) domain name to an IP address that a computer uses.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Alias (CNAME) resource record for mapping an alias DNS domain name to another primary or canonical name.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Mail exchanger (MX) resource record for mapping a DNS domain name to the name of a computer that exchanges or forwards mail.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Pointer (PTR) resource record for mapping a reverse DNS domain name that is based on the IP address of a computer that points to the forward DNS domain name of that computer.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Service location (SRV) resource record for mapping a DNS domain name to a specified list of DNS host computers that offer a specific type of service, such as Active Directory domain controllers.</maml:para>
</maml:listItem>
</maml:list>
<maml:para>You can also add other resource records as needed. For more information, see <maml:navigationLink><maml:linkText>Checklist: Use Resource Records</maml:linkText><maml:uri href="mshelp://windows/?id=d30554bd-b6fc-45d2-823c-642a0880bf0f"></maml:uri></maml:navigationLink>.</maml:para>
<maml:para>Membership in the <maml:phrase>Administrators</maml:phrase> group, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Adding a resource record to a zone</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using the Windows interface</maml:linkText><maml:uri href="mshelp://windows/?id=60d3d60f-3e84-4c6d-b377-0713e48bea2b#BKMK_winui"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using a command line</maml:linkText><maml:uri href="mshelp://windows/?id=60d3d60f-3e84-4c6d-b377-0713e48bea2b#BKMK_cmd"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction>
<maml:sections>
<maml:section address="BKMK_winui"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To add a resource record to a zone using the Windows interface</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open DNS Manager.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the console tree, right-click the applicable zone, and then click <maml:ui>Other New Records</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the <maml:ui>Select a resource record type</maml:ui> list box, select the type of resource record that you want to add.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Click <maml:ui>Create Record</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In <maml:ui>New Resource Record</maml:ui>, enter the information to complete the resource record. </maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>After you specify all the necessary information for the resource record, click <maml:ui>OK</maml:ui> to add the new record to the zone.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open DNS Manager, click <maml:ui>Start</maml:ui>, point to <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>DNS</maml:ui>. </maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
<maml:section address="BKMK_cmd"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To add a resource record to a zone using a command line</maml:title><maml:introduction><maml:sections><maml:section><maml:title></maml:title><maml:introduction></maml:introduction></maml:section></maml:sections></maml:introduction><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open a command prompt.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Type the following command, and then press ENTER: </maml:para>
<dev:code>dnscmd <ServerName> /RecordAdd <ZoneName> <NodeName> [/Aging] [/OpenAcl] [Ttl] <RRType> <RRData>
</dev:code>
</maml:section></maml:sections></maml:step></maml:procedure>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Parameter</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:computerOutputInline>dnscmd</maml:computerOutputInline></maml:para>
</maml:entry>
<maml:entry>
<maml:para>The command-line tool for managing DNS servers.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:replaceable><ServerName></maml:replaceable></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Specifies the DNS host name of the DNS server. You can also type the IP address of the DNS server. To specify the DNS server on the local computer, you can also type a period (.).</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:computerOutputInline>/RecordAdd</maml:computerOutputInline></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Adds a new resource record.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:replaceable><ZoneName></maml:replaceable></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Specifies the fully qualified domain name (FQDN) of the zone.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:replaceable><NodeName></maml:replaceable></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Specifies the FQDN of the node in the DNS namespace. You can also type the node name relative to the <maml:replaceable>ZoneName</maml:replaceable> or @, which specifies the zone's root node.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:computerOutputInline>/Aging </maml:computerOutputInline></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies that this resource record is able to be aged and scavenged. If this command is used, this resource record is able to be aged and scavenged. If this command is not used, the resource record remains in the DNS database unless it is manually updated or removed.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:computerOutputInline>/OpenAcl </maml:computerOutputInline></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies that new records are open to modification by any user. Without this parameter, only administrators may modify the new record.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:computerOutputInline>Ttl</maml:computerOutputInline></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies the Time To Live (TTL) setting for the resource record.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:replaceable><RRType></maml:replaceable> <<maml:replaceable>RRData></maml:replaceable> </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Specifies the type of resource record to add, followed by the data to be contained in the resource record. </maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Resource record type</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Resource record data</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>A </maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:replaceable>IPv4Address </maml:replaceable></maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>AAAA </maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:replaceable>Ipv6Address </maml:replaceable></maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>NS,CNAME,MB,MD,PTR,MF,MG,MR </maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:replaceable>HostName|DomainName </maml:replaceable></maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>MX,RT,AFSDB </maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:replaceable>Preference ServerName </maml:replaceable></maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>SRV </maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:replaceable>Priority Weight Port HostName </maml:replaceable></maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>SOA </maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:replaceable>PrimSvr Admin Serial#\ Refresh Retry Expire MinTTL </maml:replaceable></maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>TXT,X25,HINFO,ISDN </maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:replaceable>String [String] </maml:replaceable></maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>MINFO,RP </maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:replaceable>MailboxName ErrMailboxName </maml:replaceable></maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>WKS </maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:replaceable>Protocol IPAddress Service... </maml:replaceable></maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>WINS</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:replaceable>MapFlag LookupTimeout CacheTimeout IPAddress... </maml:replaceable></maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>WINSR</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:replaceable>MapFlag LookupTimeout CacheTimeout RstDomainName </maml:replaceable></maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:replaceable><IPAddress></maml:replaceable></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies a standard IP address, for example, 255.255.255.255.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:replaceable><ipv6Address></maml:replaceable></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies a standard IPv6 address, for example, 1:2:3:4:5:6:7:8.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:replaceable><Protocol></maml:replaceable></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies the transmission protocol: UDP or TCP.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:replaceable><Service></maml:replaceable></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies a standard service, for example, domain, smtp.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:replaceable><HostName|<DomainName> </maml:replaceable></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies the FQDN of a resource record in the DNS namespace.</maml:para>
</maml:entry></maml:row>
</maml:table>
<maml:para>To view the complete syntax for this command, at a command prompt, type the following command, and then press ENTER:</maml:para>
<dev:code>dnscmd /RecordAdd /help </dev:code>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open an elevated Command Prompt window, click <maml:ui>Start</maml:ui>, point to <maml:ui>All Programs</maml:ui>, click <maml:ui>Accessories</maml:ui>, right-click <maml:ui>Command Prompt</maml:ui>, and then click <maml:ui>Run as administrator</maml:ui>. </maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Mail Exchanger (MX) Resource Record Dialog Box</maml:title><maml:introduction>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Item</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Details</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Host or child domain</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>The single-part name for a mail exchanger in this zone. If you need to add a name here that contains a period (.) to indicate the name of an additional domain level, first add the additional domain separately in DNS Manager and then add a new mail exchanger (MX) resource record there as a single-part name.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Fully qualified domain name (FQDN)</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>The domain name to which this resource record applies. The fully qualified domain name (FQDN) uniquely identifies the DNS hierarchical tree by specifying a list of names that are separated by dots in the path from the referenced domain or host to the root.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Fully qualified domain name (FQDN) of mail server</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>An FQDN for a host that is willing to act as a mail exchanger for the owner that is specified in <maml:ui>Host or child domain</maml:ui>. This can be any name that DNS recognizes as a full and valid name for a host computer that runs a mail server. The name that you type here must resolve to a corresponding host (A) resource record in this zone. If you are unsure of which FQDN to use, click <maml:ui>Browse</maml:ui> to search the DNS namespace for this name.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Mail server priority</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>A number between 0 and 65535 that indicates the mail exchange server’s priority with respect to the other mail exchange servers. Lower numbers are given preference to servers that are referenced in mail exchanger (MX) resource records with higher priority numbers. The highest priority or preference for a mail exchange server is granted when a value of zero (0) is used.</maml:para>
<maml:para>Where more than one mail exchanger (MX) resource record is present, the mailer attempts delivery to the mail exchange server with the lowest preference number first. If delivery fails, the mail exchange server with the next highest preference number is tried.</maml:para>
<maml:para>If two or more mail exchange servers share the same preference number, the mailer tries the mail exchange servers with the same number at random.</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction><maml:content><maml:sections></maml:sections></maml:content><maml:relatedLinks type="seeAlso"><maml:title>See Also</maml:title><maml:navigationLink><maml:linkText>User Interface: DNS Server</maml:linkText><maml:uri href="mshelp://windows/?id=c2c0a226-364e-4c4d-88ee-5c3ef2b3023f"></maml:uri></maml:navigationLink></maml:relatedLinks></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Notify Dialog Box</maml:title><maml:introduction>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Item</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Details</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Automatically notify</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>When this option is selected, it specifies that the indicated secondary servers are to be notified of zone updates.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Servers listed on the Name Servers tab</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>When this option is selected, it specifies that all secondary servers are to be notified of zone updates.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>The following servers</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>When this option is selected, it lists the secondary servers that are notified of zone updates. To add a server to the list, click the list, type the IP address or Domain Name System (DNS) name of the server, and then click the list again to resolve and verify the server.</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction><maml:content><maml:sections></maml:sections></maml:content><maml:relatedLinks type="seeAlso"><maml:title>See Also</maml:title><maml:navigationLink><maml:linkText>User Interface: DNS Server</maml:linkText><maml:uri href="mshelp://windows/?id=c2c0a226-364e-4c4d-88ee-5c3ef2b3023f"></maml:uri></maml:navigationLink></maml:relatedLinks></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Modify Security for a Resource Record</maml:title><maml:introduction>
<maml:para>You can use this procedure to control who can update or remove a resource record from a zone. For more information, see<maml:navigationLink><maml:linkText>Securing DNS Resource Records</maml:linkText><maml:uri href="mshelp://windows/?id=c6a3e04d-6306-4c63-82d7-49d583de1640"></maml:uri></maml:navigationLink>.</maml:para>
<maml:para>Membership in the <maml:phrase>DnsAdmins</maml:phrase> or the <maml:phrase>Domain Admins</maml:phrase> group in Active Directory Domain Services (AD DS), or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To modify security for a resource record</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open DNS Manager.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the console tree, click the applicable zone.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the details pane, click the record that you want to view.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>On the <maml:ui>Action</maml:ui> menu, click <maml:ui>Properties</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>On the <maml:ui>Security</maml:ui> tab, modify the list of member users or groups that are allowed to securely update the applicable record and reset their permissions as needed.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open DNS Manager, click <maml:ui>Start</maml:ui>, point to <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>DNS</maml:ui>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Secure dynamic updates are only supported or configurable for resource records in zones that are stored in Active Directory Domain Services (AD DS).</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Security settings that are applied to resource records affect only dynamic updates. These security settings do not affect who may administer the zone where these resource records are located. For information about the security settings that affect who may administer a zone, see "Additional references."</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Resource records with the same name share the same resource record security settings. The names of resource records are listed in the <maml:ui>Name</maml:ui> column of DNS Manager.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Modify Security for a Resource Record</maml:linkText><maml:uri href="mshelp://windows/?id=655b928d-8a7c-4b29-9ae6-b591be845ea7"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Modify Security for a Directory-Integrated Zone</maml:linkText><maml:uri href="mshelp://windows/?id=0e462ebd-84fd-432b-a5cd-8c6f3cfa3225"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Security Information for DNS</maml:linkText><maml:uri href="mshelp://windows/?id=eebcdbcb-eab3-47a8-8355-3e1189b38c7f"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Create a DNS Application Directory Partition</maml:title><maml:introduction>
<maml:para>You can store Domain Name System (DNS) zones in the domain or application directory partitions of Active Directory Domain Services (AD DS). A partition is a data structure in AD DS that distinguishes data for different replication purposes. When you create an application directory partition for DNS, you can control the scope of replication for the zone that is stored in that partition. For more information, see <maml:navigationLink><maml:linkText>Understanding Active Directory Domain Services Integration</maml:linkText><maml:uri href="mshelp://windows/?id=427144ca-37ce-4db7-a611-605338ec01ca"></maml:uri></maml:navigationLink>.</maml:para>
<maml:para>Membership in the <maml:phrase>Enterprise Admins</maml:phrase> group is required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To create a DNS application directory partition</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open a command prompt.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Type the following command, and then press ENTER: </maml:para>
<dev:code>dnscmd <ServerName> /CreateDirectoryPartition <FQDN> </dev:code>
</maml:section></maml:sections></maml:step></maml:procedure>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Parameter</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>dnscmd </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies the name of the command-line tool for managing DNS servers.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><ServerName> </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Specifies the DNS host name of the DNS server. You can also type the IP address of the DNS server. To specify the DNS server on the local computer, you can also type a period (.).</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>/CreateDirectoryPartition </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Creates a DNS application directory partition.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><FQDN> </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Specifies the name of the new DNS application directory partition. You must use a DNS fully qualified domain name (FQDN).</maml:para>
</maml:entry></maml:row>
</maml:table>
<maml:para>To view the complete syntax for this command, at a command prompt, type the following command, and then press ENTER:</maml:para>
<dev:code>dnscmd /CreateDirectoryPartition /? </dev:code>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open an elevated Command Prompt window, click <maml:ui>Start</maml:ui>, point to <maml:ui>All Programs</maml:ui>, click <maml:ui>Accessories</maml:ui>, right-click <maml:ui>Command Prompt</maml:ui>, and then click <maml:ui>Run as administrator</maml:ui>. </maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Checklist: Store Data in an AD DS Application Partition</maml:linkText><maml:uri href="mshelp://windows/?id=2e2e0678-1775-4cdd-8779-32d5c281540f"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Understanding DNS Zone Replication in Active Directory Domain Services</maml:linkText><maml:uri href="mshelp://windows/?id=e93c32c9-0c5c-4822-9c84-d464658d6ed3"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Enlist a DNS Server in a DNS Application Directory Partition</maml:linkText><maml:uri href="mshelp://windows/?id=479b0f39-c62f-445c-9c66-363be93362c2"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>New ATM Address (ATMA) Resource Record Dialog Box</maml:title><maml:introduction>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Item</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Details</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Host (uses parent domain if left blank)</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>The single-part name for an asynchronous transfer mode (ATM) host in this zone. If you need to add a name here that contains a period (.) to indicate the name of an additional domain level, first add the additional domain separately in DNS Manager and then add a new ATM address (ATMA) record there as a single-part name.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Fully qualified domain name (FQDN)</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>The domain name to which this resource record applies. The FQDN uniquely identifies the DNS hierarchical tree by specifying a list of names that are separated by dots in the path from the referenced domain or host to the root.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Format</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:ui>E164</maml:ui> specifies that your ATM host uses the E.164 address format for ATM addresses.</maml:para>
<maml:para><maml:ui>NSAP</maml:ui> specifies that your ATM host uses addresses that conform to the Network Service Access Protocol (NSAP) address model for ATM addresses.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Value</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>The ATM address (ATMA) of the ATM host in your network.</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction><maml:content><maml:sections></maml:sections></maml:content><maml:relatedLinks type="seeAlso"><maml:title>See Also</maml:title><maml:navigationLink><maml:linkText>User Interface: DNS Server</maml:linkText><maml:uri href="mshelp://windows/?id=c2c0a226-364e-4c4d-88ee-5c3ef2b3023f"></maml:uri></maml:navigationLink></maml:relatedLinks></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Managing Resource Records</maml:title><maml:introduction>
<maml:para>Resource records contain the information that a zone maintains about the resources (such as hosts) that the zone contains. A typical resource record consists of the name (host) of the resource record owner, information about how long the resource record can remain in the cache, the resource record type (such as a host (A) resource record), and data that is specific to the record type (such as the host's address). You can add resource records directly, or they can be added automatically when Windows-based, Dynamic Host Configuration Protocol (DHCP)–enabled clients join a network—a process that is known as dynamic update. </maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Adding Resource Records</maml:linkText><maml:uri href="mshelp://windows/?id=f85711b2-d9ac-4e08-84d0-5082e1a7a5d6"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Understanding Dynamic Update</maml:linkText><maml:uri href="mshelp://windows/?id=76a72c3d-6c2f-489f-814b-33a94f207896"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Allow Dynamic Updates</maml:linkText><maml:uri href="mshelp://windows/?id=2c8e760a-3c20-40f4-a692-15171ee66374"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Allow Only Secure Dynamic Updates</maml:linkText><maml:uri href="mshelp://windows/?id=55e3745f-4c49-44a3-ad60-30e14638ef81"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Add a Resource Record to a Zone</maml:linkText><maml:uri href="mshelp://windows/?id=60d3d60f-3e84-4c6d-b377-0713e48bea2b"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Add an Alias (CNAME) Resource Record to a Zone</maml:linkText><maml:uri href="mshelp://windows/?id=e54b0af1-e833-4195-9f4f-c80fe34ea4e9"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Modify Security for a Resource Record</maml:linkText><maml:uri href="mshelp://windows/?id=655b928d-8a7c-4b29-9ae6-b591be845ea7"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Use Aging and Scavenging</maml:linkText><maml:uri href="mshelp://windows/?id=69d6b9c6-8ac4-449a-a3a7-7c6ad993b22b"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction><maml:content><maml:sections></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Use Aging and Scavenging</maml:title><maml:introduction>
<maml:para>Aging and scavenging is the process by which resource records are given a time stamp when they are created and then removed when their age exceeds a specified limit. This process is especially useful for preventing the accumulation of invalid records when resource records are automatically created, as with dynamic update. </maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Understanding Aging and Scavenging</maml:linkText><maml:uri href="mshelp://windows/?id=7d9f6ea1-3d84-4841-b30d-fcf73a92e35d"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Set Aging and Scavenging Properties for a Zone</maml:linkText><maml:uri href="mshelp://windows/?id=81005446-0f9b-41d7-b9cb-9f61177e256d"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Set Aging and Scavenging Properties for the DNS Server</maml:linkText><maml:uri href="mshelp://windows/?id=0e78d78d-3d2b-40c5-ba88-c8adcd8341e4"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Enable Automatic Scavenging of Stale Resource Records</maml:linkText><maml:uri href="mshelp://windows/?id=da92dc7d-85d5-476d-ae5d-1b215665313f"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Start Immediate Scavenging of Stale Resource Records</maml:linkText><maml:uri href="mshelp://windows/?id=33a1535e-7d8c-483b-8d00-ee91869c775b"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>View When a Zone Can Start Scavenging Stale Records</maml:linkText><maml:uri href="mshelp://windows/?id=e8a9ee31-1613-43e4-b796-b74d5040a910"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Reset Aging and Scavenging Properties for a Specified Resource Record</maml:linkText><maml:uri href="mshelp://windows/?id=72a8666b-0143-43d5-98a5-780e81d9131b"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction><maml:content><maml:sections></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Adding Zones</maml:title><maml:introduction>
<maml:para>In Domain Name System (DNS), a DNS namespace can be divided into zones. The zones store name information about one or more DNS domains. For each DNS domain name that is included in a zone, the zone becomes the authoritative source for information about that domain.</maml:para>
<maml:para>A zone starts as a storage database for a single DNS domain name. If other domains are added below the domain that is used to create the zone, these domains can either be part of the same zone or belong to another zone. </maml:para>
<maml:para>Forward lookup zones provide name-to-address resolution. Reverse lookup zones are optional, and they provide address-to-name resolution. </maml:para>
<maml:para>You can deploy a specially named forward lookup zone, called GlobalNames, to provide name resolution of single-label names, (that is, names that do not contain the name of the parent domain) when you cannot use Windows Internet Name Service (WINS) or suffix search lists.</maml:para>
<maml:para>The following topics briefly explain zones. These topics also explain how to create zones and remove them from the DNS namespace.</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Understanding Zones</maml:linkText><maml:uri href="mshelp://windows/?id=2ad68d86-7a68-4363-b1b0-18fa66970dba"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Understanding Zone Types</maml:linkText><maml:uri href="mshelp://windows/?id=94d8e229-ef7b-4b4f-884f-5fec92bbc911"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Understanding Reverse Lookup</maml:linkText><maml:uri href="mshelp://windows/?id=99060a7c-f0bd-41e7-8ec8-5eeae2fbf0ad"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Add a Forward Lookup Zone</maml:linkText><maml:uri href="mshelp://windows/?id=7294aebb-0452-4412-b5de-fc09e6b01ed6"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Add a Reverse Lookup Zone</maml:linkText><maml:uri href="mshelp://windows/?id=5b03fa70-89ad-4a21-a179-2e96a43dbe54"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Add a Stub Zone</maml:linkText><maml:uri href="mshelp://windows/?id=5e93f665-7d6f-4ea2-beca-14d91ead7bb3"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Deploying a GlobalNames Zone</maml:linkText><maml:uri href="mshelp://windows/?id=acf8b192-752d-4459-b7e4-a404309fcf32"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction><maml:content><maml:sections></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Add a Server to DNS Manager</maml:title><maml:introduction>
<maml:para>You can use this procedure to add a local or remote server to DNS Manager so you can manage it.</maml:para>
<maml:para>Membership in the <maml:phrase>Administrators</maml:phrase> group, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To add a server to DNS Manager</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open DNS Manager.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>On the <maml:ui>Action</maml:ui> menu, click <maml:ui>Connect to DNS Server</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In <maml:ui>Connect to DNS Server</maml:ui>, click either: </maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:ui>This computer</maml:ui>, if the server that you want to connect to and manage is located on the same computer that you are using to manage it.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:ui>The following computer</maml:ui>, if the server that you want to connect to and manage is located on a remote computer.</maml:para>
</maml:listItem>
</maml:list>
<maml:para>If you choose to connect to a remote server, specify either its Domain Name System (DNS) computer name or its IP address.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Select the <maml:ui>Connect to the specified computer now</maml:ui> check box, and then click <maml:ui>OK</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open DNS Manager, click <maml:ui>Start</maml:ui>, point to <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>DNS</maml:ui>.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Remove a Server from DNS Manager</maml:linkText><maml:uri href="mshelp://windows/?id=29c4fd38-d829-45ae-8a03-b4dc82a281a7"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Add a Forward Lookup Zone</maml:title><maml:introduction>
<maml:para>Forward lookup zones support the primary function of Domain Name System (DNS), that is, the resolution of host names to IP addresses. For more information, see <maml:navigationLink><maml:linkText>Understanding Zone Types</maml:linkText><maml:uri href="mshelp://windows/?id=94d8e229-ef7b-4b4f-884f-5fec92bbc911"></maml:uri></maml:navigationLink>.</maml:para>
<maml:para>Membership in the <maml:phrase>Administrators</maml:phrase> group, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Adding a forward lookup zone</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using the Windows interface</maml:linkText><maml:uri href="mshelp://windows/?id=7294aebb-0452-4412-b5de-fc09e6b01ed6#BKMK_winui"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using a command line</maml:linkText><maml:uri href="mshelp://windows/?id=7294aebb-0452-4412-b5de-fc09e6b01ed6#BKMK_cmd"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction>
<maml:sections>
<maml:section address="BKMK_winui"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To add a forward lookup zone using the Windows interface</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open DNS Manager.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the console tree, right-click a DNS server, and then click <maml:ui>New Zone</maml:ui> to open the New Zone Wizard. </maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Follow the instructions to create a new primary zone, secondary zone, or stub zone.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open DNS Manager, click <maml:ui>Start</maml:ui>, point to <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>DNS</maml:ui>.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
<maml:section address="BKMK_cmd"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To add a forward lookup zone using a command line</maml:title><maml:introduction><maml:sections><maml:section><maml:title></maml:title><maml:introduction></maml:introduction></maml:section></maml:sections></maml:introduction><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open a command prompt.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Type the following command, and then press ENTER: </maml:para>
<dev:code>dnscmd <ServerName> /ZoneAdd <ZoneName> {/Primary|/DsPrimary|/Secondary|/Stub|/DsStub} [/file <FileName>] [/load] [/a <AdminEmail>] [/DP <FQDN>]
</dev:code>
</maml:section></maml:sections></maml:step></maml:procedure>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Parameter</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>dsncmd </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Manages DNS servers.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><ServerName> </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Specifies the DNS host name of the DNS server. You can also type the IP address of the DNS server. To specify the DNS server on the local computer, you can also type a period (.)</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>/ZoneAdd </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Adds a zone.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><ZoneName> </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Specifies the fully qualified domain name (FQDN) of the zone.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>/Primary|/DsPrimary|/Secondary|/Stub|/DsStub</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Specifies the type of zone. <maml:computerOutputInline>/DsPrimary</maml:computerOutputInline> and <maml:computerOutputInline>/DsStub</maml:computerOutputInline> specify an Active Directory–integrated zone type.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>/file </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required for <maml:computerOutputInline>/Primary</maml:computerOutputInline>. Specifies a file for the new zone. This parameter is not valid for the <maml:computerOutputInline>/DsPrimary</maml:computerOutputInline> zone type.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><FileName> </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required for <maml:computerOutputInline>/Primary</maml:computerOutputInline>. Specifies the name of the zone file. This parameter is not valid for the <maml:computerOutputInline>/DsPrimary</maml:computerOutputInline> zone type.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>/load </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Loads an existing file for the zone. If this parameter is not specified, default zone records are created automatically. This parameter does not apply to <maml:computerOutputInline>/DsPrimary</maml:computerOutputInline>.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>/a </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Adds an administrator e-mail address for the zone.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><AdminEmail> </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies the administrator e-mail name for the zone.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>/DP</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Adds the zone to an application directory partition. You may also use one of the following:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:computerOutputInline>/DP /domain</maml:computerOutputInline>—For a domain directory partition (replicates to all DNS servers in the domain).</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:computerOutputInline>/DP /forest</maml:computerOutputInline>—For a forest directory partition (replicates to all DNS servers in the forest).</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:computerOutputInline>/DP /legacy</maml:computerOutputInline>—For a legacy directory partition (replicates to all domain controllers in the domain). This setting supports domains that have legacy Windows 2000 Server domain controllers.</maml:para>
</maml:listItem>
</maml:list>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><FQDN></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies the FQDN of the directory partition.</maml:para>
</maml:entry></maml:row>
</maml:table>
<maml:para>To view the complete syntax for this command, at a command prompt, type the following command, and then press ENTER:</maml:para>
<dev:code>dnscmd /ZoneAdd /help </dev:code>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open an elevated Command Prompt window, click <maml:ui>Start</maml:ui>, point to <maml:ui>All Programs</maml:ui>, click <maml:ui>Accessories</maml:ui>, right-click <maml:ui>Command Prompt</maml:ui>, and then click <maml:ui>Run as administrator</maml:ui>. </maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Reset Aging and Scavenging Properties for a Specified Resource Record</maml:title><maml:introduction>
<maml:para>The DNS Server service supports aging and scavenging features. These features are provided as a mechanism for performing cleanup and removal of stale resource records, which can accumulate in zone data over time. You can use this procedure to change how a specific resource record is scavenged.</maml:para>
<maml:para>Membership in the <maml:phrase>Administrators</maml:phrase> group, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Resetting aging and scavenging properties for a specified resource record</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using the Windows interface</maml:linkText><maml:uri href="mshelp://windows/?id=72a8666b-0143-43d5-98a5-780e81d9131b#BKMK_winui"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using a command line</maml:linkText><maml:uri href="mshelp://windows/?id=72a8666b-0143-43d5-98a5-780e81d9131b#BKMK_cmd"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction>
<maml:sections>
<maml:section address="BKMK_winui"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To reset aging and scavenging properties for a specified resource record using the Windows interface</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open DNS Manager.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the console tree, click the applicable zone.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the details pane, double-click the resource record for which you want to reset aging and scavenging properties.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Depending on the how the resource record was originally added to the zone, do one of the following: </maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>If the record was added dynamically using dynamic update, clear the <maml:ui>Delete this record when it becomes stale</maml:ui> check box to prevent its aging or potential removal during the scavenging process. If dynamic updates to this record continue to occur, the Domain Name System (DNS) server will always reset this check box so that the dynamically updated record can be deleted.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>If you added the record statically, select the <maml:ui>Delete this record when it becomes stale</maml:ui> check box to permit its aging or potential removal during the scavenging process.</maml:para>
</maml:listItem>
</maml:list>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open DNS Manager, click <maml:ui>Start</maml:ui>, point to <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>DNS</maml:ui>. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>This procedure is necessary only for resource records that are dynamically registered. For records that you add to a zone manually, a time stamp value of zero always applies to the record, which excludes it from the scavenging process.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Aging and Scavenging properties for name server (NS) resource records and start of authority (SOA) resource records are reset in the properties for the zone, not in the properties of the resource record.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
<maml:section address="BKMK_cmd"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To reset aging and scavenging properties for a specified resource record using a command line</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open a command prompt.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Type the following command, and then press ENTER: </maml:para>
<dev:code>dnscmd <ServerName> /Config {<ZoneName>|..AllZones} /ScavengingInterval <Value></dev:code>
</maml:section></maml:sections></maml:step></maml:procedure>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Parameter</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>dnscmd </maml:para>
</maml:entry>
<maml:entry>
<maml:para>The command-line tool for managing DNS servers.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><ServerName> </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Specifies the DNS host name of the DNS server. You can also type the IP address of the DNS server. To specify the DNS server on the local computer, you can also type a period (.) </maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>/Config </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Configures the specified zone.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><ZoneName>|..AllZones</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Specifies the fully qualified domain name (FQDN) of the zone. To configure all zones that are hosted on the specified DNS server to allow dynamic updates, type <maml:computerOutputInline>..AllZones</maml:computerOutputInline>.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>/ScavengingInterval </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Sets the scavenging interval.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><Value> </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. The new value for the scavenging interval, specified in hours. The default is 168 (one week).</maml:para>
</maml:entry></maml:row>
</maml:table>
<maml:para>To view the complete syntax for this command, at a command prompt, type the following command, and then press ENTER:</maml:para>
<dev:code>dnscmd /Config /help</dev:code>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open an elevated Command Prompt window, click <maml:ui>Start</maml:ui>, point to <maml:ui>All Programs</maml:ui>, click <maml:ui>Accessories</maml:ui>, right-click <maml:ui>Command Prompt</maml:ui>, and then click <maml:ui>Run as administrator</maml:ui>. </maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Understanding Aging and Scavenging</maml:linkText><maml:uri href="mshelp://windows/?id=7d9f6ea1-3d84-4841-b30d-fcf73a92e35d"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Modify Zone Transfer Settings</maml:title><maml:introduction>
<maml:para>You can use the following procedure to control whether a zone will be transferred to other servers and which servers can receive the zone transfer. </maml:para>
<maml:para>Membership in the <maml:phrase>Administrators</maml:phrase> group, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Modifying zone transfer settings</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using the Windows interface</maml:linkText><maml:uri href="mshelp://windows/?id=744b7d08-dfcd-4a1b-8157-fd443cb0482b#BKMK_winui"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using a command line</maml:linkText><maml:uri href="mshelp://windows/?id=744b7d08-dfcd-4a1b-8157-fd443cb0482b#BKMK_cmd"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section><maml:section address="BKMK_winui"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To modify zone transfer settings using the Windows interface</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open DNS Manager.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Right-click a DNS zone, and then click <maml:ui>Properties</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>On the <maml:ui>Zone Transfers</maml:ui> tab, do one of the following: </maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To disable zone transfers, clear the <maml:ui>Allow zone transfers</maml:ui> check box.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>To allow zone transfers, select the <maml:ui>Allow zone transfers</maml:ui> check box.</maml:para>
</maml:listItem>
</maml:list>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>If you allowed zone transfers, do one of the following: </maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To allow zone transfers to any server, click <maml:ui>To any server</maml:ui>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>To allow zone transfers only to the DNS servers that are listed on the <maml:ui>Name Servers</maml:ui> tab, click <maml:ui>Only to servers listed on the Name Servers tab</maml:ui>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>To allow zone transfers only to specific DNS servers, click <maml:ui>Only to the following servers</maml:ui>, and then add the IP address of one or more DNS servers.</maml:para>
</maml:listItem>
</maml:list>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open DNS Manager, click <maml:ui>Start</maml:ui>, point to <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>DNS</maml:ui>. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>To improve the security of your DNS infrastructure, allow zone transfers only for either the DNS servers in the name server (NS) resource records for a zone or for specified DNS servers. If you allow any DNS server to perform a zone transfer, you are allowing internal network information to be transferred to any host that can contact your DNS server.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section><maml:section address="BKMK_cmd"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To modify zone transfer settings using a command line</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open a command prompt.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Type the following command, and then press ENTER: </maml:para>
<dev:code>dnscmd <ServerName> /ZoneResetSecondaries <ZoneName> {/NoXfr | /NonSecure | /SecureNs | /SecureList [<SecondaryIPAddress...>]}</dev:code>
</maml:section></maml:sections></maml:step></maml:procedure>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Parameter</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>dnscmd </maml:para>
</maml:entry>
<maml:entry>
<maml:para>The command-line tool for managing DNS servers.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><ServerName> </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Specifies the DNS host name of the DNS server. You can also type the IP address of the DNS server. To specify the DNS server on the local computer, you can also type a period (.).</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><ZoneName> </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Specifies the fully qualified domain name (FQDN) of the zone.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>/NoXfr </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Disables zone transfers for the zone.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>/NonSecure </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Permits zone transfers to any DNS server.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>/SecureNs </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Permits zone transfers only to DNS servers that are listed in the zone using name server (NS) resource records.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>/SecureList </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Permits zone transfers only to DNS servers that are specified by <maml:replaceable>SecondaryIPAddress</maml:replaceable>.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><SecondaryIPAddress> </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required, if <maml:computerOutputInline>/SecureList</maml:computerOutputInline> is specified. A list of one or more IP addresses for DNS servers that are permitted to obtain zone transfers.</maml:para>
</maml:entry></maml:row>
</maml:table>
<maml:para>To view the complete syntax for this command, at a command prompt, type the following command, and then press ENTER:</maml:para>
<dev:code>dnscmd /ZoneResetSecondaries /? </dev:code>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open an elevated Command Prompt window, click <maml:ui>Start</maml:ui>, point to <maml:ui>All Programs</maml:ui>, click <maml:ui>Accessories</maml:ui>, right-click <maml:ui>Command Prompt</maml:ui>, and then click <maml:ui>Run as administrator</maml:ui>. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>To improve the security of your DNS infrastructure, allow zone transfers only for either the DNS servers in the name server NS resource records for a zone or for specified DNS servers. If you allow any DNS server to perform a zone transfer, you are allowing internal network information to be transferred to any host that can contact your DNS server.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Security Information for DNS</maml:linkText><maml:uri href="mshelp://windows/?id=eebcdbcb-eab3-47a8-8355-3e1189b38c7f"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Disable Recursion on the DNS Server</maml:title><maml:introduction>
<maml:para>By default, the DNS server performs recursive queries on behalf of its DNS clients and DNS servers that have forwarded DNS client queries to it. Recursion is a name-resolution technique in which a DNS server queries other DNS servers on behalf of the requesting client to fully resolve the name and then sends an answer back to the client.</maml:para>
<maml:para>Attackers can use recursion to deny the DNS Server service. Therefore, if a DNS server in your network is not intended to receive recursive queries, recursion should be disabled on that server. </maml:para>
<maml:para>Membership in the <maml:phrase>Administrators</maml:phrase> group, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Disabling recursion on the DNS server</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using the Windows interface</maml:linkText><maml:uri href="mshelp://windows/?id=7558126a-cc90-4854-855d-533d706e7750#BKMK_winui"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using a command line</maml:linkText><maml:uri href="mshelp://windows/?id=7558126a-cc90-4854-855d-533d706e7750#BKMK_cmd"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section><maml:section address="BKMK_winui"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To disable recursion on the DNS server using the Windows interface</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open DNS Manager.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the console tree, right-click the applicable DNS server, then click <maml:ui>Properties</maml:ui>.</maml:para>
<maml:para><maml:phrase>Where?</maml:phrase></maml:para>
<maml:para>DNS/<maml:replaceable>applicable DNS server</maml:replaceable></maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Click the <maml:ui>Advanced</maml:ui> tab.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In <maml:ui>Server options</maml:ui>, select the <maml:ui>Disable recursion</maml:ui> check box, and then click <maml:ui>OK</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open DNS Manager, click <maml:ui>Start</maml:ui>, point to <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>DNS</maml:ui>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>If you disable recursion on the DNS server, you will not be able to use forwarders on the same server.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section><maml:section address="BKMK_cmd"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To disable recursion on the DNS server using a command line</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open a command prompt.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Type the following command, and then press ENTER:</maml:para>
<dev:code>dnscmd <ServerName> /Config /NoRecursion {1|0}</dev:code>
</maml:section></maml:sections></maml:step></maml:procedure>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Parameter</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>dnscmd </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies the name of the command-line tool for managing DNS servers.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><ServerName> </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Specifies the DNS host name of the DNS server. You can also type the IP address of the DNS server. To specify the DNS server on the local computer, you can also type a period (.).</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>/Config </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Specifies that the command configures the specified server.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>/NoRecursion </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Disables recursion.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>{1|0}</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. To disable recursion, type <maml:computerOutputInline>1</maml:computerOutputInline> (off). To enable recursion, type <maml:computerOutputInline>0</maml:computerOutputInline> (on). By default, recursion is enabled.</maml:para>
</maml:entry></maml:row>
</maml:table>
<maml:para>To view the complete syntax for this command, at a command prompt, type the following command, and then press ENTER:</maml:para>
<dev:code>dnscmd /Config /help </dev:code>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open an elevated Command Prompt window, click <maml:ui>Start</maml:ui>, point to <maml:ui>All Programs</maml:ui>, click <maml:ui>Accessories</maml:ui>, right-click <maml:ui>Command Prompt</maml:ui>, and then click <maml:ui>Run as administrator</maml:ui>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>If you disable recursion on the DNS server, you will not be able to use forwarders on the same server.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Security Information for DNS</maml:linkText><maml:uri href="mshelp://windows/?id=eebcdbcb-eab3-47a8-8355-3e1189b38c7f"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Securing the DNS Server Service</maml:linkText><maml:uri href="mshelp://windows/?id=9f93a319-4e77-4c17-ad4a-10e3ea9847f1"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Troubleshooting DNS Clients</maml:title><maml:introduction></maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>What problem are you having?</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>The DNS client received a "Name not found" error message</maml:linkText><maml:uri href="mshelp://windows/?id=761844e5-12f2-4882-8f4d-103c5dc51e1b#BKMK_1"></maml:uri></maml:navigationLink>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>The DNS client appears to have received a response with stale or incorrect information in it</maml:linkText><maml:uri href="mshelp://windows/?id=761844e5-12f2-4882-8f4d-103c5dc51e1b#BKMK_2"></maml:uri></maml:navigationLink>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>The DNS client appears to be affected by another problem not described here</maml:linkText><maml:uri href="mshelp://windows/?id=761844e5-12f2-4882-8f4d-103c5dc51e1b#BKMK_3"></maml:uri></maml:navigationLink>.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section address="BKMK_1">
<maml:title>The DNS client received a "Name not found" error message.</maml:title><maml:introduction>
<maml:para><maml:phrase>Cause:</maml:phrase> The Domain Name System (DNS) client computer does not have a valid IP configuration for the network.</maml:para>
<maml:para><maml:phrase>Solution:</maml:phrase> Verify that the TCP/IP configuration settings for the client computer are correct, particularly those settings that are used for DNS name resolution.</maml:para>
<maml:para>To verify a client IP configuration, use the <maml:computerOutputInline>ipconfig</maml:computerOutputInline> command. In the command output, verify that the client has a valid IP address, subnet mask, and default gateway for the network where it is attached and being used.</maml:para>
<maml:para>If the client does not have a valid TCP/IP configuration, you can either:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>For dynamically configured clients, use the <maml:computerOutputInline>ipconfig /renew</maml:computerOutputInline> command to manually force the client to renew its IP address configuration with the Dynamic Host Configuration Protocol (DHCP) server.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>For statically configured clients, modify the client TCP/IP properties to use valid configuration settings or complete its DNS configuration for the network. Do not configure clients to use both AD DS-integrated DNS servers and Internet Service Provider (ISP) DNS servers. Instead, configure clients only to use AD DS-integrated DNS servers and configure your AD DS-integrated DNS servers to forward queries to your ISP DNS servers.</maml:para>
</maml:listItem>
</maml:list>
<maml:para>For more information, see <maml:navigationLink><maml:linkText>Managing Clients</maml:linkText><maml:uri href="mshelp://windows/?id=bc5c7ee2-8e40-41b9-9763-7e8d4601d99d"></maml:uri></maml:navigationLink>.</maml:para>
<maml:para><maml:phrase>Cause:</maml:phrase> The client was not able to contact a DNS server because of a network-related or hardware-related failure.</maml:para>
<maml:para><maml:phrase>Solution:</maml:phrase> Verify that the client computer has a valid and functioning network connection. First, check that related client hardware (cables and network adapters) are working properly at the client by using basic network and hardware troubleshooting steps.</maml:para>
<maml:para>If the client hardware appears to be prepared and functioning properly, verify that it can contact other computers on the same network by using the <maml:computerOutputInline>ping</maml:computerOutputInline> command.</maml:para>
<maml:para><maml:phrase>Cause:</maml:phrase> The DNS client cannot contact its configured DNS servers.</maml:para>
<maml:para><maml:phrase>Solution:</maml:phrase> If the DNS client has basic connectivity to the network, verify that it can contact a preferred (or alternate) DNS server.</maml:para>
<maml:para>To verify whether a client has basic TCP/IP access to the DNS server, first try contacting the preferred DNS server by its IP address by using the <maml:computerOutputInline>ping</maml:computerOutputInline> command.</maml:para>
<maml:para>For example, if the client uses a preferred DNS server of 10.0.0.1, type <maml:computerOutputInline>ping 10.0.0.1</maml:computerOutputInline> at the command prompt on the client computer. If you are not sure what the IP address is for the preferred DNS server, you can view it by using the <maml:computerOutputInline>ipconfig</maml:computerOutputInline> command. For example, at the client computer, type <maml:computerOutputInline>ipconfig /all|more</maml:computerOutputInline> if necessary to pause the display so that you can read and note any IP addresses that are listed in <maml:ui>DNS servers</maml:ui> for the command output.</maml:para>
<maml:para>If no configured DNS servers respond to a direct pinging of their IP address, it indicates that the source of the problem is more likely a network connectivity problem between the client and the DNS servers. If that is the case, follow basic TCP/IP network troubleshooting steps to fix the problem.</maml:para>
<maml:para><maml:phrase>Cause:</maml:phrase> The DNS server is not running or responding to queries.</maml:para>
<maml:para><maml:phrase>Solution:</maml:phrase> If the DNS client can ping the DNS server computer, verify that the DNS server is started and able to listen for and respond to client requests. Try using the <maml:computerOutputInline>nslookup</maml:computerOutputInline> command to test whether the server can respond to DNS clients.</maml:para>
<maml:para>For more information, see <maml:navigationLink><maml:linkText>Start or Stop a DNS Server</maml:linkText><maml:uri href="mshelp://windows/?id=859fef3c-fec0-4b9f-9ac0-2b35045f527a"></maml:uri></maml:navigationLink>.</maml:para>
<maml:para><maml:phrase>Cause:</maml:phrase> The DNS server that the client is using does not have authority for the failed name and cannot locate the authoritative server for this name.</maml:para>
<maml:para><maml:phrase>Solution:</maml:phrase> Confirm whether the DNS domain name that the client is trying to resolve is the DNS domain name for which its configured DNS servers are authoritative.</maml:para>
<maml:para>For example, if the client is attempting to resolve the name host.widgets.tailspintoys.com, verify that the preferred DNS server (or an alternate, if one is being used) that is queried by the client loads the authoritative zone where a host (A) resource record for the failed name should exist.</maml:para>
<maml:para>If the preferred server is authoritative for the failed name and it loads the applicable zone, determine whether the zone is missing the appropriate resource records. If necessary, add the resource records to the zone.</maml:para>
<maml:para>If the preferred server is not authoritative for the failed name, it indicates that configuration errors at the DNS server are the likely cause. As necessary, troubleshoot the problem further at the DNS server.</maml:para>
<maml:para>For more information, see <maml:navigationLink><maml:linkText>Managing Resource Records</maml:linkText><maml:uri href="mshelp://windows/?id=68c3652a-0c55-49b6-ae2e-9ce3f06e4d99"></maml:uri></maml:navigationLink> and <maml:navigationLink><maml:linkText>Troubleshooting DNS Servers</maml:linkText><maml:uri href="mshelp://windows/?id=b09263e1-ab05-4f7f-a45b-7033bb490175"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction></maml:section>
<maml:section address="BKMK_2">
<maml:title>The DNS client appears to have received a response with stale or incorrect information in it.</maml:title><maml:introduction>
<maml:para><maml:phrase>Cause:</maml:phrase> The DNS server that the client is using does not have authority for the failed name, and it is using stale information from its local DNS database.</maml:para>
<maml:para><maml:phrase>Solution:</maml:phrase> Determine whether the DNS server is authoritative for the name, and proceed accordingly.</maml:para>
<maml:para>For example, if the client is attempting to resolve the name host.widgets.tailspintoys.com, verify that the preferred DNS server (or an alternate, if one is being used) that is queried by the client loads the authoritative zone where a host (A) resource record for the failed name should exist.</maml:para>
<maml:para>If the preferred server is authoritative for the name and it answered using incorrect data, it indicates that the applicable zone might have outdated or stale information in the applicable resource record data. If that is the case, you can add and remove the appropriate resource record in the zone.</maml:para>
<maml:para>Another option, when dynamic updates are enabled, is to force registration and update at the computer that is targeted by the query. You can force it to update the registration of its resource records by typing the <maml:computerOutputInline>ipconfig /registerdns</maml:computerOutputInline> command at a command prompt.</maml:para>
<maml:para>If the preferred server is not a direct authority for the queried name, it likely answered the query based on information that it obtained and cached during an earlier recursive lookup. In this case, you might consider clearing the server names cache. This compels the server to use new recursive queries for this resource record data and to rebuild its cache contents based on current information.</maml:para>
<maml:para>For more information, see <maml:navigationLink><maml:linkText>Managing Resource Records</maml:linkText><maml:uri href="mshelp://windows/?id=68c3652a-0c55-49b6-ae2e-9ce3f06e4d99"></maml:uri></maml:navigationLink> and <maml:navigationLink><maml:linkText>Troubleshooting DNS Servers</maml:linkText><maml:uri href="mshelp://windows/?id=b09263e1-ab05-4f7f-a45b-7033bb490175"></maml:uri></maml:navigationLink>.</maml:para>
<maml:para><maml:phrase>Cause:</maml:phrase> The preferred DNS server is a secondary server for the zone that contains the targeted name, and it has outdated information.</maml:para>
<maml:para><maml:phrase>Solution:</maml:phrase> If the server that answered the client is a secondary server for the zone, the version of the zone in use at that server might be stale and it may need to be updated more often.</maml:para>
<maml:para>As an immediate solution, you can initiate a zone transfer at the secondary server to its master server to update the zone. You might also consider using any of the following options to improve the freshness of secondary zone data in the future:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Specify additional master servers for the secondary server to use when refreshing the zone.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Adjust the refresh interval on the zone slightly to decrease the length of time that all authoritative servers for the zone can use the zone before they are required to refresh it.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Configure a notify list at a master server that acts as the zone source for the secondary server and enable it to notify this server when the zone changes.</maml:para>
</maml:listItem>
</maml:list>
<maml:para><maml:phrase>Cause:</maml:phrase> The name that was queried was specified in error, either through user input or in a stored client configuration.</maml:para>
<maml:para><maml:phrase>Solution:</maml:phrase> Verify that the name was correctly specified in the application where the name query originated.</maml:para>
<maml:para>In most cases, incorrect data in a positive query response indicates one of three possibilities:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>An incorrect DNS name was entered at the client by a user.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>A short, unqualified name was used at the client and completed by the local resolver using an unintended DNS suffix.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Resource records that are specified in the query were not updated correctly at the DNS server.</maml:para>
</maml:listItem>
</maml:list>
<maml:para>Confirm that the name was not entered in error by the user. Verify the exact set of characters that was entered by the user when the original DNS query was made, or check application settings, such as settings for any Internet mail or Web browser configurations that may have been made.</maml:para>
<maml:para>If the name that was used in the initial query was unqualified, and not the fully qualified domain name (FQDN), try using the FQDN instead in the client application and repeating the query. If you do, be sure to include the trailing dot (.) at the end of the name to indicate that the name entered is an exact FQDN.</maml:para>
<maml:para>If the FQDN query succeeds and returns correct data in the response, the most likely cause of the problem is a misconfigured DNS domain suffix search list in the client resolver settings.</maml:para>
<maml:para>If you are using DNS in an environment that does not support dynamic updates or you generally administer zone data manually, you might also want to verify that the resource records involved in answering the query were not entered incorrectly. View them to ensure that the record data that is stored in the zone is correct, or modify it accordingly.</maml:para>
<maml:para><maml:phrase>Cause:</maml:phrase> The primary zone might have missing or errored data</maml:para>
<maml:para><maml:phrase>Solution:</maml:phrase> Verify that the primary server for the zone has complete and accurate data.</maml:para>
<maml:para>The most likely cause for a primary DNS server for a zone to have missing or incomplete data is a failed update request. It is possible that support for dynamic update has not been fully implemented or configured. To resolve the problem, review the DNS dynamic update protocol (Request for Comments (RFC) 2136) and any requirements that it has for DNS servers and clients that use it.</maml:para>
<maml:para>For directory-integrated zones, it is also possible that the affected records for the failed query have been updated in Active Directory Domain Services (AD DS) but not replicated to all DNS servers that are loading the zone. By default, all DNS servers that load zones from AD DS poll it at a set interval (typically every 15 minutes), and they update the zone for any incremental changes to it. In most cases, a DNS update takes no more than 20 minutes to replicate to all DNS servers in an Active Directory domain environment using default replication settings and reliable high-speed links.</maml:para>
<maml:para>If you have specifically configured your zones to disable dynamic update, keep in mind that you must manually add and update most types of resource records that are used in a zone. If this is the case, use DNS Manager to view and update the affected records.</maml:para>
<maml:para>Another possible source for the incorrect data is Windows Internet Name Service (WINS). Determine whether WINS lookup integration is enabled and used with the zone. If you are using WINS lookup with your zones, verify that WINS is not the source of the incorrect data.</maml:para>
<maml:para>For more information, see <maml:navigationLink><maml:linkText>Troubleshooting Dynamic Updates</maml:linkText><maml:uri href="mshelp://windows/?id=247d20d9-5731-4630-8370-ce79805a1f7f"></maml:uri></maml:navigationLink> and <maml:navigationLink><maml:linkText>Managing Resource Records</maml:linkText><maml:uri href="mshelp://windows/?id=68c3652a-0c55-49b6-ae2e-9ce3f06e4d99"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction></maml:section>
<maml:section address="BKMK_3">
<maml:title>The DNS client appears to be affected by another problem not described here.</maml:title><maml:introduction>
<maml:para><maml:phrase>Cause:</maml:phrase> My problem is not described here.</maml:para>
<maml:para><maml:phrase>Solution:</maml:phrase> Search Microsoft TechNet (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=170</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=170"></maml:uri></maml:navigationLink>) for the latest technical information that may relate to the problem. If necessary, you can obtain information and instructions that pertain to your problem or issue.</maml:para>
<maml:para>If you are connected to the Internet, the latest operating system updates are available at Microsoft Update (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=284</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=284"></maml:uri></maml:navigationLink>).</maml:para>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Understanding Dynamic Update</maml:title><maml:introduction>
<maml:para>Domain Name System (DNS) client computers can use dynamic update to register and dynamically update their resource records with a DNS server whenever changes occur. This reduces the need for manual administration of zone records, especially for clients that frequently move or change locations and use Dynamic Host Configuration Protocol (DHCP) to obtain an IP address.</maml:para>
<maml:para>The DNS Client service and the DNS Server service support the use of dynamic updates, as described in Request for Comments (RFC) 2136, "Dynamic Updates in the Domain Name System." The DNS Server service allows dynamic update to be enabled or disabled on a per-zone basis at each server that is configured to load either a standard primary or directory-integrated zone. By default, the DNS Client service dynamically updates host (A) resource records in DNS when the service is configured for TCP/IP. </maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>How client and server computers update their DNS names</maml:title><maml:introduction>
<maml:para>By default, computers that are statically configured for TCP/IP attempt to dynamically register host (A) resource records and pointer (PTR) resource records for IP addresses that are configured and used by their installed network connections. By default, all computers register records based on their fully qualified domain name (FQDN).</maml:para>
<maml:para>The primary full computer name, an FQDN, is based on the primary DNS suffix of a computer,<maml:foreignPhrase> </maml:foreignPhrase>appended to its computer name.</maml:para>
<maml:para>Additional considerations:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>By default, the DNS client does not attempt dynamic update of top-level domain (TLD) zones. Any zone that is named with a single-label name is considered to be a TLD zone, for example, com, edu, blank, my-company. To configure a DNS client to allow the dynamic update of TLD zones, you can use the <maml:phrase>Update Top Level Domain Zones</maml:phrase> policy setting or you can modify the registry.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>By default, the primary DNS suffix portion of a computer's FQDN is the same as the name of the Active Directory Domain Services (AD DS) domain to which the computer is joined. To allow the use of different primary DNS suffixes, a domain administrator may create a restricted list of allowed suffixes by modifying the <maml:phrase>msDS-AllowedDNSSuffixes</maml:phrase> attribute in the domain object container. This attribute is managed by the domain administrator using Active Directory Service Interfaces (ADSI) or the Lightweight Directory Access Protocol (LDAP). </maml:para>
</maml:listItem>
</maml:list>
<maml:para>Dynamic updates can be sent for any of the following reasons or events:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>An IP address is added, removed, or modified in the TCP/IP properties configuration for any one of the installed network connections.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>An IP address lease changes or renews with the DHCP server any one of the installed network connections. For example, when the computer is started or if the <maml:computerOutputInline>ipconfig /renew</maml:computerOutputInline> command is used.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>The <maml:computerOutputInline>ipconfig /registerdns</maml:computerOutputInline> command is used to manually force a refresh of the client name registration in DNS.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>At startup time, when the computer is turned on.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>A member server is promoted to a domain controller.</maml:para>
</maml:listItem>
</maml:list>
<maml:para>When one of the previous events triggers a dynamic update, the DHCP Client service (not the DNS Client service) sends updates. This is designed so that if a change to the IP address information occurs because of DHCP, corresponding updates in DNS are performed to synchronize name-to-address mappings for the computer. The DHCP Client service performs this function for all network connections on the system, including connections that are not configured to use DHCP.</maml:para>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Example: How dynamic update works</maml:title><maml:introduction>
<maml:para>Typically, dynamic updates are requested when either a DNS name or an IP address changes on the computer. For example, supposethat a client named oldhost is first configured in <maml:ui>System properties</maml:ui> with the following names.</maml:para>
<maml:table>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Computer name</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>oldhost</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>DNS domain name of computer</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>tailspintoys.com</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Full computer name</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>oldhost.tailspintoys.com </maml:para>
</maml:entry></maml:row>
</maml:table>
<maml:para>In this example, no connection-specific DNS domain names are configured for the computer. Later, the computer is renamed from oldhost to newhost, which results in the following name changes on the system.</maml:para>
<maml:table>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Computer name</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>newhost</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>DNS domain name of computer</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>tailspintoys.com</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Full computer name</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>newhost.tailspintoys.com </maml:para>
</maml:entry></maml:row>
</maml:table>
<maml:para>After you apply the name change in <maml:ui>System properties</maml:ui>, you are prompted to restart the computer. When the computer restarts Windows, the DHCP Client service performs the following sequence to update DNS:</maml:para>
<maml:list class="ordered">
<maml:listItem>
<maml:para>The DHCP Client service sends a start of authority (SOA)–type query using the DNS domain name of the computer. </maml:para>
<maml:para>The client computer uses the currently configured FQDN of the computer (such as newhost.tailspintoys.com) as the name that is specified in this query.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>The authoritative DNS server for the zone that contains the client FQDN responds to the SOA-type query. </maml:para>
<maml:para>For standard primary zones, the primary server (owner) that is returned in the SOA query response is fixed and static. It always matches the exact DNS name as it appears in the SOA resource record that is stored with the zone. If, however, the zone being updated is directory integrated, any DNS server that is loading the zone can respond and dynamically insert its own name as the primary server (owner) of the zone in the SOA query response.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>The DHCP Client service then attempts to contact the primary DNS server. </maml:para>
<maml:para>The client processes the SOA query response for its name to determine the IP address of the DNS server that is authorized as the primary server for accepting its name. It then proceeds to perform the following sequence of steps as needed to contact and dynamically update its primary server:</maml:para>
<maml:list class="ordered">
<maml:listItem>
<maml:para>It sends a dynamic update request to the primary server that is determined in the SOA query response. </maml:para>
<maml:para>If the update succeeds, no further action is taken.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>If this update fails, the client next sends a name server (NS)–type query for the zone name that is specified in the SOA record.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>When it receives a response to this query, it sends an SOA query to the first DNS server that is listed in the response.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>After the SOA query is resolved, the client sends a dynamic update to the server that is specified in the returned SOA record. </maml:para>
<maml:para>If the update succeeds, no further action is taken.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>If this update fails, the client repeats the SOA query process by sending to the next DNS server that is listed in the response.</maml:para>
</maml:listItem>
</maml:list>
</maml:listItem>
<maml:listItem>
<maml:para>After the primary server that can perform the update is contacted, the client sends the update request and the server processes it. </maml:para>
<maml:para>The contents of the update request include instructions to add host (A) (and possibly pointer (PTR)) resource records for newhost.tailspintoys.com and to remove these same record types for oldhost.tailspintoys.com, the name that was registered previously.</maml:para>
<maml:para>The server also checks to ensure that updates are permitted for the client request. For standard primary zones, dynamic updates are not secured; therefore, any client attempt to update succeeds. For AD DS-integrated zones, updates are secured and performed using directory-based security settings.</maml:para>
</maml:listItem>
</maml:list>
<maml:para>Dynamic updates are sent or refreshed periodically. By default, computers send a refresh once every seven days. If the update results in no changes to zone data, the zone remains at its current version and no changes are written. Updates result in actual zone changes or increased zone transfer only if names or addresses actually change.</maml:para>
<maml:para>When the DHCP Client service registers host (A) and pointer (PTR) resource records for a computer, it uses a default caching Time to Live (TTL) of 15 minutes for host records. This determines how long other DNS servers and clients cache a computer's records when the records are included in a query response.</maml:para>
</maml:introduction></maml:section>
</maml:sections>
</maml:section><maml:section>
<maml:title>Secure dynamic update</maml:title><maml:introduction>
<maml:para>DNS update security is available only for zones that are integrated into AD DS. When you directory-integrate a zone, access control list (ACL) editing features are available in DNS Manager so that you can add or remove users or groups from the ACL for a specified zone or resource record. </maml:para>
<maml:para>By default, dynamic update security for DNS servers and clients can be handled as follows:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>DNS clients attempt to use unsecured dynamic update first. If an unsecured update is refused, clients try to use secure update. </maml:para>
<maml:para>Also, clients use a default update policy that permits them to attempt to overwrite a previously registered resource record, unless they are specifically blocked by update security.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>After a zone becomes AD DS-integrated, DNS servers running Windows Server® 2008 default to allowing only secure dynamic updates. </maml:para>
<maml:para>When you use standard zone storage, the default for the DNS Server service is to not allow dynamic updates on its zones. For zones that are either directory-integrated or that use standard file-based storage, you can change the zone to allow all dynamic updates, which permits all updates to be accepted.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Checklist: Add a Domain Controller with the DNS Server Service</maml:title><maml:introduction>
<maml:para>Integrating Domain Name System (DNS) with Active Directory Domain Services (AD DS) provides automatic replication between domain controllers in a common domain or forest. By installing multiple domain controllers in a domain running the DNS Server service, you can ensure that DNS will continue to work if a domain controller fails or is taken offline for maintenance. Having multiple domain controllers can also give you the ability to locate the servers in sites where they can be reached most efficiently by DNS clients. In addition, the resulting load balancing can improve overall DNS performance.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Task</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Reference</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Read about DNS integration with AD DS.</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Understanding Active Directory Domain Services Integration</maml:linkText><maml:uri href="mshelp://windows/?id=427144ca-37ce-4db7-a611-605338ec01ca"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Plan how to divide up your DNS domain name and network address space into forward and reverse lookup zones, as needed.</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Planning DNS Zones</maml:linkText><maml:uri href="mshelp://windows/?id=53661592-0f72-453e-bc5b-8ba193e1f5dc"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Plan your server deployment, including determining how many servers to use and where to put them on your network, keeping in mind that by default domain controllers also operate as DNS servers.</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Planning DNS Servers</maml:linkText><maml:uri href="mshelp://windows/?id=caa5a07e-98e6-4fce-a8a5-d3556d0f3c92"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>If clients on your network must be able to resolve external DNS names, consider whether you should configure and use forwarders at DNS servers on your network.</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Using Forwarders</maml:linkText><maml:uri href="mshelp://windows/?id=e2dd91d6-441f-4175-9d1d-d152d148d73c"></maml:uri></maml:navigationLink>;</maml:para>
<maml:para><maml:navigationLink><maml:linkText>Configure a DNS Server to Use Forwarders</maml:linkText><maml:uri href="mshelp://windows/?id=e324865f-1cbe-42ec-bf18-a220c0e26fe6"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Determine how to manage DNS client resolver configurations.</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Checklist: Configure DNS Client Settings</maml:linkText><maml:uri href="mshelp://windows/?id=473afe1a-0d68-422f-8194-0d63007ba3ef"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Install and configure domain controllers and domains for hosting your zones.</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Install a DNS Server</maml:linkText><maml:uri href="mshelp://windows/?id=3cf4d1b1-7a6e-4438-bf4f-22d9468c1732"></maml:uri></maml:navigationLink>;</maml:para>
<maml:para><maml:navigationLink><maml:linkText>Configure a DNS Server for Use with Active Directory Domain Services</maml:linkText><maml:uri href="mshelp://windows/?id=b6793e7e-0bec-4865-a869-f947867dcc17"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>As needed, add delegations in parent zones for any subdomains. </maml:para>
<maml:para>For example, if you are adding sub.corp.contoso.com as a new Active Directory domain, you add to it a delegation at the corp.contoso.com zone.</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Understanding Zone Delegation</maml:linkText><maml:uri href="mshelp://windows/?id=7cbe9c5e-4187-4fa2-a512-f6162162f22e"></maml:uri></maml:navigationLink>;</maml:para>
<maml:para><maml:navigationLink><maml:linkText>Create a Zone Delegation</maml:linkText><maml:uri href="mshelp://windows/?id=1f34d4ad-0201-400e-9219-f5818c1da2f7"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction><maml:content><maml:sections></maml:sections></maml:content></maml:conceptual>GIF89a,t 3 f 3 33 3f 3 3 3 f f3 ff f f f 3 f 3 f ̙ 3 f 3 3 33 f3 3 3 33 33333f3333333f 3f33ff3f3f3f3 333f3333 333f3̙333 333f333f f 3f ff f f f3 f33f3ff3f3f3ff ff3ffffffffff f3ffffff f3fff̙fff f3fffff 3 f ̙ 3 333f33̙3f f3ffff̙f 3f̙ 3f̙̙ 3f̙ 3 f 3 333f333f f3fffff̙ ̙3̙f̙̙̙ 3f̙ 3f 3 f 3 333f333f f3fffff 3f 3f̙ 3f ! , ,t H*\ȰÇ#JHŋ3jȱǏ C Iɓ(S\ɲ˗0cʜI͛8sɳϟ@
JѣH*]ʴӧPJJիXʵׯ`Ê KٳhӪ]˶۷pʝK]Y/Ʒ߿ LÈ+^̸ǐ#KLˁ䵸ϠC MӨkLscדa-vjw7歺= qC=.y5kf^eMg̽zۅG +>1zߧ~;dƯZ}r9C'\rq՛|AؕBYr bn%`z ahrMHbm&Z-Hb&!n
(~5Fc1J~U$3"9 @Ҹہ%(zy9 dщ6I]p)"k~y'mx֩G '&)h)*)a _NXQz'2R*]i)):X (#Jꋞ"6d։NWꙿzh)),~ rZ,e:8&vۨUѮr:뼣bNCR뮶(o K>\.F 7ܱ[p6ԦHZj0ֻrbP Ke<@(+
kdيjRҘffrkb 6sx |Bu-n]7G.WnZ#8w砃ܡn騧m.;qzz)w;qV;A'Wh0[X}Oz_o9uO}pg̲ƈ/%LgݤW3k]̤ 6I~r1a E ~CD nlW2YvezL[ @X&Igd,tw82pc! f|A_*$ѩe*z _?Lj ? ]\Զx?+P^X m-_lP_:en ;G
B%ƄuFA>kDd 9Q #IJ<[㣍5;~ O?R\7|ߚ<6N}O RX4Z0h߃4
M5/!|"N,$0(my[I蕓<9@|<IrtR>Oid+^2Is3s(|$2bR<`0{Ӟ9㴝VБR )т&$ 3)^}$b7%}-,O_J>&t 1QQ}rod!RUrZI2? TQaT#TEsgƩ{j``5#U\C4{j!Ei+*ZY=Z4td^
F,0cNV~/Ef ѦbsdN&xժ5Y~ղTbu[JSbOGoMb4j˃Pj7ӝ.h dәUj>}\/:\ϴ,z[ Զ d|e{)LuYK;sr [J3{8(GLb(N?r0XgLg8αӷ x-^"DKl;%;#L~rk8d)[yW6 ,#^ ҷo+ʘŵ9$Bs7:o1\:tq=ς CЇ @^tf9w:ΕtECk.>5jTծ9=ZZ/ε^Ϳva k+Xvjc;;ʖ2EjGt}/w!mB ft;1nd ,g wg' 7>T;Ax "q7<'Û E 3 A$rg>y/ps,s !,8s>>9]vF1ғNzGo=uW <k=W9bmW{͗ސcngMG,i?{݇}x3x} L<;$Wчzc>"S=gz^+^{Ql 7"G{|/2}'շ>s>/`=71~1yf/ӟ}'{7*QUq
~{8w X|р x !#%('x$(0| Q1k3ƃ9;=X3h@B xGI8KȄMPC8bWYR}FT(bLb8d8hm[as{xX*Ȇ=X7n%)H>h({p~y'qhyȅNXXagrxH|؇h(:DaFGcg8sgff=f&ad&g֨ڈzэҨf2QsdhHev&hvghhט
َ ʨ97& I6itiIk8Y&',V8vh3y)8?9; g;Y^0qQLNJWGZymSUٕȕb)l_aYFjkgiٖƖrkoqYVv*zmtƗ)ᗂm5ynj٘ Ɍ*Y8y@Q)d&+ә9b#ař sCyey6OXɌ0sI,xؖ )9Ck V i%UyqXɝY h㙛("Wy|fH֓e
.yݹ=7)iȑi&x e"Jv$y':rh8Ze2I'ڠ9;Jzf>
*פPR:TZWY[ZV蘚IBhZtlJygtvzzw^sڧ:cIiZç #9ڨXJiezJPG! zʩ:*
UEʪ 8z◫ZګSza0Zz@9<&J
<;a:+4
bEڒ-,ڏ˚٢&ZZZ= wal1ʯeDᰐ9 { m1Qv([*giӲV62[ 4;d|s9c}ljc?cmoCEbt\@DKa㴒dUT[D[9XkD"ЕDwS:<WIh7Y\q,C,$($%x:|;RAX;{ S1;93SIAN:[ԹAqN;t8N[:{;21O{ۻ)Ok:T{$Oʻ QP[֛.ڻV5[
1\蛾k Q^Ku+ X<[muj%
n |n ,[, R #{V^~#LP- }&L5|aļ9 7tB;̿GPջ+ILDLO[|VO[_|
;kƀѸYNN<jJ,mNoq,ljQt{<ǃxd L|81KLǂőLNyW!ɱ˺;yf\ɒ<;ǹ;QVʻk ;< <ȓ|:9+Oį̌˸ɵ{˔,ܿȼʼ<ͩLkLĞ<4˦ ,Η<YA
| |ʕΞIA5<̹М#ddj Ј#]ʠ=NЖ҅ = ;$ȗ҂c'LvM"[Ӄ1̸8Οy; ;B7ȷAE-):<<O=ӪK]\l]ܼՀ _gad{#AM\AZqr!ם㣘R
m]:_=_;`L
`B%}َ~ ;6-kSC|DQTuRكqqCeM,G9M5q۫4<Y#M}ӤJG=
EI朗F#SP7ܛ_$zgj7*-_]Ii Ewm[-0\ `\x]yg^ ^ ^FJZJ .>rS *#Ŏ Y(s우͛j(HijD!DE.mKd&]\-k'g>_nD%1!҃;-~/Gj.'A?y1ƈMc|Q`dꪬWl-pM
"~%N71JޢXP=( nd
euhhm֮ u@;w%Sb]nݴH lWn!uHԢ ?:}~i|N9 k>vm@U >onjNi 3ɢ!:DJ,)ߣz~+zy)[ I1 !:I 4#.UNe$a&Na:\obN`b'&1h XNo2`>}/N5Gua ebG.#~"Ka~SeCI
XVc^WɧDHY!O;_kF ckF25+~;: >oI*QITdVo<a*_8-9دPSGB .g
O% q
5 ,hB&tPD-^ĘQF =~R$Ak%MD$%YDeʙjޤN=}ЈD44C]p)QN VjQPVXe֦NCW}r&N'U^mX`
ΛXܼ5?6yXŨZƜYfĐ=t gΥMFZ꽣]^Zlڵm [n ެfF|n'<^XxƵ>Ǟrsڡ_;s⽟GowYO5
߽TTo`q*@~=D0A!:
B t)"0ț,PAG$14 C? 8
C=6Q"XD w䱶^TQBm1Q*!kT 2J"'A+!*DL34n
Sr*đM{3DSK43PA%t#@z E4QEeQG 4RI'H4SM7SN?5T<TSO*OHE5VY2 rV]w L^%vD_becUf7U%[o7\q% ;<maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Understanding Zone Delegation</maml:title><maml:introduction>
<maml:para>Domain Name System (DNS) provides the option of dividing up the namespace into one or more zones, which can then be stored, distributed, and replicated to other DNS servers. When you are deciding whether to divide your DNS namespace to make additional zones, consider the following reasons to use additional zones:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>You want to delegate management of part of your DNS namespace to another location or department in your organization.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>You want to divide one large zone into smaller zones to distribute traffic loads among multiple servers, improve DNS name resolution performance, or create a more-fault-tolerant DNS environment.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>You want to extend the namespace by adding numerous subdomains at once, for example, to accommodate the opening of a new branch or site.</maml:para>
</maml:listItem>
</maml:list>
<maml:para>If, for any of these reasons, you can benefit from delegating zones, it might make sense to restructure your namespace by adding additional zones. When you are deciding how to structure zones, use a plan that reflects the structure of your organization.</maml:para>
<maml:para>When you delegate zones within your namespace, remember that for each new zone that you create, you need delegation records in other zones that point to the authoritative DNS servers for the new zone. This is necessary both to transfer authority and to provide correct referral to other DNS servers and clients of the new servers that are being made authoritative for the new zone.</maml:para>
<maml:para>When a standard primary zone is first created, all the resource record information is stored as a text file on a single DNS server. This server acts as the primary master for the zone. Zone information can be replicated to other DNS servers to improve fault tolerance and server performance.</maml:para>
<maml:para>When you are structuring your zones, there are several good reasons to use additional DNS servers for zone replication:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Added DNS servers provide zone redundancy, which makes it possible for DNS names in the zone to be resolved for clients if a primary server for the zone stops responding.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Added DNS servers can be placed so as to reduce DNS network traffic. For example, adding a DNS server to the opposing side of a low-speed, wide area network (WAN) link can be useful in managing and reducing network traffic.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Additional secondary servers can be used to reduce loads on a primary server for a zone.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction><maml:content><maml:sections><maml:section address="H2_56771017">
<maml:title>Example: Delegating a subdomain to a new zone</maml:title><maml:introduction>
<maml:para>As shown in the following illustration, when a new zone for a subdomain (example.microsoft.com) is created, delegation from the parent zone (microsoft.com) is needed.</maml:para>
<maml:para><maml:embedObject><maml:caption>Zone delegation</maml:caption><maml:objectUri href="mshelp://windows/?id=c7e7d942-13ac-4678-a0a4-dbfffbee3e96" mimeType="image/gif"><maml:summary>Example: How zone delegation works</maml:summary></maml:objectUri></maml:embedObject></maml:para>
<maml:para>In this example, an authoritative DNS server computer for the newly delegated example.microsoft.com subdomain is named that is based on a derivative subdomain that is included in the new zone (ns1.na.example.microsoft.com). To make this server known to other servers outside the new delegated zone, two resource records are necessary in the microsoft.com zone to complete delegation to the new zone.</maml:para>
<maml:para>These resource records include the following:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>A name server (NS) resource record to effect the delegation. This resource record advertises that the server named ns1.na.example.microsoft.com is an authoritative server for the delegated subdomain.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>A host (A or AAAA) resource record (also known as a glue record) is necessary to resolve the name of the server that is specified in the NS resource record to its IP address. The process of resolving the host name in this resource record to the delegated DNS server in the name server (NS) resource record is sometimes referred to as glue chasing.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Understanding Aging and Scavenging</maml:title><maml:introduction>
<maml:para>The DNS Server service supports aging and scavenging features. These features are provided as a mechanism for performing cleanup and removal of stale resource records, which can accumulate in zone data over time.</maml:para>
<maml:para>With dynamic update, resource records are automatically added to zones when computers start on the network. However, in some cases, they are not automatically removed when computers leave the network. For example, if a computer registers its own host (A) resource record at startup and is later improperly disconnected from the network, its host (A) resource record might not be deleted. If your network has mobile users and computers, this situation can occur frequently.</maml:para>
<maml:para>If left unmanaged, the presence of stale resource records in zone data may cause some problems:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>If a large number of stale resource records remain in zones, they can eventually take up server disk space and cause unnecessarily long zone transfers.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Domain Name System (DNS) servers that load zones that contain stale resource records might use outdated information to answer client queries, potentially causing the clients to experience name resolution problems on the network.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>The accumulation of stale resource records at the DNS server can degrade its performance and responsiveness.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>In some cases, the presence of a stale resource record in a zone can prevent a DNS domain name from being used by another computer or host device.</maml:para>
</maml:listItem>
</maml:list>
<maml:para>To solve these problems, the DNS Server service has the following features:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Time stamping, based on the current date and time that is set at the server computer, for any resource records that are added dynamically to primary-type zones. In addition, time stamps are recorded in standard primary zones where aging and scavenging is enabled. </maml:para>
<maml:para>For resource records that you add manually, a time-stamp value of zero is used, indicating that these records are not affected by the aging process and that they can remain without limitation in zone data unless you otherwise change their time stamp or delete them.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Aging of resource records in local data, based on a specified refresh time period, for any eligible zones. </maml:para>
<maml:para>Only primary-type zones that are loaded by the DNS Server service are eligible to participate in this process.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Scavenging for any resource records that persist beyond the specified refresh period. </maml:para>
<maml:para>When a DNS server performs a scavenging operation, it can determine that resource records have aged to the point of becoming stale and remove them from zone data. You can configure servers to perform recurring scavenging operations automatically, or you can initiate an immediate scavenging operation at the server.</maml:para>
<maml:para>For more information, see either <maml:navigationLink><maml:linkText>Enable Automatic Scavenging of Stale Resource Records</maml:linkText><maml:uri href="mshelp://windows/?id=da92dc7d-85d5-476d-ae5d-1b215665313f"></maml:uri></maml:navigationLink> or <maml:navigationLink><maml:linkText>Start Immediate Scavenging of Stale Resource Records</maml:linkText><maml:uri href="mshelp://windows/?id=33a1535e-7d8c-483b-8d00-ee91869c775b"></maml:uri></maml:navigationLink>.</maml:para>
</maml:listItem>
</maml:list>
<maml:alertSet class="caution"><maml:title>Caution </maml:title>
<maml:para>By default, the aging and scavenging mechanism for the DNS Server service is disabled. It should be enabled only when all parameters are fully understood. Otherwise, the server can be accidentally configured to delete records that should not be deleted. If a record is accidentally deleted, not only will users fail to resolve queries for that record, but any user can create a record and take ownership of it, even on zones that are configured for secure dynamic update.</maml:para>
</maml:alertSet>
<maml:para>A server uses the contents of each resource-record-specific time stamp, along with other aging and scavenging properties that you can adjust or configure, to determine when it scavenges records.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Prerequisites for aging and scavenging</maml:title><maml:introduction>
<maml:para>Before you can use the aging and scavenging features of DNS, several conditions must be met:</maml:para>
<maml:list class="ordered">
<maml:listItem>
<maml:para>Scavenging and aging must be enabled, both at the DNS server and on the zone. </maml:para>
<maml:para>By default, aging and scavenging of resource records is disabled.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Resource records must either be dynamically added to zones or manually modified to be used in aging and scavenging operations. </maml:para>
<maml:para>Typically, only those resource records that are added dynamically using the DNS dynamic update protocol are subject to aging and scavenging.</maml:para>
<maml:para>You can, however, enable scavenging for other resource records that are added through nondynamic means. For records that are added to zones in this way, either by loading a text-based zone file from another DNS server or by manually adding them to a zone, a time stamp of zero is set. This makes these records ineligible for use in aging and scavenging operations.</maml:para>
<maml:para>To change this default, you can administer these records individually, to reset and permit them to use a current (nonzero) time-stamp value. This makes it possible for these records to become aged and scavenged.</maml:para>
<maml:para>For more information, see <maml:navigationLink><maml:linkText>Reset Aging and Scavenging Properties for a Specified Resource Record</maml:linkText><maml:uri href="mshelp://windows/?id=72a8666b-0143-43d5-98a5-780e81d9131b"></maml:uri></maml:navigationLink>.</maml:para>
</maml:listItem>
</maml:list>
<maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>In the case of changing a zone from standard primary to Active Directory-integrated, you may want to enable scavenging of all existing resource records in the zone. To enable aging for all existing resource records in a zone, you can use the <maml:computerOutputInline>AgeAllRecords</maml:computerOutputInline> command, which is available through the <maml:computerOutputInline>dnscmd</maml:computerOutputInline> command-line tool.</maml:para>
</maml:alertSet>
</maml:introduction></maml:section><maml:section>
<maml:title>Aging and scavenging terminology</maml:title><maml:introduction>
<maml:para>The following table indicates new or revised terms that have been introduced to help specifically when discussing aging and scavenging.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Term</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Resource record time stamp</maml:para>
</maml:entry>
<maml:entry>
<maml:para>A date and time value that is used by the DNS server to determine removal of the resource record when it performs aging and scavenging operations.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Current server time</maml:para>
</maml:entry>
<maml:entry>
<maml:para>The current date and time on the DNS server. This number can be expressed as an exact numeric value at any point in time.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>No-refresh interval</maml:para>
</maml:entry>
<maml:entry>
<maml:para>An interval of time, determined for each zone, as bounded by the following two events:</maml:para>
<maml:list class="ordered">
<maml:listItem>
<maml:para>The date and time when the record was last refreshed and its time stamp was set.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>The date and time when the record next becomes eligible to be refreshed and have its time stamp reset.</maml:para>
</maml:listItem>
</maml:list>
<maml:para>This value is needed to decrease the number of write operations to the Active Directory database. By default, this interval is set to seven days. It should not be increased to an unreasonably high level, because the benefits of the aging and scavenging feature might either be lost or diminished.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Refresh interval</maml:para>
</maml:entry>
<maml:entry>
<maml:para>An interval of time, determined for each zone, as bounded by the following two distinct events:</maml:para>
<maml:list class="ordered">
<maml:listItem>
<maml:para>The earliest date and time when the record becomes eligible to be refreshed and have its time stamp reset.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>The earliest date and time when the record becomes eligible to be scavenged and removed from the zone database.</maml:para>
</maml:listItem>
</maml:list>
<maml:para>This value should be large enough to allow all clients to refresh their records. By default, this interval is set to seven days. It should not be increased to an unreasonably high level, because the benefits of the aging and scavenging feature might either be lost or diminished.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Start scavenging time</maml:para>
</maml:entry>
<maml:entry>
<maml:para>A specific time, expressed as a number. This time is used by the server to determine when a zone becomes available for scavenging.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Scavenging period</maml:para>
</maml:entry>
<maml:entry>
<maml:para>When automatic scavenging is enabled at the server, this period represents the time between repetitions of the automated scavenging process. The default value for this is seven days. To prevent deterioration of DNS server performance, the minimum allowed value for this is one hour.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Record refresh</maml:para>
</maml:entry>
<maml:entry>
<maml:para>When a DNS dynamic update is processed for a resource record when only the resource record time stamp, and no other characteristics of the record, are revised. </maml:para>
<maml:para>Refreshes generally occur for the following reasons:</maml:para>
<maml:list class="ordered">
<maml:listItem>
<maml:para>When a computer is restarted on the network and, if at startup, its name and IP address information are consistent with the same name and address information it used before being shut down, it sends a refresh to renew its associated resource records for this information.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>A periodic refresh is sent by the computer while it is running. </maml:para>
<maml:para>The Windows DNS Client service renews DNS registration of client resource records every 24 hours. When this dynamic update occurs, if the dynamic update request does not cause modification to the DNS database, it is considered to be a refresh and not a resource record update.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Other network services make refresh attempts, such as: DHCP servers, which renew client address leases; cluster servers, which register and update records for a cluster; and the Net Logon service, which can register and update resource records that are used by Active Directory domain controllers.</maml:para>
</maml:listItem>
</maml:list>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Record update</maml:para>
</maml:entry>
<maml:entry>
<maml:para>When a DNS dynamic update is processed for a resource record where other characteristics of the record in addition to its time stamp are revised.</maml:para>
<maml:para>Updates generally occur for the following reasons:</maml:para>
<maml:list class="ordered">
<maml:listItem>
<maml:para>When a new computer is added to the network and, at startup, it sends an update to register its resource records for the first time with its configured zone.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>When a computer with existing records in the zone has a change in IP address, causing updates to be sent for its revised name-to-address mappings in DNS zone data.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>When the Net Logon service registers a new Active Directory domain controller.</maml:para>
</maml:listItem>
</maml:list>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Scavenging servers</maml:para>
</maml:entry>
<maml:entry>
<maml:para>An optional advanced zone parameter that enables you to specify a restricted list of IP addresses for DNS servers that are enabled to perform scavenging of the zone.</maml:para>
<maml:para>By default, if this parameter is not specified, all DNS servers that load a directory-integrated zone (also enabled for scavenging) attempt to perform scavenging of the zone. In some cases, this parameter can be useful if it is preferable that scavenging only be performed at some servers loading the directory-integrated zone.</maml:para>
<maml:para>To set this parameter, you must specify the list of IP addresses for the servers that are enabled to scavenge the zone in the <maml:phrase>ZoneResetScavengeServers</maml:phrase> parameter for the zone. This can be done using the <maml:computerOutputInline>dnscmd</maml:computerOutputInline> command, a command-line based tool for administering Windows DNS servers. </maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction></maml:section><maml:section>
<maml:title>When scavenging can start</maml:title><maml:introduction>
<maml:para>After all prerequisites for enabling the use of scavenging are met, it can start for a server zone when the current server time is greater than the value of the start scavenging time for the zone.</maml:para>
<maml:para>The server sets the time value to start scavenging on a per-zone basis whenever one of the following events occurs:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Dynamic updates are enabled for the zone.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>A change in the state of the <maml:ui>Scavenge stale resource records</maml:ui> check box is applied. You can use DNS Manager to modify this setting at either an applicable DNS server or one of its primary zones.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>The DNS server loads a primary zone that is enabled to use scavenging. </maml:para>
<maml:para>This can occur when the server computer is started or when the DNS Server service is started.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>When a zone resumes service after having been paused. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>If the zone is AD DS-integrated, replication for the zone must have taken place at least once since the DNS service was restarted or the domain controller was rebooted. When the previous events occur, the DNS server sets the value of start scavenging time by calculating the following sum:</maml:para>
<maml:para>Current server time + Refresh interval = Start scavenging time</maml:para>
<maml:para>This value is used as a basis of comparison during scavenging operations.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section><maml:section>
<maml:title>Example: the aging and scavenging process for a sample record</maml:title><maml:introduction>
<maml:para>To understand the process of aging and scavenging at the server, consider the life span and successive stages of a single resource record, as it is added to a server and zone where this process is in effect and then aged and removed from the database.</maml:para>
<maml:list class="ordered">
<maml:listItem>
<maml:para>A sample DNS host, "host-a.example.microsoft.com", registers its host (A) resource record at the DNS server for a zone where aging and scavenging are enabled for use.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>When registering the record, the DNS server places a time stamp on this record based on current server time. </maml:para>
<maml:para>After the record time stamp is written, the DNS server does not accept refreshes for this record for the duration of the zone no-refresh interval. It can, however, accept updates before that time. For example, if the IP address for "host-a.example.microsoft.com" changes, the DNS server can accept the update. In this case, the server also updates (resets) the record time stamp.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Upon expiration of the no-refresh period, the server begins to accept attempts to refresh this record. </maml:para>
<maml:para>When the initial no-refresh period ends, the refresh period immediately begins for the record. During this time, the server does not suppress attempts to refresh the record for its remaining life span.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>During and after the refresh period, if the server receives a refresh for the record, it processes it. </maml:para>
<maml:para>This resets the time stamp for the record based on the method that is described in step 2.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>When subsequent scavenging is performed by the server for the "example.microsoft.com" zone, the record (and all other zone records) are examined by the server. </maml:para>
<maml:para>Each record is compared to current server time on the basis of the following sum to determine whether the record should be removed:</maml:para>
<maml:para>Record time stamp + <maml:phrase>No-refresh interval</maml:phrase> for zone + <maml:phrase>Refresh interval</maml:phrase> for zone</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>If the value of this sum is greater than current server time, no action is taken and the record continues to age in the zone.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>If the value of this sum is less than current server time, the record is deleted both from any zone data currently loaded in server memory and also from the applicable DnsZone object store in Active Directory Domain Services (AD DS) for the directory-integrated "example.microsoft.com" zone.</maml:para>
</maml:listItem>
</maml:list>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Updating Root Hints</maml:title><maml:introduction>
<maml:para>You can use root hints to prepare servers that are authoritative for nonroot zones so that they can discover authoritative servers that manage domains at a higher level or in other subtrees of the DNS domain namespace. These root hints are essential for servers that are authoritative at lower levels of the namespace when locating and finding other servers under these conditions.</maml:para>
<maml:para>For example, suppose that a DNS server (Server A) has a zone called sub.corp.contoso.com. In the process of answering a query for a higher-level domain, such as the corp.contoso.com domain, Server A needs some assistance to locate an authoritative server (such as Server B) for this domain.</maml:para>
<maml:para>For Server A to find Server B—or any other servers that are authoritative for the contoso.com domain, Server A must be able to query the root servers for the DNS namespace. The root servers can then refer Server A to the authoritative servers for the com domain. The servers for the com domain can, in turn, offer referral to Server B or other servers that are authoritative for the contoso.com domain. The root hints that Server A uses must have helpful hints to the root servers for this process to locate Server B (or another authoritative server) as intended.</maml:para>
<maml:para>To configure and use root hints correctly, first answer the following questions about your DNS server:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Are you using DNS on the Internet or on a private network?</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Is the DNS server used as a root server?</maml:para>
</maml:listItem>
</maml:list>
<maml:para>By default, the DNS Server service implements root hints by using a file, Cache.dns, that is stored in the %systemroot%\System32\Dns folder on the server computer. This file normally contains the name server (NS) and host (A) resource records for the Internet root servers. If, however, you are using the DNS Server service on a private network, you can edit or replace this file with similar records that point to your own internal root DNS servers.</maml:para>
<maml:para>Root hints are also treated differently when a DNS server is configured to be used by other DNS servers in an internal namespace as a forwarder for any DNS queries of names that are managed externally (on the Internet, for example). Even though the DNS server that is used as a forwarder can be located internally on the same network as servers that are using it as a forwarder, it needs hints for the Internet root servers to work properly and resolve external names.</maml:para>
<maml:para>If a DNS server is configured to access other DNS servers, such as through a list of DNS servers that is configured in its client TCP/IP properties for an installed network connection, the DNS Server service is capable of gathering its own root hints during new server configuration. You can use the Configure a DNS Server Wizard to accomplish this.</maml:para>
</maml:introduction><maml:content><maml:sections></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Enable DNS for DHCP-Enabled Clients</maml:title><maml:introduction></maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To configure Domain Name System (DNS) for clients with dynamically configured IP addresses that are provided by a Dynamic Host Configuration Protocol (DHCP) server, you usually configure the following at either the DHCP server or applicable clients: </maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>DNS host name (or names) for the client computer. For DHCP clients, this must be set at the client computer or assigned during unattended setup.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Primary and alternate DNS servers that the client uses to assist in resolving DNS domain names. For DHCP clients, this can be set on the DHCP server by assigning the DNS server option (option 6) and providing a configured list of ordered IP addresses for the DNS servers that the client is configured to use.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>A list of DNS suffixes to be appended for use in completing unqualified DNS names that are used for searching and submitting DNS queries at the client for resolution. For DHCP clients, this can be set on the DHCP server by assigning the DNS domain name option (option 15) and providing a single DNS suffix for the client to append and use in searches. To configure additional DNS suffixes, configure TCP/IP manually for DNS configuration.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Connection-specific dynamic update and registration behavior, such as whether specific network adapters that are installed at the client dynamically register their configured IP addresses with a DNS server. For DHCP clients, the default is for client connections to register their configured IP addresses with a DNS server. To modify this behavior at the client, configure TCP/IP manually on the client for DNS configuration.</maml:para>
</maml:listItem>
</maml:list>
</maml:listItem>
</maml:list>
<maml:para>For more information about how to configure other DNS for DHCP clients, see the applicable TCP/IP or DNS client documentation that is provided by the appropriate vendor.</maml:para>
<maml:para>By default, the DNS client does not attempt dynamic update of top-level domain (TLD) zones. Any zone that is named with a single-label name is considered to be a TLD zone, for example, com, edu, blank, my-company. To configure the DNS client to allow the dynamic update of TLD zones, you can use the <maml:phrase>Update Top Level Domain Zones</maml:phrase> policy setting or you can modify the registry.</maml:para>
<maml:para>For more information about DHCP options, see "DHCP Options" in the Networking Collection (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=4639</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=4639"></maml:uri></maml:navigationLink>).</maml:para>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Understanding DNS Client Settings</maml:linkText><maml:uri href="mshelp://windows/?id=4d785d45-dc9d-4ed2-ba73-e734d55d3319"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Set Aging and Scavenging Properties for a Zone</maml:title><maml:introduction>
<maml:para>The DNS Server service supports aging and scavenging features. These features are provided as a mechanism for performing cleanup and removal of stale resource records, which can accumulate in zone data over time. You can use this procedure to set the aging and scavenging properties for a specific zone.</maml:para>
<maml:para>Membership in the <maml:phrase>Administrators</maml:phrase> group, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Setting aging and scavenging properties for a zone</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using the Windows interface</maml:linkText><maml:uri href="mshelp://windows/?id=81005446-0f9b-41d7-b9cb-9f61177e256d#BKMK_winui"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using a command line</maml:linkText><maml:uri href="mshelp://windows/?id=81005446-0f9b-41d7-b9cb-9f61177e256d#BKMK_cmd"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction>
<maml:sections>
<maml:section address="BKMK_winui"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To set aging and scavenging properties for a zone using the Windows interface</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open DNS Manager.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the console tree, right-click the applicable zone, and then click <maml:ui>Properties</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>On the <maml:ui>General</maml:ui> tab, click <maml:ui>Aging</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Select the <maml:ui>Scavenge stale resource records</maml:ui> check box.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Modify other aging and scavenging properties as needed.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open DNS Manager, click <maml:ui>Start</maml:ui>, point to <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>DNS</maml:ui>. </maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
<maml:section address="BKMK_cmd"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To set aging and scavenging properties for a zone using a command line</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open a command prompt.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Type the following command, and then press ENTER: </maml:para>
<dev:code>dnscmd <ServerName> /Config <ZoneName> {/Aging <Value>|/RefreshInterval <Value>|/NoRefreshInterval <Value>}</dev:code>
</maml:section></maml:sections></maml:step></maml:procedure>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Parameter</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>dnscmd </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies the name of the command-line tool for managing DNS servers.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><ServerName> </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Specifies the Domain Name System (DNS) host name of the DNS server. You can also type the IP address of the DNS server. To specify the DNS server on the local computer, you can also type a period (.)</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>/Config </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Specifies that the command configures the specified zone.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><ZoneName></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Specifies the name of the zone to which you want to set aging and scavenging.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>/Aging </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Enables aging for zones.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>/RefreshInterval </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Specifies the Refresh interval for a scavenging-enabled zone.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>/NoRefreshInterval </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Specifies the No-refresh interval for a scavenging-enabled zone.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><Value> </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. For <maml:computerOutputInline>/Aging</maml:computerOutputInline>, type 1 to enable aging. Type 0 to disable aging. For <maml:computerOutputInline>/RefreshInterval</maml:computerOutputInline>, type a value in hours. The default setting is 168 hours (one week). For <maml:computerOutputInline>/NoRefreshInterval</maml:computerOutputInline>, type a value in seconds. The standard setting is 3600 (one hour).</maml:para>
</maml:entry></maml:row>
</maml:table>
<maml:para>To view the complete syntax for this command, at a command prompt, type the following command, and then press ENTER:</maml:para>
<dev:code>dnscmd /Config /help </dev:code>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open an elevated Command Prompt window, click <maml:ui>Start</maml:ui>, point to <maml:ui>All Programs</maml:ui>, click <maml:ui>Accessories</maml:ui>, right-click <maml:ui>Command Prompt</maml:ui>, and then click <maml:ui>Run as administrator</maml:ui>. </maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Understanding Aging and Scavenging</maml:linkText><maml:uri href="mshelp://windows/?id=7d9f6ea1-3d84-4841-b30d-fcf73a92e35d"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Advanced Dialog Box (WINS)</maml:title><maml:introduction>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Item</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Details</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Cache time-out</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Provides a space for you to type a Time To Live (TTL) value that can be used by other Domain Name System (DNS) servers and some DNS clients to determine how long they are allowed to cache information in this resource record that is returned through the use of Windows Internet Name Service (WINS) lookup integration. The format of the time that you type should be in days (DDDDD), hours (HH), minutes (MM), and seconds (SS).</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Lookup time-out</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Provides a space for you to type a length of time to control how long the DNS server waits for a response from WINS before returning a "Name not found" error message to the requester. The format of the time that you type should be in days (DDDDD), hours (HH), minutes (MM), and seconds (SS). </maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction><maml:content><maml:sections></maml:sections></maml:content><maml:relatedLinks type="seeAlso"><maml:title>See Also</maml:title><maml:navigationLink><maml:linkText>User Interface: DNS Server</maml:linkText><maml:uri href="mshelp://windows/?id=c2c0a226-364e-4c4d-88ee-5c3ef2b3023f"></maml:uri></maml:navigationLink></maml:relatedLinks></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Start or Stop a DNS Server</maml:title><maml:introduction>
<maml:para>You can use this procedure to control whether the DNS Server service is running and able to respond to queries.</maml:para>
<maml:para>Membership in the <maml:phrase>Administrators</maml:phrase> group, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To start or stop a DNS server</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open DNS Manager.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the console tree, click the applicable Domain Name System (DNS) server.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>On the <maml:ui>Action</maml:ui> menu, point to <maml:ui>All Tasks</maml:ui>, and then click one of the following:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To start the service, click <maml:ui>Start</maml:ui>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>To stop the service, click <maml:ui>Stop</maml:ui>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>To interrupt the service, click <maml:ui>Pause</maml:ui>.</maml:para>
</maml:listItem>
</maml:list>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To stop and then automatically restart the service, click <maml:ui>Restart</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open DNS Manager, click <maml:ui>Start</maml:ui>, point to <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>DNS</maml:ui>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>After you pause or stop the service, on the <maml:ui>Action</maml:ui> menu, in <maml:ui>All Tasks</maml:ui>, you can click <maml:ui>Resume</maml:ui> to immediately resume service.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>When the boot method of your server is configured to load zone data from the registry, changes are applied to DNS servers only when the DNS Server service is initialized again. In this case, if a DNS value is manually changed directly in the registry, the DNS Server service must always be restarted for the new value to be used.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Add a Server to DNS Manager</maml:linkText><maml:uri href="mshelp://windows/?id=6ed1eb2f-a859-410b-a809-84952f9c2789"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Change the Boot Method Used by the DNS Server</maml:linkText><maml:uri href="mshelp://windows/?id=f8ca5381-d1b4-4ea1-89cd-f94f33199bc3"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>DNS</maml:title><maml:introduction>
<maml:para>Domain Name System (DNS) is the name resolution protocol for TCP/IP networks, such as the Internet. A DNS server hosts the information that enables client computers to resolve memorable, alphanumeric DNS names to the IP addresses that computers use to communicate with each other. The following topics describe the DNS server role in the Windows Server® 2008 operating system, and they provide procedures for installing, configuring, and managing DNS servers in your network.</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>DNS Overview</maml:linkText><maml:uri href="mshelp://windows/?id=53305fd6-54fd-45ca-9ff0-19686f48257d"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Checklist: Add a Domain Controller with the DNS Server Service</maml:linkText><maml:uri href="mshelp://windows/?id=7c47acc8-e505-4d56-9849-226e53bff23d"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Checklist: Store Data in an AD DS Application Partition</maml:linkText><maml:uri href="mshelp://windows/?id=2e2e0678-1775-4cdd-8779-32d5c281540f"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Checklist: Use Forwarders</maml:linkText><maml:uri href="mshelp://windows/?id=ca37b2cf-5022-4330-b567-3eacb11b7f1a"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Checklist: Automatically Remove Stale Resource Records</maml:linkText><maml:uri href="mshelp://windows/?id=21afdef0-b5ba-4a0d-bb4e-cb9901a487ac"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Checklist: Create an Alias (CNAME) Record</maml:linkText><maml:uri href="mshelp://windows/?id=ccf07499-7a36-40bd-8b23-b8c91fa6cfd3"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Checklist: Use Resource Records</maml:linkText><maml:uri href="mshelp://windows/?id=d30554bd-b6fc-45d2-823c-642a0880bf0f"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Checklist: Secure Your DNS Server</maml:linkText><maml:uri href="mshelp://windows/?id=061c03a5-199c-44a7-9565-0130767c3ce3"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Checklist: Configure DNS Client Settings</maml:linkText><maml:uri href="mshelp://windows/?id=473afe1a-0d68-422f-8194-0d63007ba3ef"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Checklist: Migrate a DNS Server</maml:linkText><maml:uri href="mshelp://windows/?id=f4fb1647-4ad8-4a92-91e1-ccc72d1ec193"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Checklist: Create a Reverse Lookup Zone</maml:linkText><maml:uri href="mshelp://windows/?id=df7d2a74-f697-4af1-a6b1-c2bd41e18e65"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Installing and Configuring Servers</maml:linkText><maml:uri href="mshelp://windows/?id=f0e5d191-727c-44d9-976f-1b748f3f7876"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Managing Servers and Zones</maml:linkText><maml:uri href="mshelp://windows/?id=aca0968d-b719-4943-b04e-29c5c420147d"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Adding Zones</maml:linkText><maml:uri href="mshelp://windows/?id=6ac5194f-7b7d-405a-a229-3e04bbdc40a0"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Configuring Zone Properties</maml:linkText><maml:uri href="mshelp://windows/?id=1b10e5bb-6f3a-4b81-bcbc-3a2d0330fadf"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Managing Resource Records</maml:linkText><maml:uri href="mshelp://windows/?id=68c3652a-0c55-49b6-ae2e-9ce3f06e4d99"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Managing Clients</maml:linkText><maml:uri href="mshelp://windows/?id=bc5c7ee2-8e40-41b9-9763-7e8d4601d99d"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Securing DNS</maml:linkText><maml:uri href="mshelp://windows/?id=0f8cb43b-2e83-407c-8551-fe4f446a4a81"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Troubleshooting DNS</maml:linkText><maml:uri href="mshelp://windows/?id=08a4b951-74f2-4805-973e-e096d69b3dfa"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>DNS Tools</maml:linkText><maml:uri href="mshelp://windows/?id=412a919f-4249-4341-aecd-bdb35d266338"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>User Interface: DNS Server</maml:linkText><maml:uri href="mshelp://windows/?id=c2c0a226-364e-4c4d-88ee-5c3ef2b3023f"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction><maml:content><maml:sections></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Understanding Zone Types</maml:title><maml:introduction>
<maml:para>The DNS Server service provides for three types of zones:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Primary zone</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Secondary zone</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Stub zone</maml:para>
</maml:listItem>
</maml:list>
<maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>If the DNS server is also an Active Directory Domain Services (AD DS) domain controller, primary zones and stub zones can be stored in AD DS. See <maml:navigationLink><maml:linkText>Understanding Active Directory Domain Services Integration</maml:linkText><maml:uri href="mshelp://windows/?id=427144ca-37ce-4db7-a611-605338ec01ca"></maml:uri></maml:navigationLink> for more information.</maml:para>
</maml:alertSet>
<maml:para>The following sections describe each of these zone types.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Primary zone</maml:title><maml:introduction>
<maml:para>When a zone that this DNS server hosts is a primary zone, the DNS server is the primary source for information about this zone, and it stores the master copy of zone data in a local file or in AD DS. When the zone is stored in a file, by default the primary zone file is named <maml:replaceable>zone_name</maml:replaceable>.dns and it is located in the %windir%\System32\Dns folder on the server.</maml:para>
</maml:introduction></maml:section><maml:section>
<maml:title>Secondary zone</maml:title><maml:introduction>
<maml:para>When a zone that this DNS server hosts is a secondary zone, this DNS server is a secondary source for information about this zone. The zone at this server must be obtained from another remote DNS server computer that also hosts the zone. This DNS server must have network access to the remote DNS server that supplies this server with updated information about the zone. Because a secondary zone is merely a copy of a primary zone that is hosted on another server, it cannot be stored in AD DS.</maml:para>
</maml:introduction></maml:section><maml:section>
<maml:title>Stub zone</maml:title><maml:introduction>
<maml:para>When a zone that this DNS server hosts is a stub zone, this DNS server is a source only for information about the authoritative name servers for this zone. The zone at this server must be obtained from another DNS server that hosts the zone. This DNS server must have network access to the remote DNS server to copy the authoritative name server information about the zone.</maml:para>
<maml:para>You can use stub zones to:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Keep delegated zone information current. By updating a stub zone for one of its child zones regularly, the DNS server that hosts both the parent zone and the stub zone will maintain a current list of authoritative DNS servers for the child zone.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Improve name resolution. Stub zones enable a DNS server to perform recursion using the stub zone's list of name servers, without having to query the Internet or an internal root server for the DNS namespace.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Simplify DNS administration. By using stub zones throughout your DNS infrastructure, you can distribute a list of the authoritative DNS servers for a zone without using secondary zones. However, stub zones do not serve the same purpose as secondary zones, and they are not an alternative for enhancing redundancy and load sharing.</maml:para>
</maml:listItem>
</maml:list>
<maml:para>There are two lists of DNS servers involved in the loading and maintenance of a stub zone:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>The list of master servers from which the DNS server loads and updates a stub zone. A master server may be a primary or secondary DNS server for the zone. In both cases, it will have a complete list of the DNS servers for the zone.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>The list of the authoritative DNS servers for a zone. This list is contained in the stub zone using name server (NS) resource records.</maml:para>
</maml:listItem>
</maml:list>
<maml:para>When a DNS server loads a stub zone, such as widgets.tailspintoys.com, it queries the master servers, which can be in different locations, for the necessary resource records of the authoritative servers for the zone widgets.tailspintoys.com. The list of master servers may contain a single server or multiple servers, and it can be changed anytime.</maml:para>
</maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Modify Security for the DNS Server Service on a Domain Controller</maml:title><maml:introduction>
<maml:para>You can use this procedure to specify who can administer the DNS Server service when it is running on a domain controller. It does not affect who can administer zones and resource records that are hosted on the server, however. </maml:para>
<maml:para>Membership in the <maml:phrase>Administrators</maml:phrase> group, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To modify security for the DNS Server service on a domain controller</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open DNS Manager.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the console tree, right-click the applicable server, and then click <maml:ui>Properties</maml:ui>.</maml:para>
<maml:para><maml:phrase>Where?</maml:phrase></maml:para>
<maml:para>DNS/<maml:replaceable>applicable DNS server</maml:replaceable></maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>On the <maml:ui>Security</maml:ui> tab, modify the list of member users or groups that are allowed to administer the applicable server.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open DNS Manager, click <maml:ui>Start</maml:ui>, point to <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>DNS</maml:ui>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Active Directory access control lists (ACLs) are supported for the DNS Server service only when it is running on a domain controller.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Configure a DNS Server for Use with Active Directory Domain Services</maml:linkText><maml:uri href="mshelp://windows/?id=b6793e7e-0bec-4865-a869-f947867dcc17"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Modify Security for a Directory-Integrated Zone</maml:linkText><maml:uri href="mshelp://windows/?id=0e462ebd-84fd-432b-a5cd-8c6f3cfa3225"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Modify Security for a Resource Record</maml:linkText><maml:uri href="mshelp://windows/?id=655b928d-8a7c-4b29-9ae6-b591be845ea7"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual>GIF89a 3 f 3 33 3f 3 3 3 f f3 ff f f f 3 f 3 f ̙ 3 f 3 3 33 f3 3 3 33 33333f3333333f 3f33ff3f3f3f3 333f3333 333f3̙333 333f333f f 3f ff f f f3 f33f3ff3f3f3ff ff3ffffffffff f3ffffff f3fff̙fff f3fffff 3 f ̙ 3 333f33̙3f f3ffff̙f 3f̙ 3f̙̙ 3f̙ 3 f 3 333f333f f3fffff̙ ̙3̙f̙̙̙ 3f̙ 3f 3 f 3 333f333f f3fffff 3f 3f̙ 3f ! , H*\ȰÇ#JHŋ3jȱǏ C@ɓ(S\ɲ˗0cʜI͛8s)O JѣH*]ʴӧPJJիXɵYb+ٳhӪEիۮdO%94nɵQՋ߿}Kgܹu[W0b KLѶ3{T\WhPLϝI.=wӬ][MvY̚sglzߧU ;a֏#ܶЕM"߫"Ozpr6ٜ|Oо#{ȩ+'BWc^ɡv!VWfX]ٕv}߈M]qȜ,XƸ4h_0Ƙ7Z($A<iH5E&4duMB9Y,bZ r9uw⊍m'v!wyZ]֗:r cgs%כJ!U|>(`%%|~8i]TVũ]egf""J"AַybZiC}Z(ʂzny}K |qmښH~imm n+>bV&yr I ^ <.Ҏ[g</G eb*Ʊ;Nx` |e
~ժg幉5L
?Fk4GC,w qMOpp}+L멲Kikk*BvA;r\Jg<)-
$vjɃ;55߆ S ߏ#N Wn9Fw.ᙃ礗W葚izG;.n.F.O'GoWog^9o>BޟƧ~? ^@ $H
Ƃ P4~Ń CHB(< S𭰅0 cHCͰ8d
spGaaHb?!pI 3P,g#JÚH`Q]tK7F+vq+h"<)N[:&$O"+h,# (F0юq\01w̢#%9GIR2k$ C~QDb&߈$1@#"10Ҏ$d :~C%#miKL.YJme1iIFTf0/YKjҘ3) DD Q5
f3]vН1IϾӥ{!J"'HЁz1C.P&t
hA_IRĥ5帽S%!h2 \2L0QST1.sK>3 E\9($kܨzj*@<*0J*ͣdiH>JT9Mtj^ ն~kP9GΕd]mWmmuOU bڿư*VQ*v-b״H.JNl.KZT.,@Z&,Pamk) ޚ~mjUOYg
-`{{ζfq,%].s6* |FMz6k!nv\zu{ W$jN#Jʩ
'L
[
-rY{`]Vӧ&+ حnO9X f.eSX%0
~c\}T|ű8$)t˄]zuH?9\LdŶ2e ?_hu{ xFEsNq,g v}{=7x.Ws^B疲}Vt7hfoI"]_\ԨN > :ɕ4V4HӰ2'=UZjH˷ӥtX,kks5M,Mj[{.6EswM;CXܔ 1mWo;giG+n=8<ݛm=6Cr~{ʙxkl[|;ve]j0ֆ)܋_3#/sM`ߚӺn (j䋥m+/!D Mԏ5Eac]sWV hUMǫ+tx^s%^ {R*֧d nlN W=)IQ{dg.}9eZ>ҩ&?7M9>tf5hV:jQSu|T5 hύ? v^_;Rj+ 8ž[tb3>GG\Eҕol]"O>Onm4v?҇N_y| cUQ7uPG |0H{t8#h~&x\wP"X{xSgyHTI}u|炻IMGONd~(XHXdg9(EK>UMGRDNׅDUvJWh'}x'(~ H5NHw&hT
K1|E]xNLe{xLjXu%|X x8<zXSg{ VL_zITwe%vdNt8`ї3LJ8f{(E[HMdf(wxE<LGW艗ttg7u.~w>XY~Tdz؏($ ;<maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Understanding Reverse Lookup</maml:title><maml:introduction>
<maml:para>In most Domain Name System (DNS) lookups, clients typically perform a forward lookup, which is a search that is based on the DNS name of another computer as it is stored in a host (A) resource record. This type of query expects an IP address as the resource data for the answered response.</maml:para>
<maml:para>DNS also provides a reverse lookup process, in which clients use a known IP address and look up a computer name based on its address. A reverse lookup takes the form of a question, such as "Can you tell me the DNS name of the computer that uses the IP address 192.168.1.20?"</maml:para>
<maml:para>DNS was not originally designed to support this type of query. One problem in supporting the reverse query process is the difference in how the DNS namespace organizes and indexes names and how IP addresses are assigned. If the only method to answer the previous question is to search in all domains in the DNS namespace, a reverse query would take too long and require too much processing to be useful.</maml:para>
<maml:para>To solve this problem, a special domain, the in-addr.arpa domain, was defined in the DNS standards and reserved in the Internet DNS namespace to provide a practical and reliable way to perform reverse queries. To create the reverse namespace, subdomains within the in-addr.arpa domain are formed, using the reverse ordering of the numbers in the dotted-decimal notation of IP addresses.</maml:para>
<maml:para>This reversed ordering of the domains for each octet value is necessary because, unlike DNS names, when IP addresses are read from left to right, they are interpreted in the opposite manner. When an IP address is read from left to right, it is viewed from its most generalized information (an IP network address) in the first part of the address to the more specific information (an IP host address) that is contained in the last octets.</maml:para>
<maml:para>For this reason, the order of IP address octets must be reversed when the in-addr.arpa domain tree is built. The IP addresses of the DNS in-addr.arpa tree can be delegated to organizations as they are assigned a specific or limited set of IP addresses within the Internet-defined address classes.</maml:para>
<maml:para>Finally, the in-addr.arpa domain tree, as it is built into DNS, requires an additional resource record type—the pointer (PTR) resource record—to be defined. This resource record creates a mapping in the reverse lookup zone that typically corresponds to a named host (A) resource record for the DNS computer name of a host in its forward lookup zone.</maml:para>
<maml:para>The in-addr.arpa domain applies to all TCP/IP networks that are based on Internet Protocol version 4 (IPv4) addressing. The New Zone Wizard automatically assumes that you are using this domain when you create a new reverse lookup zone. </maml:para>
<maml:para>If you are installing DNS and configuring reverse lookup zones for an Internet Protocol version 6 (IPv6) network, you can specify an exact name in the New Zone Wizard. This way, you can create reverse lookup zones in DNS Manager that can support IPv6 networks, which use a different special domain name, the ip6.arpa domain.</maml:para>
<maml:para>Additional information is available about IPv6 and DNS, including examples of how to create and use ip6.arpa domain names, in Request for Comments (RFC) 3596, "DNS Extensions to support IP version 6." For more information, refer directly to this RFC, which you can find on the RFC Editor Web site (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=240</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=240"></maml:uri></maml:navigationLink>).</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Example: reverse query (for IPv4 networks)</maml:title><maml:introduction>
<maml:para>The following illustration shows an example of a reverse query that is initiated by a DNS client to learn the name of another host (host-a) based on its IP address: 192.168.1.20.</maml:para>
<maml:para><maml:embedObject><maml:caption>Reverse query</maml:caption><maml:objectUri href="mshelp://windows/?id=7e821f18-10ac-422a-9f75-1f8f3acadb41" mimeType="image/gif"><maml:summary>Example: DNS reverse lookup</maml:summary></maml:objectUri></maml:embedObject></maml:para>
<maml:para>The reverse query process follows these steps:</maml:para>
<maml:list class="ordered">
<maml:listItem>
<maml:para>The client queries the DNS server for a pointer (PTR) resource record that maps to the IP address of 192.168.1.20 for host-a.</maml:para>
<maml:para>Because the query is for pointer (PTR) resource records, the resolver reverses the address and appends the in-addr.arpa domain to the end of the reverse address. This forms the fully qualified domain name (FQDN) (20.1.168.192.in-addr.arpa.) to be searched in a reverse lookup zone.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>After it is located, the authoritative DNS server for 20.1.168.192.in-addr.arpa can respond with the pointer (PTR) resource record information. This includes the DNS domain name for host-a, which completes the reverse lookup process.</maml:para>
</maml:listItem>
</maml:list>
<maml:para>Remember that, if the queried reverse name is not answerable from the DNS server, normal DNS resolution (either recursion or iteration) can be used to locate a DNS server that is authoritative for the reverse lookup zone and that contains the queried name. In this sense, the name resolution process that is used in a reverse lookup is identical to that of a forward lookup.</maml:para>
</maml:introduction></maml:section><maml:section>
<maml:title>Inverse queries</maml:title><maml:introduction>
<maml:para>Use of inverse queries is an outdated practice, originally proposed as part of the DNS standard to look up a host name based on its IP address. They use a nonstandard DNS query operation, and their use is limited to some of the earlier versions of Nslookup, a command-line utility for troubleshooting and testing the DNS Server service.</maml:para>
<maml:para>The DNS Server service recognizes and accepts inverse query messages, answering them with a fake inverse query response. For DNS servers running in Windows NT® Server 4.0, this support is available by default if the server computer has been updated to Service Pack 4 (SP4) or later.</maml:para>
<maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>The configuration of pointer (PTR) resource records and reverse lookup zones for identifying hosts by reverse query is strictly an optional part of the DNS standard implementation. You are not required to use reverse lookup zones, although for some networked applications, they are used to perform security checks.</maml:para>
</maml:alertSet>
</maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Troubleshooting zone problems</maml:title><maml:introduction></maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>What problem are you having?</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>I am having a problem related to zone transfers</maml:linkText><maml:uri href="mshelp://windows/?id=9cf831b9-0fe9-405a-a807-19e27aa406d3#BKMK_1"></maml:uri></maml:navigationLink>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>I am trying to use a zone delegation, but it appears to be broken</maml:linkText><maml:uri href="mshelp://windows/?id=9cf831b9-0fe9-405a-a807-19e27aa406d3#BKMK_2"></maml:uri></maml:navigationLink>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>I am having a different zone problem than the ones described here</maml:linkText><maml:uri href="mshelp://windows/?id=9cf831b9-0fe9-405a-a807-19e27aa406d3#BKMK_3"></maml:uri></maml:navigationLink>.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section address="BKMK_1">
<maml:title>I am having a problem related to zone transfers.</maml:title><maml:introduction>
<maml:para><maml:phrase>Cause:</maml:phrase> The DNS Server service is stopped, or the zone is paused.</maml:para>
<maml:para><maml:phrase>Solution:</maml:phrase> Verify that the master (source) and secondary (destination) Domain Name System (DNS) servers that are involved in completing the transfer of the zone are both started and that the zone is not paused at either server.</maml:para>
<maml:para>For more information, see <maml:navigationLink><maml:linkText>Start or Stop a DNS Server</maml:linkText><maml:uri href="mshelp://windows/?id=859fef3c-fec0-4b9f-9ac0-2b35045f527a"></maml:uri></maml:navigationLink>; <maml:navigationLink><maml:linkText>Pause or Resume a Zone</maml:linkText><maml:uri href="mshelp://windows/?id=1e0c881b-6dbb-4396-b725-61996bdc08bc"></maml:uri></maml:navigationLink>; <maml:navigationLink><maml:linkText>Understanding Zones</maml:linkText><maml:uri href="mshelp://windows/?id=2ad68d86-7a68-4363-b1b0-18fa66970dba"></maml:uri></maml:navigationLink>.</maml:para>
<maml:para><maml:phrase>Cause:</maml:phrase> The DNS servers that were used during a transfer do not have network connectivity with each other.</maml:para>
<maml:para><maml:phrase>Solution:</maml:phrase> Eliminate the possibility of a basic network connectivity problem between the two servers.</maml:para>
<maml:para>Using the <maml:computerOutputInline>ping</maml:computerOutputInline> command, contact each DNS server by its IP address from its remote counterpart.</maml:para>
<maml:para>For example, at the source server, use the <maml:computerOutputInline>ping</maml:computerOutputInline> command to test IP connectivity with the destination server. At the destination server, repeat the ping test, substituting the IP address for the source server.</maml:para>
<maml:para>Both ping tests should succeed. If they do not succeed, investigate and resolve intermediate network connectivity issues.</maml:para>
<maml:para><maml:phrase>Cause:</maml:phrase> The serial number is the same at both the source and destination servers. Because the value is the same at both servers, no zone transfer occurs between the servers.</maml:para>
<maml:para><maml:phrase>Solution:</maml:phrase> Using DNS Manager, perform the following tasks:</maml:para>
<maml:list class="ordered">
<maml:listItem>
<maml:para>Increase the value of the serial number for the zone at the master server (source) to a number greater than the value at the applicable secondary server (destination).</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>After you increase the serial number at the master server to a higher value than is used currently at the secondary server, initiate zone transfer at the secondary server.</maml:para>
</maml:listItem>
</maml:list>
<maml:para>When you are working in DNS Manager, you can view the zone serial number on the <maml:ui>Start of Authority (SOA)</maml:ui> tab in the applicable zone properties. To increase this number in the zone, click <maml:ui>Increment</maml:ui>.</maml:para>
<maml:para><maml:phrase>Cause:</maml:phrase> The master server (source) and its targeted secondary server (destination) are having interoperability-related problems.</maml:para>
<maml:para><maml:phrase>Solution:</maml:phrase> Investigate possible causes for any problems that might be related to interoperability between DNS servers running Windows Server 2008 and other DNS server implementations, such as an older version of the Berkeley Internet Name Domain (BIND) distribution.</maml:para>
<maml:para>Older BIND servers use an uncompressed zone transfer format. By default, servers running Windows Server 2008 (and later version BIND servers) use a faster, compressed format during zone transfers. To accommodate zone transfer with older BIND servers, you must change advanced server options at your DNS servers running Windows Server 2008.</maml:para>
<maml:para>Another possible interoperability issue is the use and inclusion of Windows Internet Name Service (WINS) forward lookup (WINS) resource records in a zone or their counterpart, the WINS reverse lookup (WINS-R) resource record that is used for reverse lookup zones. BIND servers do not recognize these records when the records are included in zone data that is being transferred, and they can flag these records as bad data, possibly failing the zone transfer.</maml:para>
<maml:para>To prevent these records from being used or included in zone transfers to BIND-based servers and other servers that do not recognize them, select the <maml:ui>Do not replicate this record</maml:ui> option when you configure WINS properties at the applicable zone.</maml:para>
<maml:para>For more information, see <maml:navigationLink><maml:linkText>Enable DNS to Use WINS Resolution</maml:linkText><maml:uri href="mshelp://windows/?id=a73a59b2-3140-46cc-940f-a280961c4ca5"></maml:uri></maml:navigationLink>.</maml:para>
<maml:para><maml:phrase>Cause:</maml:phrase> The zone has resource records or other data that cannot be interpreted by the DNS server.</maml:para>
<maml:para><maml:phrase>Solution:</maml:phrase> Verify that the zone does not contain incompatible data, such as unsupported resource records types or data errors.</maml:para>
<maml:para>In most cases, the DNS Server service supports all resource record types that are approved and required for Internet-standard DNS usage.</maml:para>
<maml:para>Also, verify that the server has not been configured in advance to prevent loading a zone when bad data is found and investigate its method for checking names. You can configure these settings with DNS Manager.</maml:para>
<maml:para><maml:phrase>Cause:</maml:phrase> Authoritative zone data is incorrect.</maml:para>
<maml:para><maml:phrase>Solution:</maml:phrase> If a zone transfer continues to fail, ensure that the zone does not contain nonstandard data.</maml:para>
<maml:para>If you edit zone files manually, be aware that records must be formatted and used according to standard record usage and formatting guidelines as specified in the Request for Comments (RFCs) for DNS. In most cases, user input and data errors can be avoided if records are added and managed with DNS Manager.</maml:para>
<maml:para>To determine if incorrect zone data is a likely source for a failed zone transfer, look in the DNS server event log for messages. You can also use the <maml:computerOutputInline>nslookup</maml:computerOutputInline> command with the <maml:computerOutputInline>-ls</maml:computerOutputInline> option to simulate and test a zone transfer, while observing if the data that is returned terminates before full transfer of the zone is complete.</maml:para>
</maml:introduction></maml:section>
<maml:section address="BKMK_2">
<maml:title>I am trying to use a zone delegation, but it appears to be broken.</maml:title><maml:introduction>
<maml:para><maml:phrase>Cause:</maml:phrase> Zone delegations are not configured correctly.</maml:para>
<maml:para><maml:phrase>Solution:</maml:phrase> Review how zone delegations are used, and revise your zone configurations as needed.</maml:para>
<maml:para>Zones contain information about DNS domains and subdomains. For each new zone you create, the zone originally begins as a single-node database for one DNS domain. As necessary, new subdomain nodes can be added directly below the original (parent) domain and stored as a single zone. Sometimes, when new subdomains remain part of the same zone, they are called subzones.</maml:para>
<maml:para>If they are used as subzones, new subdomains are retained as part of the zone and replicated and updated along with the zone as a single entity. You can, however, delegate subdomains away and manage them in their own zones. For each subdomain that is delegated to its own zone, the parent zone must have delegation records added to it.</maml:para>
<maml:para>You can use the New Delegation Wizard in DNS Manager to simplify the addition of these records.</maml:para>
<maml:para>For more information, see <maml:navigationLink><maml:linkText>Understanding Zone Delegation</maml:linkText><maml:uri href="mshelp://windows/?id=7cbe9c5e-4187-4fa2-a512-f6162162f22e"></maml:uri></maml:navigationLink>; <maml:navigationLink><maml:linkText>Create a Zone Delegation</maml:linkText><maml:uri href="mshelp://windows/?id=1f34d4ad-0201-400e-9219-f5818c1da2f7"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction></maml:section>
<maml:section address="BKMK_3">
<maml:title>I am having a different zone problem than the ones described here.</maml:title><maml:introduction>
<maml:para><maml:phrase>Cause:</maml:phrase> My problem is not described above.</maml:para>
<maml:para><maml:phrase>Solution:</maml:phrase> Search TechNet (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=170</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=170"></maml:uri></maml:navigationLink>) for the latest technical information that might relate to the problem. If necessary, you can obtain information and instructions that pertain to your problem or issue.</maml:para>
<maml:para>If you are connected to the Internet, the latest operating system updates are available at Microsoft Update (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=284</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=284"></maml:uri></maml:navigationLink>).</maml:para>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Securing the DNS Server Service</maml:title><maml:introduction>
<maml:para>To help secure the Domain Name System (DNS) servers in your network, use the following guidelines.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Examine and configure the default DNS Server service settings that affect security</maml:title><maml:introduction>
<maml:para>The following configuration options for the DNS Server service have security implications for both the standard and the Active Directory-integrated DNS Server service.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Default setting</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Interfaces</maml:para>
</maml:entry>
<maml:entry>
<maml:para>By default, a DNS Server service that is running on a multihomed computer is configured to listen for DNS queries using all of its IP addresses. Limit the IP addresses that the DNS Server service listens on to the IP address that its DNS clients use as their preferred DNS server.</maml:para>
<maml:para>For more information, see <maml:navigationLink><maml:linkText>Restrict a DNS server to listen only on selected addresses</maml:linkText><maml:uri href="mshelp://windows/?id=ebac15fc-5773-4cce-ae75-c67b7e3d31c0"></maml:uri></maml:navigationLink>.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Secure cache against pollution</maml:para>
</maml:entry>
<maml:entry>
<maml:para>By default, the DNS Server service is secured from cache pollution, which results when DNS query responses contain nonauthoritative or malicious data. The <maml:ui>Secure cache against pollution</maml:ui> option helps prevent an attacker from successfully polluting the cache of a DNS server with resource records that were not requested by the DNS server. Changing this default setting reduces the integrity of the responses that are provided by DNS Server service. </maml:para>
<maml:para>For more information, see <maml:navigationLink><maml:linkText>Secure the Server Cache Against Names Pollution</maml:linkText><maml:uri href="mshelp://windows/?id=f8090427-a526-435b-906e-7e961160ecb2"></maml:uri></maml:navigationLink>.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Disable recursion</maml:para>
</maml:entry>
<maml:entry>
<maml:para>By default, recursion is not disabled for the DNS Server service. This makes it possible for the DNS server to perform recursive queries on behalf of its DNS clients and DNS servers that have forwarded DNS client queries to it. Recursion may be used by attackers to deny the DNS Server service. Therefore, if a DNS server in your network is not intended to receive recursive queries, it should be disabled. </maml:para>
<maml:para>For more information, see <maml:navigationLink><maml:linkText>Disable Recursion on the DNS Server</maml:linkText><maml:uri href="mshelp://windows/?id=7558126a-cc90-4854-855d-533d706e7750"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Root hints</maml:para>
</maml:entry>
<maml:entry>
<maml:para>If you have an internal DNS root in your DNS infrastructure, configure the root hints of internal DNS servers to point only to the DNS servers that host your root domain, not the DNS servers that host the Internet root domain. This prevents your internal DNS servers from sending private information over the Internet when they resolve names. </maml:para>
<maml:para>For more information, see <maml:navigationLink><maml:linkText>Update Root Hints on the DNS Server</maml:linkText><maml:uri href="mshelp://windows/?id=5234e7b1-0efc-4495-8e42-8c85d7389fc3"></maml:uri></maml:navigationLink> and <maml:navigationLink><maml:linkText>Updating Root Hints</maml:linkText><maml:uri href="mshelp://windows/?id=7fc91f3b-c926-4dd7-a9f5-8d140d261a14"></maml:uri></maml:navigationLink>.</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction></maml:section><maml:section>
<maml:title>Manage the DACL on DNS servers running on domain controllers</maml:title><maml:introduction>
<maml:para>In addition to the already described default DNS Server service settings that affect security, DNS servers that are configured as domain controllers use a discretionary access control list (DACL). You can use the DACL to control the permissions for the Active Directory users and groups that control the DNS Server service. </maml:para>
<maml:para>The following table lists the default group or user names and permissions for the DNS Server service when it is running on a domain controller. </maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Group or user names</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Permissions</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Administrators</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Allow: Read, Write, Create All Child objects, Special Permissions</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Creator Owner</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Special Permissions</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>DnsAdmins</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Allow: Read, Write, Create All Child objects, Delete Child objects, Special Permissions</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Domain Admins</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Allow: Full Control, Read, Write, Create All Child objects, Delete Child objects</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Enterprise Admins</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Allow: Full Control, Read, Write, Create All Child objects, Delete Child objects</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Enterprise Domain Controllers</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Allow: Special Permissions</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Pre-Windows 2000 Compatible Access</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Allow: Special Permissions</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>System</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Allow: Full Control, Read, Write, Create All Child objects, Delete Child objects</maml:para>
</maml:entry></maml:row>
</maml:table>
<maml:para>When the DNS Server service is running on a domain controller, you can manage its DACL using the Active Directory object MicrosoftDNS. Configuring the DACL on the MicrosoftDNS object has the same effect as configuring the DACL on the DNS server in DNS Manager, which is the recommended method. Consequently, the security administrators of Active Directory objects and DNS servers should be in direct contact to ensure that the administrators do not reverse each other's security settings.</maml:para>
<maml:para>For more information, see <maml:navigationLink><maml:linkText>Security Information for DNS</maml:linkText><maml:uri href="mshelp://windows/?id=eebcdbcb-eab3-47a8-8355-3e1189b38c7f"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Enable DNS to Use WINS Resolution</maml:title><maml:introduction>
<maml:para>The DNS Server service can use Windows Internet Name Service (WINS) servers to look up names that are not found in the Domain Name System (DNS) domain namespace by checking the NetBIOS namespace that is managed by WINS.</maml:para>
<maml:para>To use WINS lookup integration, two special resource record types—the WINS and WINS-R resource records—are enabled and added to a zone. When the WINS resource record is used, DNS queries that fail to find a matched host (A) resource record in the zone are forwarded to WINS servers that are configured in the WINS resource record. For reverse lookup zones, the WINS-R resource record can be enabled and used to provide a similar benefit for further resolving a reverse query that is not answerable in the reverse in-addr.arpa domain.</maml:para>
<maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>As an alternative to using WINS for resolving single-label host names, you can configure DNS client computers to use suffix search lists. You can also deploy a specially named zone, called GlobalNames, to provide name resolution for a limited set of centrally managed host names. For more information about these alternatives to WINS, see <maml:navigationLink><maml:linkText>Understanding DNS Client Settings</maml:linkText><maml:uri href="mshelp://windows/?id=4d785d45-dc9d-4ed2-ba73-e734d55d3319"></maml:uri></maml:navigationLink> and <maml:navigationLink><maml:linkText>Deploying a GlobalNames Zone</maml:linkText><maml:uri href="mshelp://windows/?id=acf8b192-752d-4459-b7e4-a404309fcf32"></maml:uri></maml:navigationLink>.</maml:para>
</maml:alertSet>
<maml:para>Membership in the <maml:phrase>Administrators</maml:phrase> group, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To enable DNS to use WINS resolution</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open DNS Manager.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the console tree, right-click the applicable zone, then click <maml:ui>Properties</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Do one of the following: </maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>If the applicable zone is a forward lookup zone, on the <maml:ui>WINS</maml:ui> tab, select the <maml:ui>Use WINS forward lookup</maml:ui> check box. In <maml:ui>IP address</maml:ui>, type the IP address of a WINS server to be used for resolution of names that are not found in DNS, and then click <maml:ui>Add</maml:ui>. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>If the applicable zone is a reverse lookup zone, on the <maml:ui>WINS-R</maml:ui> tab, select the <maml:ui>Use WINS-R lookup</maml:ui> check box. In <maml:ui>Domain to append to returned name</maml:ui>, type a name.</maml:para>
</maml:listItem>
</maml:list>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Select the <maml:ui>Do not replicate this record</maml:ui> check box for this WINS record, if applicable. </maml:para>
<maml:para>If you are replicating this zone between DNS servers that do not recognize the WINS or WINS-R resource records, select this check box. This prevents these records from being replicated to these other servers during zone transfers. If this zone will be used in performing zone transfers to BIND servers, this is a critical option because Berkeley Internet Name Domain (BIND) will not recognize WINS records.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open DNS Manager, click <maml:ui>Start</maml:ui>, point to <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>DNS</maml:ui>. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>When you enable this option, specified WINS servers that are configured in this procedure are used for final referral of names that are not found in the applicable zone.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>As an option, you can click <maml:ui>Advanced</maml:ui> to adjust advanced WINS lookup parameters.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Managing Servers and Zones</maml:title><maml:introduction>
<maml:para>You can use DNS Manager, the DNS snap-in in Microsoft Management Console (MMC), to manage the local Domain Name System (DNS) server as well as remote DNS servers. Using DNS Manager or a command line, you can start, stop, or pause a DNS server. You can also pause and restart individual zones that are hosted by the server. </maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Add a Server to DNS Manager</maml:linkText><maml:uri href="mshelp://windows/?id=6ed1eb2f-a859-410b-a809-84952f9c2789"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Remove a Server from DNS Manager</maml:linkText><maml:uri href="mshelp://windows/?id=29c4fd38-d829-45ae-8a03-b4dc82a281a7"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Start or Stop a DNS Server</maml:linkText><maml:uri href="mshelp://windows/?id=859fef3c-fec0-4b9f-9ac0-2b35045f527a"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Pause or Resume a Zone</maml:linkText><maml:uri href="mshelp://windows/?id=1e0c881b-6dbb-4396-b725-61996bdc08bc"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction><maml:content><maml:sections></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Deploying a GlobalNames Zone</maml:title><maml:introduction>
<maml:para>A common requirement in computer networks is the ability to resolve simple, single-label names. The use of single-label names makes it possible for a computer to access hosts such as file and Web servers by using short, easy-to-remember names instead of the fully qualified domain names (FQDNs) that form the default naming convention for Domain Name System (DNS). To make the use of single-label names possible, many networks deploy Windows Internet Name Service (WINS) technology and servers in their environment. As a name resolution protocol, WINS is an alternative to DNS. It is an older service that uses NetBIOS over TCP/IP (NetBT). WINS and NetBT do not support Internet Protocol version 6 (IPv6) protocols; therefore, they are being phased out in many networks. </maml:para>
<maml:para>To help network administrators migrate to DNS for all name resolution, the DNS Server role in Windows Server 2008 supports a specially named zone, called GlobalNames. By deploying a zone with this name, you can have the static, global records with single-label names, without relying on WINS. These single-label names typically refer to records for important, well-known and widely-used servers—servers that are already assigned static IP addresses and that are currently managed by IT-administrators using WINS. </maml:para>
<maml:para>The GlobalNames zone is not designed to be a complete replacement for WINS. You should not use the GlobalNames zone to support the name resolution of records that are dynamically registered in WINS, records which typically are not managed by IT administrators. Support for these dynamically registered records is not scalable, especially for larger customers with multiple domains or multiple forests.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Deciding if you need to deploy a GlobalNames zone</maml:title><maml:introduction>
<maml:para>Consider deploying a GlobalNames zone if:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>You are retiring WINS or you are planning to deploy only IPv6 in your environment, so that all name resolution will depend on DNS.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Your need for single-label name resolution is limited to important servers or Web sites that can be statically registered in DNS. (Typically, these names are also configured statically and globally in the WINS database.) Host names cannot be registered in the GlobalNames zone by dynamic updates. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>You cannot rely on the suffix search lists on client computers to provide single-label name resolution; for example, because the number of target domains is too great or the domains cannot be centrally managed to guarantee that host names will be unique. For more information about using suffix search lists, see <maml:navigationLink><maml:linkText>Understanding DNS Client Settings</maml:linkText><maml:uri href="mshelp://windows/?id=4d785d45-dc9d-4ed2-ba73-e734d55d3319"></maml:uri></maml:navigationLink>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>All the DNS servers that are authoritative for your zones are servers running Windows Server 2008. To resolve names that are registered in the GlobalNames zone, all DNS servers that are authoritative for a zone and that serve client query requests must be running Windows Server 2008 and they must either be configured with a local copy of the GlobalNames zone or they must be able to contact remote DNS servers that host the GlobalNames zone.</maml:para>
</maml:listItem>
</maml:list>
<maml:para>We also recommend that the GlobalNames zone be integrated with Active Directory Domain Services (AD DS). This integration with AD DS ensures easier management and future scalability.</maml:para>
</maml:introduction></maml:section><maml:section>
<maml:title>Deploying a GlobalNames zone</maml:title><maml:introduction>
<maml:para>The specific steps for deploying a GlobalNames zone can vary somewhat, depending on the AD DS topology of your network.</maml:para>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Step 1: Create the GlobalNames zone</maml:title><maml:introduction>
<maml:para>The first step in deploying a GlobalNames zone is to create the zone on a DNS server that is a domain controller running Windows Server 2008. The GlobalNames zone is not a special zone type; rather, it is simply an AD DS-integrated forward lookup zone that is called GlobalNames. For information about creating a primary forward lookup zone, see <maml:navigationLink><maml:linkText>Add a Forward Lookup Zone</maml:linkText><maml:uri href="mshelp://windows/?id=7294aebb-0452-4412-b5de-fc09e6b01ed6"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Step 2: Enable GlobalNames zone support</maml:title><maml:introduction>
<maml:para>The GlobalNames zone is not available to provide name resolution until GlobalNames zone support is explicitly enabled by using the following command on every authoritative DNS server in the forest:</maml:para>
<dev:code>dnscmd <ServerName> /config /enableglobalnamessupport 1</dev:code>
<maml:para>where <maml:replaceable>ServerName</maml:replaceable> is the DNS name or IP address of the DNS server that hosts the GlobalNames zone. To specify the local computer, replace <maml:replaceable>ServerName</maml:replaceable> with a period (.), for example, <maml:codeInline>dnscmd . /config /enableglobalnamessupport 1</maml:codeInline>.</maml:para>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Step 3: Replicate the GlobalNames zone</maml:title><maml:introduction>
<maml:para>To make the GlobalNames zone available to all DNS servers and clients in a forest, replicate the zone to all domain controllers in the forest, that is, add the GlobalNames zone to the forest-wide DNS application partition. For more information, see <maml:navigationLink><maml:linkText>Change the Zone Replication Scope</maml:linkText><maml:uri href="mshelp://windows/?id=dbe90e28-fea7-4962-9429-d58cc42ddffd"></maml:uri></maml:navigationLink>.</maml:para>
<maml:para>If you want to limit the servers that will be authoritative for the GlobalNames zone, you can create a custom DNS application partition for replicating the GlobalNames zone. For more information, see <maml:navigationLink><maml:linkText>Understanding DNS Zone Replication in Active Directory Domain Services</maml:linkText><maml:uri href="mshelp://windows/?id=e93c32c9-0c5c-4822-9c84-d464658d6ed3"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Step 4: Populate the GlobalNames zone</maml:title><maml:introduction>
<maml:para>For each server that you want to be able to provide single-label name resolution for, add an alias (CNAME) resource record to the GlobalNames zone. For more information, see <maml:navigationLink><maml:linkText>Add an Alias (CNAME) Resource Record to a Zone</maml:linkText><maml:uri href="mshelp://windows/?id=e54b0af1-e833-4195-9f4f-c80fe34ea4e9"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Step 5: Publish the location of the GlobalNames zone in other forests</maml:title><maml:introduction>
<maml:para>If you want DNS clients in other forests to use the GlobalNames zone for resolving names, add service location (SRV) resource records to the forest-wide DNS application partition, using the service name _globalnames._msdcs and specifying the FQDN of the DNS server that hosts the GlobalNames zone. For more information, see <maml:navigationLink><maml:linkText>Add a Resource Record to a Zone</maml:linkText><maml:uri href="mshelp://windows/?id=60d3d60f-3e84-4c6d-b377-0713e48bea2b"></maml:uri></maml:navigationLink> and <maml:navigationLink><maml:linkText>Service Location (SRV) Resource Record Dialog Box</maml:linkText><maml:uri href="mshelp://windows/?id=fbb93390-ad20-4e15-b0c9-53744e6f6e3e"></maml:uri></maml:navigationLink>.</maml:para>
<maml:para>In addition, you must run the <maml:computerOutputInline>dnscmd</maml:computerOutputInline> <maml:replaceable>ServerName</maml:replaceable> <maml:computerOutputInline>/config /enableglobalnamessupport</maml:computerOutputInline> <maml:computerOutputInline>1</maml:computerOutputInline> command on every authoritative DNS server in the forests that do not host the GlobalNames zone.</maml:para>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>By default, an authoritative DNS server uses local zone data first to respond to a query, before trying the GlobalNames zone to see if the name exists. If there is no relevant data in the GlobalNames zone and resolution using suffixes fails, resolution fails over to WINS. Querying local zone data first is a performance optimization. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Dynamic updates that are sent to an authoritative DNS server are checked against GlobalNames zone data first before being checked against local zone data. This ensures that GlobalNames zone names remain unique. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>No software updates are required for clients to enable them to resolve the names that are configured in the GlobalNames zone. Primary DNS suffix, connection-specific suffixes, and the DNS suffix search list continue to work as usual.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>DNS client registration is not affected unless a computer tries to register a name that is already configured in the GlobalNames zone. </maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Understanding Zones</maml:linkText><maml:uri href="mshelp://windows/?id=2ad68d86-7a68-4363-b1b0-18fa66970dba"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Understanding Zone Types</maml:linkText><maml:uri href="mshelp://windows/?id=94d8e229-ef7b-4b4f-884f-5fec92bbc911"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Understanding Active Directory Domain Services Integration</maml:linkText><maml:uri href="mshelp://windows/?id=427144ca-37ce-4db7-a611-605338ec01ca"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Configure DNS for Static Clients</maml:title><maml:introduction></maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title><maml:introduction>
<maml:para>To configure Domain Name System (DNS) for clients with statically configured IP addresses, you usually configure the following:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>DNS host name (or names) for the client computer.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Primary and alternate DNS servers that the client uses to assist in resolving DNS domain names.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>A list of DNS suffixes to be appended for use in completing unqualified DNS names, which are used for searching and submitting DNS queries at the client for resolution.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Connection-specific dynamic update and registration behavior, such as whether specific network adapters that are installed at the client dynamically register their configured IP addresses with a DNS server.</maml:para>
</maml:listItem>
</maml:list>
<maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>For more information about how to configure DNS for static clients, see the applicable TCP/IP or DNS client documentation that is provided by the appropriate vendor for these clients.</maml:para>
</maml:alertSet>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Understanding DNS Client Settings</maml:linkText><maml:uri href="mshelp://windows/?id=4d785d45-dc9d-4ed2-ba73-e734d55d3319"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Troubleshooting DNS Servers</maml:title><maml:introduction></maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>What problem are you having?</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>The DNS server is not responding to clients</maml:linkText><maml:uri href="mshelp://windows/?id=b09263e1-ab05-4f7f-a45b-7033bb490175#BKMK_1"></maml:uri></maml:navigationLink>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>The DNS server does not resolve names correctly</maml:linkText><maml:uri href="mshelp://windows/?id=b09263e1-ab05-4f7f-a45b-7033bb490175#BKMK_2"></maml:uri></maml:navigationLink>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>The DNS server appears to be affected by a problem for reasons not described here</maml:linkText><maml:uri href="mshelp://windows/?id=b09263e1-ab05-4f7f-a45b-7033bb490175#BKMK_3"></maml:uri></maml:navigationLink>.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section address="BKMK_1">
<maml:title>The DNS server is not responding to clients.</maml:title><maml:introduction>
<maml:para><maml:phrase>Cause:</maml:phrase> The Domain Name System (DNS) server is affected by a network failure.</maml:para>
<maml:para><maml:phrase>Solution:</maml:phrase> Verify that the server computer has a valid functioning network connection. First, check that related client hardware (cables and network adapters) are working properly at the client by using basic network and hardware troubleshooting steps.</maml:para>
<maml:para>If the server hardware appears to be prepared and functioning properly, check that it has network connectivity by using the <maml:computerOutputInline>ping</maml:computerOutputInline> command to contact other computers or routers (such as its default gateway) that are used and available on the same network as the affected DNS servers.</maml:para>
<maml:para><maml:phrase>Cause:</maml:phrase> The DNS server is reachable through basic network testing, but it is not responding to DNS queries from clients.</maml:para>
<maml:para><maml:phrase>Solution:</maml:phrase> If the DNS client can ping the DNS server computer, verify that the DNS server is started and able to listen to and respond to client requests. Try using the <maml:computerOutputInline>nslookup</maml:computerOutputInline> command to test whether the server can respond to DNS clients.</maml:para>
<maml:para>For more information, see <maml:navigationLink><maml:linkText>Start or Stop a DNS Server</maml:linkText><maml:uri href="mshelp://windows/?id=859fef3c-fec0-4b9f-9ac0-2b35045f527a"></maml:uri></maml:navigationLink>.</maml:para>
<maml:para><maml:phrase>Cause:</maml:phrase> The DNS server has been configured to limit service to a specific list of its configured IP addresses. The IP address originally used in testing its responsiveness is not included in this list.</maml:para>
<maml:para><maml:phrase>Solution:</maml:phrase> If the server was previously configured to restrict the IP addresses for which it responds to queries, it is possible that the IP address that are being used by clients to contact it is not in the list of restricted IP addresses that are permitted to provide service to clients.</maml:para>
<maml:para>Try testing the server for a response again, but specify a different IP address that is known to be in the restricted interfaces list for the server. If the DNS server responds for that address, add the missing server IP address to the list.</maml:para>
<maml:para><maml:phrase>Cause:</maml:phrase> The DNS server has been configured to disable the use of its automatically created default reverse lookup zones.</maml:para>
<maml:para><maml:phrase>Solution:</maml:phrase> Verify that automatically created reverse lookup zones have been created for the server or that advanced configuration changes have not been previously made to the server.</maml:para>
<maml:para>By default, DNS servers automatically create the following three standard reverse lookup zones based on Request for Comments (RFC) recommendations.</maml:para>
<maml:para>These zones are created with common IP addresses covered by these zones that are not useful in a reverse lookup search (0.0.0.0, 127.0.0.1, and 255.255.255.255). By being authoritative for the zones corresponding to these addresses, the DNS service avoids unnecessary recursion to root servers to perform reverse lookups on these types of IP addresses.</maml:para>
<maml:para>It is possible, although unlikely, that these automatic zones are not created. This is because disabling the creation of these zones involves advanced manual configuration of the server registry by a user.</maml:para>
<maml:para>To verify that these zones have been created, do the following:</maml:para>
<maml:list class="ordered">
<maml:listItem>
<maml:para>Open DNS Manager.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>On the <maml:ui>View</maml:ui> menu, click <maml:ui>Advanced</maml:ui>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>In the console tree, click <maml:ui>Reverse Lookup Zones</maml:ui>.</maml:para>
<maml:para><maml:phrase>Where?</maml:phrase></maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>DNS/<maml:replaceable>applicable DNS server</maml:replaceable>/Reverse Lookup Zones</maml:para>
</maml:listItem>
</maml:list>
</maml:listItem>
<maml:listItem>
<maml:para>In the details pane, verify that the following reverse lookup zones are present:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>0.in-addr.arpa</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>127.in-addr.arpa</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>255.in-addr.arpa</maml:para>
</maml:listItem>
</maml:list>
</maml:listItem>
</maml:list>
<maml:para><maml:phrase>Cause:</maml:phrase> The DNS server is configured to use a nondefault service port, for example, in an advanced security or firewall configuration.</maml:para>
<maml:para><maml:phrase>Solution:</maml:phrase> Verify that the DNS server is not using a nonstandard configuration.</maml:para>
<maml:para>This is a rare but possible cause. By default, the <maml:computerOutputInline>nslookup</maml:computerOutputInline> command sends queries to targeted DNS servers using User Datagram Protocol (UDP) port 53. If the DNS server is located on another network and is reachable only through an intermediate host (such as a packet-filtering router or proxy server), the DNS server might use a nonstandard port to listen for and receive client requests.</maml:para>
<maml:para>If this situation applies, determine whether any intermediate firewall or proxy server configuration is intentionally used to block traffic on well-known service ports that are used for DNS. If not, you might be able to add such a packet filter to these configurations to permit traffic to standard DNS ports.</maml:para>
<maml:para>Also, check the DNS server event log to see if Event ID 414 or other critical service-related events have occurred that might indicate why the DNS server is not responding.</maml:para>
</maml:introduction></maml:section>
<maml:section address="BKMK_2">
<maml:title>The DNS server does not resolve names correctly.</maml:title><maml:introduction>
<maml:para><maml:phrase>Cause:</maml:phrase> The DNS server provides incorrect data for queries that it answers successfully.</maml:para>
<maml:para><maml:phrase>Solution:</maml:phrase> Determine the cause of the incorrect data for the DNS server.</maml:para>
<maml:para>Some of the most likely causes include the following:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Resource records were not dynamically updated in a zone.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>An error was made when static resource records were manually added or modified in the zone.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Stale resource records in the DNS server database that were left from cached lookups or zone records were not updated with current information or removed when they were no longer needed.</maml:para>
</maml:listItem>
</maml:list>
<maml:para>To help prevent the most common types of problems, be sure to first review best practices for tips and suggestions for deploying and managing your DNS servers. Also, follow and use the checklists that are appropriate for installing and configuring DNS servers and clients, based on your deployment needs.</maml:para>
<maml:para>If you are deploying DNS for Active Directory Domain Services (AD DS), note the new directory-integration features. These features can cause some differences for DNS server defaults—when the DNS database is directory-integrated—that differ from the DNS server defaults that are used with traditional file-based storage.</maml:para>
<maml:para>Many DNS server problems start with failed queries at a client. Therefore, it is often a good idea to start there and troubleshoot the DNS client first.</maml:para>
<maml:para>For more information, see <maml:navigationLink><maml:linkText>Troubleshooting DNS Clients</maml:linkText><maml:uri href="mshelp://windows/?id=761844e5-12f2-4882-8f4d-103c5dc51e1b"></maml:uri></maml:navigationLink></maml:para>
<maml:para><maml:phrase>Cause:</maml:phrase> The DNS server does not resolve names for computers or services outside your immediate network, for example, the names of computers or services that are located on external networks or the Internet.</maml:para>
<maml:para><maml:phrase>Solution:</maml:phrase> The server has a problem with its ability to correctly perform recursion. Recursion is used in most DNS configurations to resolve names that are not located within the configured DNS domain name that is used by the DNS servers and clients.</maml:para>
<maml:para>If a DNS server fails to resolve a name for which it is not authoritative, the cause is usually a failed recursive query. Recursive queries are used frequently by DNS servers to resolve remote names that are delegated to other DNS zones and servers.</maml:para>
<maml:para>For recursion to work successfully, all DNS servers in the path of a recursive query must be able to respond to and forward correct data. If not, a recursive query can fail for any of the following reasons:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>The recursive query times out before it can be completed.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>A remote DNS server fails to respond.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>A remote DNS server provides incorrect data.</maml:para>
</maml:listItem>
</maml:list>
<maml:para><maml:phrase>Cause:</maml:phrase> The DNS server is not configured to use other DNS servers to assist it in resolving queries.</maml:para>
<maml:para><maml:phrase>Solution:</maml:phrase> Check whether the DNS server can use both forwarders and recursion.</maml:para>
<maml:para>By default, all DNS servers are enabled to use recursion, although the option to disable its use is configurable in DNS Manager to modify advanced server options. The other possible situation in which recursion might be disabled is if the server is configured to use forwarders and recursion has been specifically disabled for that configuration.</maml:para>
<maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>If you disable recursion on the DNS server, you will not be able to use forwarders on the same server.</maml:para>
</maml:alertSet>
<maml:para>For more information, see <maml:navigationLink><maml:linkText>Configure a DNS Server to Use Forwarders</maml:linkText><maml:uri href="mshelp://windows/?id=e324865f-1cbe-42ec-bf18-a220c0e26fe6"></maml:uri></maml:navigationLink>.</maml:para>
<maml:para><maml:phrase>Cause:</maml:phrase> Current root hints for the DNS server are not valid.</maml:para>
<maml:para><maml:phrase>Solution:</maml:phrase> Check whether server root hints are valid.</maml:para>
<maml:para>If they are configured and used correctly, root hints should always point to DNS servers that are authoritative for the zone that contains the domain root and top-level domains.</maml:para>
<maml:para>By default, DNS servers are configured to use root hints that are appropriate to your deployment, based on the following available choices when you use DNS Manager to configure a server:</maml:para>
<maml:list class="ordered">
<maml:listItem>
<maml:para>If the DNS server is installed as the first DNS server for your network, it is configured as a root server. </maml:para>
<maml:para>For this configuration, root hints are disabled at the server because the server is authoritative for the root zone.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>If the installed server is an additional DNS server for your network, you can direct the Configure a DNS Server Wizard to update its root hints from an existing DNS server on the network.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>If you do not have other DNS servers on your network but you still need to resolve Internet DNS names, you can use the default root hints file, which includes a list of Internet root servers that are authoritative for the Internet DNS namespace.</maml:para>
</maml:listItem>
</maml:list>
<maml:para><maml:phrase>Cause:</maml:phrase> The DNS server does not have network connectivity to the root servers.</maml:para>
<maml:para><maml:phrase>Solution:</maml:phrase> Test for connectivity to the root servers.</maml:para>
<maml:para>If root hints appear to be configured correctly, verify that the DNS server that is used in a failed query can ping its root servers by IP address.</maml:para>
<maml:para>If a ping attempt to one root server fails, it might indicate that an IP address for that root server has changed. Reconfiguration of root servers, however, is uncommon.</maml:para>
<maml:para>A more likely cause is a full loss of network connectivity or in some cases, poor network performance on the intermediate network links between the DNS server and its configured root servers. Follow basic TCP/IP network troubleshooting steps to diagnose connections and determine whether this is the problem.</maml:para>
<maml:para>By default, the DNS service uses a recursive time-out of 15 seconds before failing a recursive query. Under normal network conditions, this time-out does not have to be changed. If performance requires it, however, you can increase this value.</maml:para>
<maml:para>To review additional performance-related information for DNS queries, you can enable and use the DNS server debug log file, Dns.log. This log can provide extensive information about some types of service-related events.</maml:para>
<maml:para><maml:phrase>Cause:</maml:phrase> Other problems exist with updating DNS server data, such as an issue that is related to zones or dynamic updates.</maml:para>
<maml:para><maml:phrase>Solution:</maml:phrase> Determine whether the problem is related to zones. As needed, troubleshoot any issues in this area, such as possible failure of zone transfer.</maml:para>
<maml:para>For more information, see <maml:navigationLink><maml:linkText>Troubleshooting Dynamic Updates</maml:linkText><maml:uri href="mshelp://windows/?id=247d20d9-5731-4630-8370-ce79805a1f7f"></maml:uri></maml:navigationLink>; <maml:navigationLink><maml:linkText>Troubleshooting zone problems</maml:linkText><maml:uri href="mshelp://windows/?id=9cf831b9-0fe9-405a-a807-19e27aa406d3"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction></maml:section>
<maml:section address="BKMK_3">
<maml:title>The DNS server appears to be affected by a problem for reasons not described here.</maml:title><maml:introduction>
<maml:para><maml:phrase>Cause:</maml:phrase> My problem is not described here.</maml:para>
<maml:para><maml:phrase>Solution:</maml:phrase> Search TechNet (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=170</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=170"></maml:uri></maml:navigationLink>) for the latest technical information that might relate to the problem. If necessary, you can obtain information and instructions that pertain to your problem or issue.</maml:para>
<maml:para>If you are connected to the Internet, the latest operating system updates are available at Microsoft Update (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=284</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=284"></maml:uri></maml:navigationLink>).</maml:para>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Server Aging/Scavenging Properties Dialog Box</maml:title><maml:introduction>
<maml:para>When you configure the following settings for server properties, the settings apply as the default value for all zones. When they are configured at a specific zone, the settings apply only to that zone.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Item</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Details</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Scavenge stale resource records</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies whether stale resource records should be removed from the Domain Name System (DNS) database. </maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>No-refresh interval</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies an interval of time in either days or hours. When a resource record is refreshed, it is not refreshed again until this interval of time has elapsed.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Refresh</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies the minimum time that resource records are expected to remain in the DNS database after the no-refresh interval expires.</maml:para>
<maml:para>This interval should not be smaller than the maximum refresh period for any resource records. In most networks, this interval corresponds to the Dynamic Host Configuration Protocol (DHCP) lease renew interval. For DHCP servers running Windows Server, the default renew interval is four days.</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction><maml:content><maml:sections></maml:sections></maml:content><maml:relatedLinks type="seeAlso"><maml:title>See Also</maml:title><maml:navigationLink><maml:linkText>User Interface: DNS Server</maml:linkText><maml:uri href="mshelp://windows/?id=c2c0a226-364e-4c4d-88ee-5c3ef2b3023f"></maml:uri></maml:navigationLink></maml:relatedLinks></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>New Name Server Record Dialog Box</maml:title><maml:introduction>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Item</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Details</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Resolve</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Resolves the fully qualified domain name (FQDN) of the specified server computer to its IP address, verifies that the server is a name server, and adds it to the IP address list.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>IP Addresses of this NS Record</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Lists the IP addresses that the new name server will use to respond to Domain Name System (DNS) queries. To add an address, click somewhere in the list, and then type the address.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Delete</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Removes the selected IP address from the list of name servers.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Up</maml:ui></maml:para>
<maml:para><maml:ui>Down</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Moves the selected IP address up or down in the list. </maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction><maml:content><maml:sections></maml:sections></maml:content><maml:relatedLinks type="seeAlso"><maml:title>See Also</maml:title><maml:navigationLink><maml:linkText>User Interface: DNS Server</maml:linkText><maml:uri href="mshelp://windows/?id=c2c0a226-364e-4c4d-88ee-5c3ef2b3023f"></maml:uri></maml:navigationLink></maml:relatedLinks></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Configure a DNS Server for Use with Active Directory Domain Services</maml:title><maml:introduction></maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title><maml:introduction>
<maml:para>When you install Active Directory Domain Services (AD DS) with the Active Directory Domain Services Installation Wizard, the wizard gives you the option to automatically install and configure a DNS server. The resulting DNS zone is integrated with the AD DS domain that is controlled by the AD DS server.</maml:para>
<maml:para>To install AD DS on this computer, use Server Manager.</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>This method applies only to server computers that are used as domain controllers. If member servers (server that are not used as domain controllers) are used as DNS servers, they are not integrated with AD DS.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>If you choose the wizard option to automatically install and configure a local DNS server, the DNS server is installed on the computer where you are running the wizard and the computer's preferred DNS server setting is configured to use the new local DNS server. Configure any other computers that will join this domain to use this DNS server's IP address as their preferred DNS server.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Checklist: Add a Domain Controller with the DNS Server Service</maml:linkText><maml:uri href="mshelp://windows/?id=7c47acc8-e505-4d56-9849-226e53bff23d"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Understanding Active Directory Domain Services Integration</maml:linkText><maml:uri href="mshelp://windows/?id=427144ca-37ce-4db7-a611-605338ec01ca"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>New Host Dialog Box</maml:title><maml:introduction>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Item</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Details</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Name (uses parent domain name if blank)</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>The single-part name for a host (a computer or other device) in this zone. If this box is blank, the host name is the same as the parent domain name. If you need to add a name here that contains a period (.) to indicate the name of an additional domain level, first add the additional domain separately in DNS Manager and then add a new host record there as a single-part name.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Fully qualified domain name (FQDN)</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>The domain name to which this resource record applies. The FQDN uniquely identifies the DNS hierarchical tree by specifying a list of names that are separated by dots in the path from the referenced domain or host to the root.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>IP address</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Provides a space for you to type the IP address for the host that you specify in <maml:ui>Name</maml:ui>. The DNS server does not attempt to verify the existence of the host that is represented by this IP address. If you supply an Internet Protocol version 4 (IPv4) address, the DNS server creates a host (A) resource record. If you supply an Internet Protocol version 6 (IPv6) address, the DNS server creates an IPv6 host (AAAA) resource record.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Create associated pointer (PTR) record</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Creates a resource record in the reverse lookup zone. A pointer (PTR) resource record maps a reverse DNS domain name based on the IP address of a computer that points to the forward DNS domain name of that computer.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Allow any authenticated user to update DNS records with the same owner name</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>When this option is selected, it permits the resource record to be updated dynamically. When the update is performed, the host that requests the update is granted permission to modify the resource record, but all other nonadministrative permissions are removed from the access control list (ACL) that protects the resource record. This makes it possible for the administrator to create a secure resource record for a host that is not yet online and still enable the resource record to be updated dynamically when the host obtains its IP address through Dynamic Host Configuration Protocol (DHCP).</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction><maml:content><maml:sections></maml:sections></maml:content><maml:relatedLinks type="seeAlso"><maml:title>See Also</maml:title><maml:navigationLink><maml:linkText>User Interface: DNS Server</maml:linkText><maml:uri href="mshelp://windows/?id=c2c0a226-364e-4c4d-88ee-5c3ef2b3023f"></maml:uri></maml:navigationLink></maml:relatedLinks></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Managing Clients</maml:title><maml:introduction>
<maml:para>Client computers must be configured properly to work with the DNS servers that the clients rely on for resolving network names. You can configure client computers to receive their network addresses from Dynamic Host Configuration Protocol (DHCP) servers, or you can configure them with fixed addresses. You can also configure clients with additional settings to improve their ability to locate network hosts and to be located by them.</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Understanding DNS Client Settings</maml:linkText><maml:uri href="mshelp://windows/?id=4d785d45-dc9d-4ed2-ba73-e734d55d3319"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Enable DNS for DHCP-Enabled Clients</maml:linkText><maml:uri href="mshelp://windows/?id=806532cf-9b03-4777-bef4-d95c9d4136bb"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Configure DNS for Static Clients</maml:linkText><maml:uri href="mshelp://windows/?id=ad057afb-eb26-4077-b549-728b10c2a208"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction><maml:content><maml:sections></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>User Interface: DNS Server</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText><DNS Server Name> Properties Sheet</maml:linkText><maml:uri href="mshelp://windows/?id=5ad68930-7769-4385-8bd0-130ce0ec3d46"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText><Zone Name> Properties Sheet</maml:linkText><maml:uri href="mshelp://windows/?id=f39b0f49-8a74-4f7c-8615-87df497aeffb"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Advanced Dialog Box (WINS)</maml:linkText><maml:uri href="mshelp://windows/?id=81e08359-c427-45e9-93f1-399b1d54f5ab"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Mail Exchanger (MX) Resource Record Dialog Box</maml:linkText><maml:uri href="mshelp://windows/?id=6159f77f-25bb-42d2-9f6b-dd9905080d60"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>New ATM Address (ATMA) Resource Record Dialog Box</maml:linkText><maml:uri href="mshelp://windows/?id=67c6abe2-d3e2-4171-b9e6-70262651d1b2"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>New Host Dialog Box</maml:linkText><maml:uri href="mshelp://windows/?id=ba56ad95-2877-4f56-a9cc-7e2def9242f8"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>New Name Server Record Dialog Box</maml:linkText><maml:uri href="mshelp://windows/?id=b42fe706-4949-4965-bd17-1afbc909b4ad"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Notify Dialog Box</maml:linkText><maml:uri href="mshelp://windows/?id=6530ccbe-e6e1-4f5b-8d29-9529288ae9a6"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Server Aging/Scavenging Properties Dialog Box</maml:linkText><maml:uri href="mshelp://windows/?id=b17a56a8-61b6-4c6c-a717-cde3c8099916"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Service Location (SRV) Resource Record Dialog Box</maml:linkText><maml:uri href="mshelp://windows/?id=fbb93390-ad20-4e15-b0c9-53744e6f6e3e"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Zone Aging/Scavenging Properties Dialog Box</maml:linkText><maml:uri href="mshelp://windows/?id=18fe1818-f1f4-4633-a0bb-92fd6b275f88"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction><maml:content><maml:sections></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Securing DNS Resource Records</maml:title><maml:introduction>
<maml:para>The following Domain Name System (DNS) resource record configuration options have security implications for resource records that are stored in both standard DNS zones and Active Directory–integrated DNS zones:</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Manage the DACL on DNS resource records that are stored in Active Directory Domain Services</maml:title><maml:introduction>
<maml:para>You can use the discretionary access control list (DACL) to control the permissions for the Active Directory users and groups that may control the DNS resource records. For more information, see <maml:navigationLink><maml:linkText>Modify Security for a Resource Record</maml:linkText><maml:uri href="mshelp://windows/?id=655b928d-8a7c-4b29-9ae6-b591be845ea7"></maml:uri></maml:navigationLink>. </maml:para>
<maml:para>The following table lists the default group or user names and permissions for DNS resource records that are stored in Active Directory Domain Services (AD DS).</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Group or user names</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Permissions</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Administrators</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Allow: Read, Write, Create All Child objects, Special Permissions</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Authenticated Users</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Allow: Create All Child objects</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Creator Owner</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Special Permissions</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>DnsAdmins</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Allow: Full Control, Read, Write, Create All Child objects, Delete Child objects, Special Permissions</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Domain Admins</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Allow: Full Control, Read, Write, Create All Child objects, Delete Child objects</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Enterprise Admins</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Allow: Full Control, Read, Write, Create All Child objects, Delete Child objects</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Enterprise Domain Controllers</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Allow: Full Control, Read, Write, Create All Child objects, Delete Child objects, Special Permissions</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Everyone</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Allow: Read, Special Permissions</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Pre-Windows 2000 Compatible Access</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Allow: Special Permissions</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>System</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Allow: Full Control, Read, Write, Create All Child objects, Delete Child objects</maml:para>
</maml:entry></maml:row>
</maml:table>
<maml:para>For more information, see <maml:navigationLink><maml:linkText>Security Information for DNS</maml:linkText><maml:uri href="mshelp://windows/?id=eebcdbcb-eab3-47a8-8355-3e1189b38c7f"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Checklist: Use Forwarders</maml:title><maml:introduction>
<maml:para>By using a forwarder, you can manage name resolution for names that are outside your network, such as names on the Internet or names in other forests or domains.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Task</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Reference</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Read about forwarders.</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Understanding Forwarders</maml:linkText><maml:uri href="mshelp://windows/?id=52ec32f6-5eda-4d6a-8e38-809fee243b71"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Plan how you will deploy forwarders in your network.</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Using Forwarders</maml:linkText><maml:uri href="mshelp://windows/?id=e2dd91d6-441f-4175-9d1d-d152d148d73c"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Configure the firewall that your network uses to allow only one Domain Name System (DNS) server to communicate with the Internet.</maml:para>
</maml:entry>
<maml:entry>
<maml:para> </maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Configure other servers to use this DNS server as a forwarder.</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Configure a DNS Server to Use Forwarders</maml:linkText><maml:uri href="mshelp://windows/?id=e324865f-1cbe-42ec-bf18-a220c0e26fe6"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction><maml:content><maml:sections></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Planning DNS Servers</maml:title><maml:introduction>
<maml:para>When you plan your Domain Name System (DNS) servers, it is important to do the following:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Perform capacity planning, and review server hardware requirements.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Determine how many DNS servers you need and their role in your network. </maml:para>
<maml:para>When you consider the number of DNS servers to use, decide which servers will host primary and secondary copies of zones. Also, if you are using Active Directory Domain Services (AD DS), determine whether the server computer will perform as a domain controller or as a member server in the domain.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Decide where you are going to place DNS servers on your network for traffic loads, replication, and fault tolerance.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Decide if you are using only DNS servers running Windows Server 2008 for all your DNS servers or if you are operating a mixture of DNS server implementations. </maml:para>
</maml:listItem>
</maml:list>
</maml:introduction><maml:content><maml:sections><maml:section address="H2_56771598">
<maml:title>Server capacity planning</maml:title><maml:introduction>
<maml:para>Planning and deploying DNS servers on your network involves examining several aspects of your network and the capacity requirements for any DNS servers that you intend to use in it. Some questions to consider when you are planning DNS server capacity include the following:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>How many zones is the DNS server expected to load and host?</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>For each zone that the server is loading for service, how large is the zone (based on the size of the zone file or the number of resource records used in the zone)?</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>For a multihomed DNS server, how many interfaces are to be enabled for listening to and servicing DNS clients on each of the server's connected subnets?</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>How many total or overall DNS query requests from all of its clients is a DNS server expected to receive and service?</maml:para>
</maml:listItem>
</maml:list>
<maml:para>In many cases, adding more RAM to a DNS server can provide the most noticeable improvements in performance. This is because the DNS Server service fully loads all of its configured zones into memory at startup. If your server is operating and loading a large number of zones and dynamic updates occur frequently for zone clients, additional memory can be helpful.</maml:para>
<maml:para>Keep in mind that, for typical usage, the DNS server consumes system memory as follows:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Approximately 4 megabytes (MB) of RAM is used when the DNS server is started without any zones.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>For each addition of zones or resource records to the server, the DNS server consumes additional server memory.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>It is estimated that for the addition of every resource record to a server zone, an average of approximately 100 bytes of server memory is used. </maml:para>
<maml:para>For example, if a zone containing 1000 resource records is added to a server, it requires approximately 100 kilobytes (KB) of server memory.</maml:para>
</maml:listItem>
</maml:list>
<maml:para>When you determine your DNS server plans, you can start by reviewing sample DNS server performance test results that are collected by your DNS development and testing teams. In addition, you can use DNS server-related counters that are provided with monitoring tools to obtain your own performance measurements. </maml:para>
<maml:alertSet class="important"><maml:title>Important </maml:title>
<maml:para>The previous recommendations are not intended to indicate maximum performance or limitations for DNS servers. These numbers are approximate, and they can be influenced by the type of resource records entered in zones, the number of resource records with the same owner name, and the number of zones in use at a specific DNS server.</maml:para>
</maml:alertSet>
</maml:introduction></maml:section><maml:section address="H2_56774416">
<maml:title>Where to place DNS servers</maml:title><maml:introduction>
<maml:para>Most often, you will install DNS servers on all domain controllers. If, however, you have reason not to deploy DNS servers on every domain controller, you can follow these guidelines to choose where to place your DNS servers.</maml:para>
<maml:para>In general, place your DNS servers at a location on your network that is centrally accessible to your clients. It is often most practical to use a DNS server on each subnet. There are several questions to consider when you are deciding where a DNS server is needed: </maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>If you are deploying DNS to support AD DS, is the DNS server computer also a domain controller or is it likely to become a domain controller in the future?</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>If the DNS server stops responding, are its local clients able to gain access to an alternate DNS server?</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>If the DNS server is located on a subnet that is remote to some of its clients, what other DNS servers or name resolution options are available if the routed connection stops responding?</maml:para>
</maml:listItem>
</maml:list>
<maml:para>For example, if you have a routed local area network and high-speed links that are fairly reliable, you may be able to use one DNS server for a larger, multiple subnetted network area. If you have a high number of client nodes on a single subnet design, you may want to add more than one DNS server to the subnet to provide backup and failover if the preferred DNS server stops responding.</maml:para>
<maml:para>When you are determining the number of DNS servers that you need, assess the effect of zone transfers and DNS query traffic on slower links in your network. Although DNS is designed to help reduce broadcast traffic between local subnets, it does create some traffic between servers and clients that should be reviewed, particularly when the DNS servers are in local area network (LAN) or wide area network (WAN) environments with complex routing.</maml:para>
<maml:para>Consider the effects of zone transfer over slower speed links, such as those that are typically used for a WAN connection. Although the DNS Server service supports incremental zone transfers and DNS clients and servers can cache recently used names, traffic considerations are sometimes still an issue, particularly when Dynamic Host Configuration Protocol (DHCP) leases are shortened and, as a result, dynamic updates in DNS are performed more frequently. One option for dealing with remote locations on WAN links is to set up a DNS server at these locations to provide caching-only DNS service.</maml:para>
<maml:para>With most installations, you should have at least two server computers hosting each of your DNS zones, for fault tolerance. When you are making any final determinations about the number of servers to use, first assess the level of fault tolerance that is appropriate for your network.</maml:para>
<maml:para>When only a single DNS server is used on a small LAN in a single-subnet environment, you can configure the single server to simulate both the primary and secondary servers for a zone.</maml:para>
</maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Checklist: Create an Alias (CNAME) Record</maml:title><maml:introduction>
<maml:para>With alias (CNAME) resource records, you can use more than one name to point to a single computer. For example, you can use an alias (CNAME) resource record to allow a server named webserver.contoso.com to also be known as www.contoso.com.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Task</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Reference</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Read about alias (CNAME) resource records.</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Adding Resource Records</maml:linkText><maml:uri href="mshelp://windows/?id=f85711b2-d9ac-4e08-84d0-5082e1a7a5d6"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Add alias (CNAME) resource records as needed.</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Add an Alias (CNAME) Resource Record to a Zone</maml:linkText><maml:uri href="mshelp://windows/?id=e54b0af1-e833-4195-9f4f-c80fe34ea4e9"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction><maml:content><maml:sections></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Checklist: Use Resource Records</maml:title><maml:introduction>
<maml:para>In addition to enabling Domain Name System (DNS) clients to locate network resources by name, DNS also provides information about network services and the servers that host those services. This information is contained in resource records that you add to a zone to associate the network service with its host server. For example, to identify the mail server for a domain, you add an MX record to the zone that corresponds to the domain. </maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Task</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Reference</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Read about resource records.</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Adding Resource Records</maml:linkText><maml:uri href="mshelp://windows/?id=f85711b2-d9ac-4e08-84d0-5082e1a7a5d6"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Add resource records to a zone as needed.</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Add a Resource Record to a Zone</maml:linkText><maml:uri href="mshelp://windows/?id=60d3d60f-3e84-4c6d-b377-0713e48bea2b"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction><maml:content><maml:sections></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Enable Automatic Scavenging of Stale Resource Records</maml:title><maml:introduction>
<maml:para>The DNS Server service supports aging and scavenging features. These features are provided as a mechanism for performing cleanup and removal of stale resource records, which can accumulate in zone data over time. You can use this procedure to provide for automatic scavenging of resource records in the zones that are hosted by the Domain Name System (DNS) server. </maml:para>
<maml:para>Membership in the <maml:phrase>Administrators</maml:phrase> group, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To enable automatic scavenging of stale resource records</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open DNS Manager.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the console tree, right-click the applicable DNS server, and then click <maml:ui>Properties</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Click the <maml:ui>Advanced</maml:ui> tab.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Select the <maml:ui>Enable automatic scavenging of stale records</maml:ui> check box.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>To adjust the <maml:ui>Scavenging period</maml:ui>, in the drop-down list, select an interval in either hours or days, and then type a number in the text box.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open DNS Manager, click <maml:ui>Start</maml:ui>, point to <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>DNS</maml:ui>. </maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Understanding Aging and Scavenging</maml:linkText><maml:uri href="mshelp://windows/?id=7d9f6ea1-3d84-4841-b30d-fcf73a92e35d"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Change the Zone Replication Scope</maml:title><maml:introduction>
<maml:para>You can use the following procedure to change the replication scope for a zone. Only Active Directory Domain Services (AD DS)–integrated primary and stub forward lookup zones can change their replication scope. Secondary forward lookup zones cannot change their replication scope.</maml:para>
<maml:para>Membership in <maml:phrase>Administrators</maml:phrase>, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Changing zone replication scope</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using the Windows interface</maml:linkText><maml:uri href="mshelp://windows/?id=dbe90e28-fea7-4962-9429-d58cc42ddffd#BKMK_ui"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using a command line</maml:linkText><maml:uri href="mshelp://windows/?id=dbe90e28-fea7-4962-9429-d58cc42ddffd#BKMK_command"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section address="BKMK_ui"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To change zone replication scope using the Windows interface</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open DNS Manager.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the console tree, right-click the applicable zone, and then click <maml:ui>Properties</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>On the <maml:ui>General</maml:ui> tab, note the current zone replication type, and then click <maml:ui>Change</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Select a replication scope for the zone.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open DNS Manager, click <maml:ui>Start</maml:ui>, point to <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>DNS</maml:ui>.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section address="BKMK_command"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To change zone replication scope using the command line</maml:title><maml:introduction><maml:sections><maml:section><maml:title></maml:title><maml:introduction>
<maml:para></maml:para>
</maml:introduction></maml:section></maml:sections></maml:introduction><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>At a command prompt, type the following command, and then press ENTER:</maml:para>
<dev:code>dnscmd <ServerName> /ZoneChangeDirectoryPartition <ZoneName> <NewPartitionName></dev:code>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Parameter</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>dnscmd</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies the name of the command-line tool for managing DNS servers.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:replaceable><ServerName></maml:replaceable></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Specifies the Domain Name System (DNS) host name of the DNS server. You can also type the IP address of the DNS server. To specify the DNS server on the local computer, you can also type a period (.)</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>/ZoneChangeDirectoryPartition</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Changes a zone's replication scope.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:replaceable><ZoneName></maml:replaceable></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Specifies the fully qualified domain name (FQDN) of the zone.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:replaceable><NewPartitionName></maml:replaceable></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. The FQDN of the DNS application directory partition where the zone will be stored.</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open an elevated Command Prompt window, click <maml:ui>Start</maml:ui>, point to <maml:ui>All Programs</maml:ui>, click <maml:ui>Accessories</maml:ui>, right-click <maml:ui>Command Prompt</maml:ui>, and then click <maml:ui>Run as administrator</maml:ui>. </maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Checklist: Create a Reverse Lookup Zone</maml:title><maml:introduction>
<maml:para>Domain Name System (DNS) servers can enable clients to determine the DNS name of a host based on the host's IP address by providing a special zone called a reverse lookup zone. A reverse lookup zone contains pointer (PTR) resource records that map IP addresses to the host name. Some applications, such as secure Web applications, rely on reverse lookups. Create a reverse lookup zone only if applications running on your network require it. Otherwise, disable dynamic updates for pointer (PTR) resource records by client computers.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Task</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Reference</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Read about reverse lookups.</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Understanding Reverse Lookup</maml:linkText><maml:uri href="mshelp://windows/?id=99060a7c-f0bd-41e7-8ec8-5eeae2fbf0ad"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Create a reverse lookup zone.</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Add a Reverse Lookup Zone</maml:linkText><maml:uri href="mshelp://windows/?id=5b03fa70-89ad-4a21-a179-2e96a43dbe54"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction><maml:content><maml:sections></maml:sections></maml:content></maml:conceptual>GIF89a // &&||R__?VV9f_rrLiiFBB,99& YLL3 && YYBMM9rffL??/33&_̙|iLL9 rrVե||L9o?/_L9?/& < 3& o _ / //00//00))??OO& s&&33__``??ooppOOLLVV YYeeff``3&&̙ssO??ز߿pppooo```___PPPOOO@@@???000/// , H*\ȰÇ#JHŋ3jȱc7 C Iɓ(S\ɲ?iI͛8sSE 2h1hNϣH*]ʴiǟA7H@CQXjʵk60J ? ]˶ۜm$]b˷߿ &0! Xǐ
&l 08ϠC\ Yװc lPf^dv9`ͻУs]B
c3xXļsËI]4g|)S`gݽ E EP
U "Thf v ($h($-@AiBAU
J -#nDiH&L6PF)wI-8@5fBiv
#YӐTlpiSGd)#6P]@ IfkJ硈&袌 :'ve .pa:hB6*ꨤjBcy e! nuM+Mՙe80!t~Tfmr+&T{]k覫ñ8A]tP]VE UK赕afLd>2;!Qg w@ q+vRG"+d(ls5/
,q:JQ]YM{Tpv3K3׳su[0_]eG<v ݠr}vuؘ6ɽ^=8 )Y ] *e qÜy> z~w硳$©k-iz~ڀyMk)z` Wiu}o.={:sv :¾hET!5 G=n $%psy 7:IO㣞淵j"ãGd)n(@EvA
Pk \Xt=]qoo1E?Lx+
P>>Idao7GG1nl9ٷ(9Pl\2
p;Xr\)\ZL£:U .Đ̤&79?O)8H25`8V4R #A蔋@ S0(R &bG?eS~m0;d4(L&S+Y& RNaĜ z+gԙZVsa{J@A dWxSgMG;tljcDC A47v*Ju')I4+s8uD
]EŤQ >lK[j;3
aJSG:Q=z-wQғŋ, VjSUOknt=V*T7lK t-*ŔP
UuDhPVՍ浯9}^غg[0%X]i
V.5N:ɁհpgG Xv4"
H Ĭ.[;- ? ݫd#Vqꐷ-*neA~УTj[:וiUr}Z7P
+ u.N{x3 ƽ_|yuJ| _pF{aJup`ߨY ! 8#.&5UD0 |D;^
kM0MALXB7%p-.Vd?|Uј!~%ի OV/ THq er:P{ka2O5sM|eTDr d Kw#lns ^ a=Cmdk[[`&ElJg2Ғ-4b:tGͶO:"&9SzfC<wV]jXk뜥%\$ y~H}BQd7dvh<c4NNXpg{url/#VϽ0ۢo|xkrݲwxEVepmMy+*
W!7~Hg <q6#-ó%Wg>q 4Ϲa~s\@?.j<@WyƏ+]Lo̟KTկ~{\
o|.v^}nwft;4A\!-NƩJ I ^ㅏ<f]`;rƇSGo)9UDHseUL3$pwKRG
=$ ,ղN-&u}A?A*Re8QBOD:SU}km?+'nF_+WTCAzm1zQI#uT {k7/~A |]0{} g !
+(A-82^10~= Pw `'mp'ZVǴE98 eb1 U(/1l !{[8 t)a)ʗ{J WzJP0qrHW9ćc2 #cw/R B(7g9чNa' &}"+ `{00wt@ RS"X|Sqaa8zp0AQ 0H^sy(ht10#)b<x Xr8`ajb2g 5},X5 i"9$Y0{'-hN-p}&x Q fG cAUxEY ## H+@ P0Xp7O%.Yh -#n)tᏖ~r2f ub]u!%df^!]d=1U0(X#H dE2 J#ahl<%&)䘓@5-.yșʹN]*_PƘ
a9MF;c)eYb䙜] ICq A-$%-YIp?Y~bIHx#<t9 ӠjFG feM6eѡP Z T *ͩq7QQ&P8%*Id0- (; 7}) f"ϩb%ʝzyH Kqb`tEq)I Nǣǒ%F8t?Y q6p ec&ڥ Jj&V*JѢe*og
T VPZzZ:p,B`r i&! e O{ y9fe!ʥ:zHq1L x?U&K ꚪM`r`8~)ʤ )n8eBp_2zOPrH XA%74ѯZ;Y 1 F+p)CX? 0{ 0 klp#V}j-a/ PC )k-K1˧ 2 8! 0~G;J<j Y? P ɵ 5B Ѷ.@ 3댇cL~}7;,HkK%*`q봸Zhdaj{[{ V˰ !A q> a)/ K *MPA,r P!хuQ9͑L1O;, [ $aQP8& qc A '˚&k M%qQ|r
pAK)0I
P &8(Y -qVsM
6(4o.s \ YR`a}B wOƒqVwp<Zw N?Hl[qNjdž|ȊlmȎ jȒ,]<ɖ 5s^Sj)oz\
ʗZbL1y FWHb WzʨcNJʙ^<ݹ=6֥#˙&\ ̮Llb\a !]b˴ܝLLhb|I \ESϑJ Q&! ^ʶ լi
a#ѐۉf]
\~x. 21=65
zta8&BxDYZG헕9EfIͲU|O -ωqհ m\Jh%b; juldةS]w cvng$=~fϽ|]8-זZך&ٞ !ڢ]Aڦڪڮ ьٲ]%۶ۈۼٴm ܮ=ĭ}ܦ-ܞЭ=ݖ]؝wG ]6}-=]T ~|x==g
u}`i[Bx
xI!. Ha ~n% !N#')>Ӹ qv:*@~9C<nrS0^6T#K=wͷ { c7}A kE+ n.xM02tuqw7nXpM> ) 貱O~B(~V{)lV)%grNNVUP+#%;jQľ*W Ǟj0 ;kHLr;-SG^/̎,t!}e TQN&{LIf o.-XY A3=cƃ0x{]=zܑ| Ox\&q`+0 2n?
ɓ"4_tIC1WK?F/H/X!mXO_-{K̩E,ZGli l
)} ;GIF89a // &&||R__?VV9f_rrLiiFBB,99& YLL3 RR<&& YYBrffL??/33&_̙|siLL9 rrVϟ& 22|))s&&33i##??LLLLffYYo@@rrssŋƌM993&&̙ssfMMҦزٳ߿pppooo```___PPPOOO@@@???000/// , FT`TFb XH× կ \LHX " #j6 ŋ10ه$Jɓ({yٗ#
92͛8sb s0 @H@S$IH* @ڂ-JҫX l
`SVJYkL| U[ {ݻ҆`! k(]̸b%m!3-L MZ48KXϰc ]K Fn` ;m]הM9ڶk#U|g .!ONz9O]:uֳ_j(M(ObGEmNN L#wfg y!B
+0D"ML8`"(∕(8E IEi3 qHS dKL \!(EH&yd E OւIh =B#[W`<Hؐd9)PI% m ,VZ9Äl)H]`|)Qf&*$PAZ(6|)g
{ MЈ١)*.hcDof)|j:D^Ot_TȃRjx |E$x#,[~
Զk`˝h@[Ѻg "&
>HljbL_.)@T@,r]B1wG 2dLL<F-(4 e5FG EFRw=u
0NC1^ 10%jǝ a ,8]L@'M*e:#JQ"k9b*էkz+BEVю N:n?<ț*~||o|*G:Gp'r=*?}~S2~)?_?#?J 10!<:p
| Z
z wvl;
Q-| 3})Q p=
!1 E<D 2:|"m()ʰVt!-rф^LEЅ183Z`8Z#Iq0 WGHpB = `:{"F
U$6CT!$6NB qI(3I`,gIZ̥.w^2~0FvrL ٗKf:Ќ4IjZ̦63 !a 8 !l%YL(s<Iz$sͫEh HvI!ħBІ:' ZBl!T.
HGJҒT<EcI!v(}V#&ͩNwxԧi6Qʈڦ~~2@. UhTZuyhU9Au[*>TUa a2hZ?B^ֆN_;npO!c g]v
L[+LxWATҎ+f
h>-fYm=[JlCP,[$:E,}EL&
a. dbx
om{W onr5/m+UoOo{_w%, Q 9_p%i498
| V*&p锭ޕjo_w-ngIU^s$>oM\UgQ c6= 0!dp) SOxhNp&[|Ou
qyKx#汗Koכl3{Z SVȃ8HUȆTt4$<aFt)[qeXsSfkxa1 Y'Vcς3!%+@ .n4( MYFGҝ5iC^Ꮉ9 ;M:tqim+߮:vMr h].fkmilj o-rnA g]+!o͊<a2 ~G:ϸƵ
k`ϳĦ OW>Ԏ< 'K k'捧^ym3 O{/st?liLe6 gM˙w\G/9wn.OWoOv|`8 NK-Wnܾz=_osKN=^<
q7{7Bz9E\ˮZCg5۾{>]=uy^5?蟩u_> 1js_s?n/|;o7i O}=ɟ}?7tgU|~|uw6Gpc}r'~woW~|sX|~W (ȀLwh6{lxmG~wfx{SWc>x~X5X HJ'dtKVxׄpG1QXbHUZ
Qg#8%c؆nue(
Ɛ7Sxlxg`R j-SwfHz,hz.83hRhO
Ճ}gbWDȇ"%<?c7FS(8~$2fH{@f\W;V~lly[>؋}Bb .,c g '8sXjw|X@,
8{9&،$cgyHXhnXzpz<#=)==_U}z(87hM嘌(}Hg ђ"==2iS }'ɑ9 [HMy~!YD'O3"<c<Íh8Y툎 C ZḎXm9R 9T 36ks~(it9y)VXU<x|f ؙyQy9T}ISi)C t
=Y=y9 MIOy 9ԈXٍs?ɕ8Yؙ 92q繞yɞ90))k+ٟ7R98"
|eZ<'BĠʡ
:-&U 35%z.jw ),6Z1:5z< FӢ=:4ǝE#Dʣ4KjMJAVj?JIz\ڡY]U*f9Ozl
Vdm{`*vowy3P⤎ȧj0`j:$ ŨuqJ1 Z* 6grJ* X Z4KګNNqBϧJ*Ț'T&J:B
P Tq+4}1pP"3tA J "]' @(
O5Zj
P F슰dRNү
L ?7rrj 5 ֱ.u5"_R{!0݀+"Q0FW3w*"R
0RO"JG˴qdlJ
H
Y( 6a
])" b;+fI; Bvo2 b°>! L Ro!` @ 4/\P: i[(@6o1%O
^PW I@,op#(b#Tq 0 WZ` u Ѽl *h y:i:Kl % S;". Yj~[<2x#єG! 4{T{F1av!V(27`0 2<4<aAP瓛köS>;?×5LN,a3 hEh (Hm' (T <+M" PFd%0U EJ PNvxz|)1З<99ĸ=|ĪG\04ǎȐ N&ӥ/(o"!tk a+Kk
ci£x{<ȁC(W"#TLV,}a O1rbV KL
B <>,lE̛ ٓs8i5G+R O̠ L#̌ ʂ̰Ӡ ˍK?ϯ\дL&.@δb 3$
XQ!U"c PZ"L0 0lt p p!0}KQ5"<p#ͺ& %+p #`۫J`# ` Kn, #`Ԏ)"
Hx9 <P+$` 0Sj
X #1 ]ٔm̲+ M|wܰҷbq
=Ԑv F K;q
{qچ
=E ]ۍ5
Pൾ0 }3Ҫ} H! PҔuѽ
pJ[x ݚ l oT.EKl+й,YDk nVɄg @M V ư] `VhVˍߌL< τ. + ξ ]P
k+P6( hE^fd?pHжl=l Dl<웍gn&0 >0( + u(
х>"= @N`a4LjNH MYl@ Q' NIX\ $n> ^&+ \ `];@GNpnsHϫN;n<
\뗠R+ ^Rd]n
ͭ|# nCg+LH3@7 `kQLA3EkM8ə p[:J\.O 9Ѝ 4/Z< ?_&ϱ0+Moj.䃬kʙNOJRy~f%2|gjÚcZ!Oޞ\9X~?y ?_z+B߃99
˦@:\ݣ/@ð\$[iꜯQ ;GIF89a // &&||R__?VV9f_rrLiiF99& YLL3 && YYBrffL??/33&_̙|siLL9 rrVi__O漼& 33??LLffƌ3&&̙زٳ߿xxxpppooo```___PPPOOO@@@???000///,,,$$$ , 7CVL: ^G8Ц[>PĴ[ ^ BG 0`#JFA 48ď CL 1&ؑÑ0cʜ y]ȱK@
EebXrӧP%v,Z
,4ׯ`q
uc* ^n]5۷p3ŢYj^nm LÈ+^̸ǐ#KLc.|H9j]byr}9ӨS^ͺװc˞M9P:hm Nȓ+̉9U ^ν&N{^p0 mO7+9q,_; 6߁_ALqEzAN(}yxKQ 4a=^HA=Z*J`8⏃W"kV$'"+Ey 4aQHE;ܸWp
9`vexc>S{i¶d+MްCPJ9Y ph֙UdF&j YT<"zha%]GVhjF) 3q
2'uclq)韛jekZw)](,6,]^!9 m{gb{[")(l:ݲ!Ynvhh3 -Rټn{qr{/Ұuٍ<Œ\?ձ> /z=/m26R3lc[68;z*ԛ{< 7;1V+-,0jٸ2[Se[Vl'}JE_83^gN@.\ӌ H樧˙A_蔋FC@my+^ ;w -6/dOOK['Q81Fw
, ۣiϲ+l>އB כp<0~ F"rDŽ>Ū{S;0t[rQ/@P1` UBS 4AhAⰆ3D`(¿C ^e"CjЃNN(< ?4n8&Z1]=|:H5/X-G*0.0 UT^ |Y^l$'0>&7yK+AD(1JE>L*eIN,hKdKՒ M.]RDSfiK2H";_mo|%qJB3'2ph3GH:SP"ϙ;H3 2iOsOjDX Su
z@ sATwCDω 771rⓟ(vt!["UJGuNq\LD+:5$] QMtT79To;= 6f1ma P%V/ծj>=`by}g
jZ*^Qjc\ƙgUyB^5AW^r[KԖ.Yܠmu8yui;zѻNֱ~aaӨuA?:4J$l/KV7a4UMF> m%_s$:7qUn$.}ua7nw˶w%z#e&"덯^Ro}eN Np +
oًa\Px vSWtįWI30Y/3w̼ [@VUQ X.K*y nr} e
KٽTr|,k\0gwd 47I6mIB:Xt ߦh<
AZ9418*,ьpˏ) 0Mo^s`N1H %`='YMbؐ9rݓ]ns]
c%Ύ=
( yROrEwMr [4=%~ ii7y- !Nx">с@ۡ 0x88>
+>N*w$88΄-P:>T;B9xP'b2q (Îl9@!r/QBnr,6P]2;n5 #B@@`J^^x Hڮ5Օo l#24eOi(@қ=p`#| ߨ]bm<<mN*A#, %^ʅ2 JPc@NtX]`p HCxwJRC9_?yWֿ,AJ7g0uG P!2|ס #Pz`(7 i$X&x(*,.P~Ae#4xTK4T4HT@3(R'9BHEE 4Ђ*Nh(w
*'&#t@@[o၂MLl؆npr) 3h~5zTw~7|(cOBO5x4? 20( |ЀQp ' ehDi(N{x$N胢=~ȈԆ(W±T}@?^
X?xO=؇Q?H
O8 *ޤ QWO# ph5L<w(6 Oy! H0s.tQX A p{A`yy% L1 Px_ap
\A:4awQ@Y8~# gFiI9 MvVAv|L LYuV. yt1 p 0 fqv'DXqR9<0{r)& 2r^ pmܦrh!/VmDJ `*uu雬8Q! `Li o!Y 0+>
ynCwC 1qLs7o JH9
y4Wti !xXr^@֨ 'Ym Ip*
2
:ZʡB'X#J:p- & y? + [GТ2GPP% PG@J9&^h\b]:faazj`idxkzfo "m:eȃ4SXLh~j eJ$Kb~zfꊍdzZNƍd:Z:fui!j:ڬ*
6:]hjںt4J݈~J~WVGޘBaZGŊxxz:R!eة z
{S&ʱbVڈ90 /4 3[8 7<
;۳@
?
H(; ^PFHK
A״0
F;T[" A`(Y
U!ڷj Ng`xfhK
ĶXqok`q s nXv{ѷn * @vviye=1^8xGl ҹ۵:F a . `; (0Hw
KI˛kp _(9Z^ K`tHrB'q1]{xH ;[kگ5iÿ^ =0|'30oN2r9\cʥLxn-w#L_
8* C-|k^#چ7^$yɽ C9ЊM 0_P#R U5G [ Vr!ac\9ik8QR%>1;s̳9}z\ }ܳ*Gz=l<:{ q 0MBl[@yBeɝ: ?0$ʮDXʰ ˲<˴\˘(3hڑk4 yL [؋|ˤէ
RE"ԼlNVlw~٬`˲Պl> "{|A 3x͵Ȩa(Ú
늑DU*{J ;<maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Using Forwarders</maml:title><maml:introduction>
<maml:para>To use forwarders to manage the Domain Name System (DNS) traffic between your network and the Internet, configure your network's firewall to allow only one DNS server to communicate with the Internet. When you configure the other DNS servers in your network to forward queries that they cannot resolve locally to that DNS server, it acts as your forwarder. For more information about forwarders, see <maml:navigationLink><maml:linkText>Understanding Forwarders</maml:linkText><maml:uri href="mshelp://windows/?id=52ec32f6-5eda-4d6a-8e38-809fee243b71"></maml:uri></maml:navigationLink>. </maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Forwarding sequence</maml:title><maml:introduction>
<maml:para>The order of the IP addresses that are listed as forwarders on a DNS server determines the sequence in which the IP addresses are used. After the DNS server forwards the query to the forwarder with the first IP address, it waits a short period of time for an answer from that forwarder (according to the DNS server's forwarding time-out setting) before resuming the forwarding operation with the next IP address. It continues this process until it receives an affirmative answer from a forwarder.</maml:para>
<maml:para>For example, in the following illustration the DNS servers with the first and second forwarder IP addresses do not respond to the DNS server. The DNS server with the third forwarder IP address responds, and the query is forwarded to that DNS server.</maml:para>
<maml:para><maml:embedObject><maml:caption>Forwarding sequence</maml:caption><maml:objectUri href="mshelp://windows/?id=a94424e0-d4de-41f8-8893-7e8e9f465bbd" mimeType="image/gif"><maml:summary>Outsourced VPN remote access</maml:summary></maml:objectUri></maml:embedObject></maml:para>
<maml:para>Unlike conventional resolution, where a roundtrip time (RTT) is associated with each server, the IP addresses in the forwarders list are not ordered according to roundtrip time. You must reorder them manually to change the preference.</maml:para>
</maml:introduction></maml:section><maml:section>
<maml:title>Conditional forwarders</maml:title><maml:introduction>
<maml:para>Conditional forwarders are DNS servers that forward queries according to domain names. Rather than having a DNS server forward all queries it cannot resolve locally to a forwarder, you can configure DNS servers to forward queries to different forwarders according to the specific domain names that are contained in the queries. Forwarding according to domain names improves conventional forwarding by adding a name-based condition to the forwarding process. </maml:para>
<maml:para>The conditional forwarder setting for a DNS server consists of the following:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>The domain names for which the DNS server will forward queries</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>One or more DNS server IP addresses for each domain name that is specified</maml:para>
</maml:listItem>
</maml:list>
<maml:para>When a DNS client or server performs a query operation against a DNS server, the DNS server checks to determine if the query can be resolved with its own zone data or the data stored in its cache. If the DNS server is configured to forward for the domain name that is designated in the query, the query is forwarded to the IP address of a forwarder that is associated with that domain name. For example, in the following illustration, each of the queries for the domain names is forwarded to a DNS server that is associated with the domain name.</maml:para>
<maml:para><maml:embedObject><maml:caption>Conditional forwarder</maml:caption><maml:objectUri href="mshelp://windows/?id=624dd3fb-47aa-402e-87f8-773e8e9b828f" mimeType="image/gif"><maml:summary>Dial-up and VPN remote access</maml:summary></maml:objectUri></maml:embedObject></maml:para>
<maml:para>If the DNS server has no forwarder listed for the name that is designated in the query, it attempts to resolve the query using standard recursion. For more information, see <maml:navigationLink><maml:linkText>Configure a DNS Server to Use Forwarders</maml:linkText><maml:uri href="mshelp://windows/?id=e324865f-1cbe-42ec-bf18-a220c0e26fe6"></maml:uri></maml:navigationLink>.</maml:para>
<maml:para>You can use conditional forwarders to improve name resolution between internal (private) DNS namespaces that are not part of the DNS namespace of the Internet. Such DNS namespaces may be a result of a company merger. When you configure the DNS servers in one internal namespace to forward all queries to the authoritative DNS servers in a second internal namespace, conditional forwarders enable name resolution between the two namespaces without performing recursion on the DNS namespace of the Internet. This enhancement to name resolution also avoids your DNS servers performing recursion to your internal root for different namespaces within your network. </maml:para>
<maml:alertSet class="important"><maml:title>Important </maml:title>
<maml:para>A DNS server cannot forward queries for the domain names in the zones that it hosts. For example, the authoritative DNS server for the zone widgets.tailspintoys.com cannot forward queries according to the domain name widgets.tailspintoys.com. The DNS server that is authoritative for widgets.tailspintoys.com can forward queries for DNS names that end with hr.widgets.tailspintoys.com, if hr.widgets.tailspintoys.com is delegated to another DNS server.</maml:para>
</maml:alertSet>
</maml:introduction></maml:section><maml:section>
<maml:title>Conditional forwarder domain name length</maml:title><maml:introduction>
<maml:para>When a DNS server that is configured with a conditional forwarder receives a query for a domain name, it compares that domain name with its list of domain name conditions and uses the longest domain name condition that corresponds to the domain name in the query. For example, in the next illustration, the DNS server performs the following conditional forwarding logic to determine how a query for a domain name will be forwarded:</maml:para>
<maml:list class="ordered">
<maml:listItem>
<maml:para>The DNS server receives a query for toys.widgets.tailspintoys.com.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>It compares that domain name with both tailspintoys.com and widgets.tailspintoys.com.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>The DNS server determines that widgets.tailspintoys.com is the domain name that more closely matches the domain name query.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>The DNS server forwards the query to the DNS server with the IP address 172.31.255.255, which is associated with widgets.tailspintoys.com.</maml:para>
</maml:listItem>
</maml:list>
<maml:para><maml:embedObject><maml:caption>Conditional forwarding based on domain name length</maml:caption><maml:objectUri href="mshelp://windows/?id=10853d03-fe57-4f44-b77f-aa7dddd20a39" mimeType="image/gif"><maml:summary>Ethernet switch access</maml:summary></maml:objectUri></maml:embedObject></maml:para>
</maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Configure a DNS Server to Use Forwarders</maml:title><maml:introduction>
<maml:para>A forwarder is a Domain Name System (DNS) server on a network that is used to forward DNS queries for external DNS names to DNS servers outside that network. You can also configure your server to forward queries according to specific domain names using conditional forwarders. </maml:para>
<maml:para>A DNS server on a network is designated as a forwarder when the other DNS servers in the network are configured to forward the queries that they cannot resolve locally to that DNS server. By using a forwarder, you can manage name resolution for names outside your network, such as names on the Internet, which can improve the efficiency of name resolution for the computers in your network. For more information about forwarders and conditional forwarders, see <maml:navigationLink><maml:linkText>Understanding Forwarders</maml:linkText><maml:uri href="mshelp://windows/?id=52ec32f6-5eda-4d6a-8e38-809fee243b71"></maml:uri></maml:navigationLink>.</maml:para>
<maml:para>Membership in the <maml:phrase>Administrators</maml:phrase> group, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Configuring a DNS server to use forwarders</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using the Windows interface</maml:linkText><maml:uri href="mshelp://windows/?id=e324865f-1cbe-42ec-bf18-a220c0e26fe6#BKMK_winui"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using a command line</maml:linkText><maml:uri href="mshelp://windows/?id=e324865f-1cbe-42ec-bf18-a220c0e26fe6#BKMK_cmd"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction>
<maml:sections>
<maml:section address="BKMK_winui"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To configure a DNS server to use forwarders using the Windows interface</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open DNS Manager.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the console tree, click the applicable DNS server.</maml:para>
<maml:para><maml:phrase>Where?</maml:phrase></maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>DNS/<maml:replaceable>Applicable DNS server</maml:replaceable></maml:para>
</maml:listItem>
</maml:list>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>On the <maml:ui>Action</maml:ui> menu, click <maml:ui>Properties</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>On the <maml:ui>Forwarders</maml:ui> tab, under <maml:ui>DNS domain</maml:ui>, click a domain name.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Under <maml:ui>Selected domain's forwarder IP address list</maml:ui>, type the IP address of a forwarder, and then click <maml:ui>Add</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open DNS Manager, click <maml:ui>Start</maml:ui>, point to <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>DNS</maml:ui>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>To create a new domain name, click <maml:ui>New</maml:ui>, and then, under <maml:ui>DNS domain</maml:ui>, type the domain name. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>When you specify a conditional forwarder, select a DNS domain name before you enter an IP address.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>By default, the DNS server waits five seconds for a response from one forwarder IP address before it tries another forwarder IP address. In <maml:ui>Number of seconds before forward queries time out</maml:ui>, you can change the number of seconds that the DNS server waits. When the server has exhausted all forwarders, it attempts standard recursion.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>If you want the DNS server to only use forwarders and not attempt any further recursion if the forwarders fail, select the <maml:ui>Do not use recursion for this domain</maml:ui> check box.</maml:para>
<maml:para>You can disable recursion for the DNS server so that it will not perform recursion on any query. If you disable recursion on the DNS server, you will not be able to use forwarders on the same server. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Do not enter a forwarder's IP address more than once in a DNS server's forwarders list because it is a more reliable or geographically closer server. If you prefer one of the forwarders, put that forwarder first in the series of forwarder IP addresses.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>You cannot use a domain name in a conditional forwarder if the DNS server hosts a primary zone, secondary zone, or stub zone for that domain name. For example, if a DNS server is authoritative for the domain name <maml:replaceable>corp.contoso.com</maml:replaceable> (that is, it hosts the primary zone for that domain name), you cannot configure that DNS server with a conditional forwarder for <maml:replaceable>corp.contoso.com</maml:replaceable>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>You can prevent common problems that are associated with forwarders by configuring your DNS servers to avoid overusing your forwarders.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
<maml:section address="BKMK_cmd"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To configure a DNS server to use forwarders using a command line</maml:title><maml:introduction><maml:sections><maml:section><maml:title></maml:title><maml:introduction></maml:introduction></maml:section></maml:sections></maml:introduction><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open a command prompt.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Type the following command, and then press ENTER:</maml:para>
<dev:code>dnscmd <ServerName> /ResetForwarders <MasterIPaddress ...> [/TimeOut <Time>] [/Slave]
</dev:code>
</maml:section></maml:sections></maml:step></maml:procedure>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Parameter</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>dnscmd</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies the name of the command-line tool for managing DNS servers.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><ServerName></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Specifies the DNS host name of the DNS server. You can also type the IP address of the DNS server. To specify the DNS server on the local computer, you can also type a period (.). </maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>/ResetForwarders</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Configures a forwarder. </maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><MasterIPaddress...></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Specifies a space-separated list of one or more IP addresses of the DNS servers where queries are forwarded. You may specify a list of space-separated IP addresses.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>/TimeOut</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies the timeout setting. The timeout setting is the number of seconds before unsuccessful forward queries time out.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><Time></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies the value for the <maml:computerOutputInline>/TimeOut</maml:computerOutputInline> parameter. The value is in seconds. The default timeout is five seconds.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>/Slave</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Determines whether or not the DNS server uses recursion when it queries for the domain name that is specified by <maml:replaceable>ZoneName</maml:replaceable>.</maml:para>
</maml:entry></maml:row>
</maml:table>
<maml:para>To view the complete syntax for this command, at a command prompt, type the following command, and then press ENTER:</maml:para>
<dev:code>dnscmd /ResetForwarders /help </dev:code>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open an elevated Command Prompt window, click <maml:ui>Start</maml:ui>, point to <maml:ui>All Programs</maml:ui>, click <maml:ui>Accessories</maml:ui>, right-click <maml:ui>Command Prompt</maml:ui>, and then click <maml:ui>Run as administrator</maml:ui>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>To set the conditional forwarder for a zone, use the following command:</maml:para>
<dev:code>dnscmd <ServerName> /ZoneAdd <ZoneName> /Forwarder <MasterIPaddress ...> [/TimeOut <Time>] [/Slave]</dev:code>
<maml:para>The <maml:phrase>/ZoneAdd</maml:phrase> command adds the zone specified by the <maml:replaceable>ZoneName </maml:replaceable>parameter. The parameter <maml:replaceable>IPAddress</maml:replaceable> is the IP address where the DNS server will forward unsolvable DNS queries. The <maml:phrase>/Slave</maml:phrase> parameter sets the DNS server as a subordinate server. The <maml:phrase>/NoSlave</maml:phrase> parameter (default setting) sets the DNS server as a nonsubordinate server, which means that it will perform recursion. The <maml:phrase>/Timeout</maml:phrase> and <maml:replaceable>Time</maml:replaceable> parameters are described in the previous table.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>To view a zone that is added only as a conditional forwarder, use the following command:</maml:para>
<dev:code>dnscmd <ServerName> /ZoneInfo <ZoneName></dev:code>
</maml:listItem>
<maml:listItem>
<maml:para>To reset the forwarder IP addresses for a conditional forwarder domain name, use the following command: </maml:para>
<dev:code>dnscmd <ServerName> /ZoneResetMasters <ZoneName> [/Local] [<ServerIPs>]</dev:code>
<maml:para>The <maml:computerOutputInline>/Local</maml:computerOutputInline> parameter sets the local master list for Active Directory–integrated forwarders. The <maml:replaceable>ServerIPs</maml:replaceable> parameter is the list of one or more IP addresses of master servers for the zone. Master servers may include DNS servers that host primary or secondary copies of the zone, but they should not include DNS server IP addresses in such a way that two DNS servers that host copies of a zone use each other as master servers. Such a configuration makes the forwarding path cyclical.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>You cannot use a domain name in a conditional forwarder if the DNS server hosts a primary zone, secondary zone, or stub zone for that domain name. For example, if a DNS server is authoritative for the domain name <maml:replaceable>corp.contoso.com</maml:replaceable> (that is, it hosts the primary zone for that domain name), you cannot configure that DNS server with a conditional forwarder for <maml:replaceable>corp.contoso.com</maml:replaceable>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>You can prevent common problems that are associated with forwarders by configuring your DNS servers to avoid overusing your forwarders.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using Forwarders</maml:linkText><maml:uri href="mshelp://windows/?id=e2dd91d6-441f-4175-9d1d-d152d148d73c"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Add an Alias (CNAME) Resource Record to a Zone</maml:title><maml:introduction>
<maml:para>Alias (CNAME) resource records are also sometimes called canonical name resource records. With these records, you can use more than one name to point to a single host, making it easy to do such things as host both a File Transfer Protocol (FTP) server and a Web server on the same computer. For example, the well-known server names (ftp, www) are registered using alias (CNAME) resource records that map to the Domain Name System (DNS) host name, such as server-1, for the server computer that hosts these services.</maml:para>
<maml:para>Membership in the <maml:phrase>Administrators</maml:phrase> group, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Adding an alias (CNAME) resource record to a zone</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using the Windows interface</maml:linkText><maml:uri href="mshelp://windows/?id=e54b0af1-e833-4195-9f4f-c80fe34ea4e9#BKMK_winui"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using a command line</maml:linkText><maml:uri href="mshelp://windows/?id=e54b0af1-e833-4195-9f4f-c80fe34ea4e9#BKMK_cmd"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction>
<maml:sections>
<maml:section address="BKMK_winui"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To add an alias (CNAME) resource record to a zone using the Windows interface</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open DNS Manager.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the console tree, right-click the applicable forward lookup zone, and then click <maml:ui>New Alias</maml:ui>. </maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In <maml:ui>Alias name</maml:ui>, type the alias name.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In <maml:ui>Fully qualified domain name (FQDN) for target host</maml:ui>, type the FQDN of the DNS host computer for which this alias is to be used. </maml:para>
<maml:para>As an option, you can click <maml:ui>Browse</maml:ui> to search the DNS namespace for hosts in this domain that have host (A) resource records already defined.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Click <maml:ui>OK</maml:ui> to add the new record to the zone.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open DNS Manager, click <maml:ui>Start</maml:ui>, point to <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>DNS</maml:ui>.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
<maml:section address="BKMK_cmd"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To add an alias (CNAME) resource record to a zone using a command line</maml:title><maml:introduction><maml:sections><maml:section><maml:title></maml:title><maml:introduction>
<dev:code></dev:code>
</maml:introduction></maml:section></maml:sections></maml:introduction><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open a command prompt.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Type the following command, and then press ENTER: </maml:para>
<maml:para><maml:computerOutputInline>dnscmd</maml:computerOutputInline> <<maml:replaceable>ServerName></maml:replaceable> <maml:computerOutputInline>/RecordAdd</maml:computerOutputInline> <<maml:replaceable>ZoneName></maml:replaceable> <<maml:replaceable>NodeName></maml:replaceable> [<maml:computerOutputInline>/Aging</maml:computerOutputInline>] [<maml:computerOutputInline>/OpenAcl</maml:computerOutputInline>] [<<maml:replaceable>Ttl></maml:replaceable>] <maml:computerOutputInline>CNAME</maml:computerOutputInline> <<maml:replaceable>HostName></maml:replaceable>|<<maml:replaceable>DomainName</maml:replaceable>></maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Parameter</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>dnscmd </maml:para>
</maml:entry>
<maml:entry>
<maml:para>The command-line tool for managing DNS servers.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><ServerName> </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Specifies the DNS host name of the DNS server. You can also type the IP address of the DNS server. To specify the DNS server on the local computer, you can also type a period (.)</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>/RecordAdd </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Adds a new resource record.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><ZoneName> </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Specifies the name of the zone where this alias (CNAME) resource record will be added.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><NodeName> </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Specifies the FQDN of the node in the DNS namespace. You can also type the node name relative to the <maml:replaceable>ZoneName</maml:replaceable> or @, which specifies the zone's root node. </maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>/Aging </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies that this resource record is aged and scavenged. If this parameter is not used, the resource record remains in the DNS database unless it is manually updated or removed.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>/OpenAcl </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies that new records are open to modification by any user. Without this parameter, only administrators may modify the new record.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><Ttl> </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies the Time To Live (TTL) setting for the resource record. (The default TTL is defined in the start of authority (SOA) resource record.)</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>CNAME </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Specifies the resource record type of the record that you are adding.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><HostName>|<DomainName></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Specifies the FQDN of any valid DNS host or domain name in the namespace. For FQDNs, a trailing period (.) is used to fully qualify the name.</maml:para>
</maml:entry></maml:row>
</maml:table>
<maml:para>To view the complete syntax for this command, at a command prompt, type the following command, and then press ENTER:</maml:para>
<dev:code>dnscmd /RecordAdd /help </dev:code>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open an elevated Command Prompt window, click <maml:ui>Start</maml:ui>, point to <maml:ui>All Programs</maml:ui>, click <maml:ui>Accessories</maml:ui>, right-click <maml:ui>Command Prompt</maml:ui>, and then click <maml:ui>Run as administrator</maml:ui>. </maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>View When a Zone Can Start Scavenging Stale Records</maml:title><maml:introduction>
<maml:para>You can use this procedure to verify that a zone's scavenging interval is correct.</maml:para>
<maml:para>Membership in the <maml:phrase>Administrators</maml:phrase> group, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Viewing when a zone can start scavenging stale records</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using the Windows interface</maml:linkText><maml:uri href="mshelp://windows/?id=e8a9ee31-1613-43e4-b796-b74d5040a910#BKMK_winui"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using a command line</maml:linkText><maml:uri href="mshelp://windows/?id=e8a9ee31-1613-43e4-b796-b74d5040a910#BKMK_cmd"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction>
<maml:sections>
<maml:section address="BKMK_winui"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To view when a zone can start scavenging stale records using the Windows interface</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open DNS Manager.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>On the <maml:ui>View</maml:ui> menu, click <maml:ui>Advanced</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Right-click the applicable zone, and then click <maml:ui>Properties</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>On the <maml:ui>General</maml:ui> tab, click <maml:ui>Aging</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Under <maml:ui>Refresh interval</maml:ui>, view when the zone is first eligible to be scavenged for stale resource records.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open DNS Manager, click <maml:ui>Start</maml:ui>, point to <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>DNS</maml:ui>. </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>The start scavenging date and time stamp are used to determine when zone scavenging starts.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>After the start scavenging date and time stamp are reached, scavenging can occur only if the <maml:ui>Scavenge stale resource records</maml:ui> check box is selected. If the check box is cleared, scavenging for the zone cannot be performed.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
<maml:section address="BKMK_cmd"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To view when a zone can start scavenging stale records using a command line</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open a command prompt.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Type the following command, and then press ENTER: </maml:para>
<dev:code>dnscmd <ServerName> /ZoneInfo <ZoneName> RefreshInterval</dev:code>
</maml:section></maml:sections></maml:step></maml:procedure>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Parameter</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>dnscmd</maml:para>
</maml:entry>
<maml:entry>
<maml:para>The command-line tool for managing DNS servers.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><ServerName></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Specifies the DNS host name of the DNS server. You can also type the IP address of the DNS server. To specify the DNS server on the local computer, you can also type a period (.).</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>/ZoneInfo </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Displays configuration information.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><ZoneName> </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Specifies the fully qualified domain name (FQDN) of the zone.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>RefreshInterval </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Specifies the configuration property that displays when the zone is first eligible to be scavenged for stale resource records. The output value is in hours. The default setting is 168 hours (one week).</maml:para>
</maml:entry></maml:row>
</maml:table>
<maml:para>To view the complete syntax for this command, at a command prompt, type the following command, and then press ENTER:</maml:para>
<dev:code>dnscmd /ZoneInfo /help </dev:code>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open an elevated Command Prompt window, click <maml:ui>Start</maml:ui>, point to <maml:ui>All Programs</maml:ui>, click <maml:ui>Accessories</maml:ui>, right-click <maml:ui>Command Prompt</maml:ui>, and then click <maml:ui>Run as administrator</maml:ui>. </maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Understanding Aging and Scavenging</maml:linkText><maml:uri href="mshelp://windows/?id=7d9f6ea1-3d84-4841-b30d-fcf73a92e35d"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Understanding DNS Zone Replication in Active Directory Domain Services</maml:title><maml:introduction>
<maml:para>You can store Domain Name System (DNS) zones in the domain or application directory partitions of Active Directory Domain Services (AD DS). A partition is a data structure in AD DS that distinguishes data for different replication purposes. For more information, see <maml:navigationLink><maml:linkText>Understanding Active Directory Domain Services Integration</maml:linkText><maml:uri href="mshelp://windows/?id=427144ca-37ce-4db7-a611-605338ec01ca"></maml:uri></maml:navigationLink>.</maml:para>
<maml:para>The following table describes the available zone replication scopes for AD DS-integrated DNS zone data. </maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Zone replication scope</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>All DNS servers in the forest that are domain controllers running Windows Server 2003 or Windows Server 2008</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Replicates zone data to all Windows Server 2003 and Windows Server 2008 domain controllers running the DNS Server service in the AD DS forest. This option replicates zone data to the ForestDNSZones partition. Therefore, it provides the broadest replication scope.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>All DNS servers in the domain that are domain controllers running Windows Server 2003 or Windows Server 2008</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Replicates zone data to all Windows Server 2003 and Windows Server 2008 domain controllers running the DNS Server service in the Active Directory domain. This option replicates zone data to the DomainDNSZone partition. It is the default setting for DNS zone replication in Windows Server 2003 and Windows Server 2008.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>All domain controllers in the Active Directory domain</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Replicates zone data to all domain controllers in the Active Directory domain. If you want Windows 2000 DNS servers to load an Active Directory–integrated zone, you must specify this scope for that zone.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>All domain controllers in a specified application directory partition</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Replicates zone data according to the replication scope of the specified application directory partition. For a zone to be stored in the specified application directory partition, the DNS server hosting the zone must be enlisted in the specified application directory partition. Use this scope when you want zone data to be replicated to domain controllers in multiple domains but you do not want the data to replicate to the entire forest. For more information, see <maml:navigationLink><maml:linkText>Create a DNS Application Directory Partition</maml:linkText><maml:uri href="mshelp://windows/?id=66587c39-5a8f-401c-80f7-fa0528c1340f"></maml:uri></maml:navigationLink> and <maml:navigationLink><maml:linkText>Enlist a DNS Server in a DNS Application Directory Partition</maml:linkText><maml:uri href="mshelp://windows/?id=479b0f39-c62f-445c-9c66-363be93362c2"></maml:uri></maml:navigationLink>.</maml:para>
</maml:entry></maml:row>
</maml:table>
<maml:para>When you decide which replication scope to choose, consider that the broader the replication scope, the greater the network traffic caused by replication. For example, if you decide to have AD DS–integrated DNS zone data replicated to all DNS servers in the forest, this will produce greater network traffic than replicating the DNS zone data to all DNS servers in a single AD DS domain in that forest.</maml:para>
<maml:para>AD DS-integrated DNS zone data that is stored in an application directory partition is not replicated to the global catalog for the forest. The domain controller that contains the global catalog can also host application directory partitions, but it will not replicate this data to its global catalog.</maml:para>
<maml:para>AD DS-integrated DNS zone data that is stored in a domain partition is replicated to all domain controllers in its AD DS domain, and a portion of this data is stored in the global catalog. This setting is used to support Windows 2000.</maml:para>
<maml:para>If an application directory partition's replication scope replicates across AD DS sites, replication will occur with the same intersite replication schedule as is used for domain partition data.</maml:para>
<maml:para>By default, the Net Logon service registers domain controller locator (Locator) DNS resource records for the application directory partitions that are hosted on a domain controller in the same manner as it registers domain controller locator (Locator) DNS resource records for the domain partition that is hosted on a domain controller.</maml:para>
</maml:introduction><maml:content><maml:sections></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Restrict a DNS server to listen only on selected addresses</maml:title><maml:introduction>
<maml:para>By default, a DNS Server service that is running on a multihomed computer is configured to listen for DNS queries using all of its IP addresses. You can make the DNS server more secure by limiting the IP addresses that the DNS Server service listens on to the IP address that is used by its DNS clients as their preferred DNS server. </maml:para>
<maml:para>Membership in the <maml:phrase>Administrators</maml:phrase> group, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Restricting a DNS server to listen only on selected addresses</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using the Windows interface</maml:linkText><maml:uri href="mshelp://windows/?id=ebac15fc-5773-4cce-ae75-c67b7e3d31c0#BKMK_winui"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using a command line</maml:linkText><maml:uri href="mshelp://windows/?id=ebac15fc-5773-4cce-ae75-c67b7e3d31c0#BKMK_cmd"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section><maml:section address="BKMK_winui"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To restrict a DNS server to listen only on selected addresses using the Windows interface</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open DNS Manager.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the console tree, click the applicable DNS server.</maml:para>
<maml:para><maml:phrase>Where?</maml:phrase></maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>DNS/<maml:replaceable>applicable DNS server</maml:replaceable></maml:para>
</maml:listItem>
</maml:list>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>On the <maml:ui>Action</maml:ui> menu, click <maml:ui>Properties</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>On the <maml:ui>Interfaces</maml:ui> tab, click <maml:ui>Only the following IP addresses</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In <maml:ui>IP address</maml:ui>, type an IP address to be enabled for this DNS server , and then click <maml:ui>Add</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Repeat the previous step as necessary to specify other server IP addresses to be enabled for this DNS server. </maml:para>
<maml:para>To remove an IP address from the list, click it, and then click <maml:ui>Remove</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open DNS Manager, click <maml:ui>Start</maml:ui>, point to <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>DNS</maml:ui>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>By default, the DNS Server service listens for DNS message communications on all configured IP addresses for the server computer.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Server IP addresses that are added here must be managed statically. If you later change or remove the addresses specified here from the TCP/IP configurations that are maintained at this server, update this list accordingly.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>After you update or revise the list of restricted interfaces, you must stop and restart the DNS server to apply the new list.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Restricting the DNS Server service to only listen on specific IP addresses is an effective security measure because only hosts on the same network subnet, or hosts with a router that connects them to that same segment, have access to the server.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section><maml:section address="BKMK_cmd"><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To restrict a DNS server to listen only on selected addresses using a command line</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open a command prompt.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Type the following command, and then press ENTER:</maml:para>
<dev:code>dnscmd <ServerName> /ResetListenAddresses [<ListenAddress> ...]</dev:code>
</maml:section></maml:sections></maml:step></maml:procedure>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Parameter</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>dnscmd</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies the name of the command-line tool for managing DNS servers.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><ServerName></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Specifies the DNS host name of the DNS server. You can also type the IP address of the DNS server. To specify the DNS server on the local computer, you can also type a period (.).</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>/ResetListenAddresses</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Resets the IP addresses of the interfaces on which the DNS server listens.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><ListenAddress> ...</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies one or more IP addresses for the interfaces on which you want the DNS server to listen. By default, the DNS Server service listens for DNS message communications on all configured IP addresses for the server computer. </maml:para>
</maml:entry></maml:row>
</maml:table>
<maml:para>To view the complete syntax for this command, at a command prompt, type the following command, and then press ENTER:</maml:para>
<dev:code>dnscmd <ServerName> /ResetListenAddresses /help</dev:code>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Addiditonal considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open an elevated Command Prompt window, click <maml:ui>Start</maml:ui>, point to <maml:ui>All Programs</maml:ui>, click <maml:ui>Accessories</maml:ui>, right-click <maml:ui>Command Prompt</maml:ui>, and then click <maml:ui>Run as administrator</maml:ui>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Server IP addresses that you add here must be managed statically. If you later change or remove the addresses specified here from the TCP/IP configurations that are maintained at this server, update this list accordingly.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>After you update or revise the list of restricted interfaces, you must stop and restart the DNS server to apply the new list.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Restricting the DNS Server service to listen only on specific IP addresses is an effective security measure because only hosts on the same network subnet, or hosts with a router that connects them to that same segment, have access to the server.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Start or Stop a DNS Server</maml:linkText><maml:uri href="mshelp://windows/?id=859fef3c-fec0-4b9f-9ac0-2b35045f527a"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Configuring Multihomed Servers</maml:linkText><maml:uri href="mshelp://windows/?id=ff3bc7ae-5f22-4fc7-8b87-6028d7e7caf4"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Security Information for DNS</maml:linkText><maml:uri href="mshelp://windows/?id=eebcdbcb-eab3-47a8-8355-3e1189b38c7f"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Securing the DNS Server Service</maml:linkText><maml:uri href="mshelp://windows/?id=9f93a319-4e77-4c17-ad4a-10e3ea9847f1"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Securing DNS Clients</maml:linkText><maml:uri href="mshelp://windows/?id=f707d8fa-3e34-4b2a-b64e-e71adf2c6b69"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Security Information for DNS</maml:title><maml:introduction>
<maml:para>Domain Name System (DNS) was originally designed as an open protocol. Therefore, it is vulnerable to attackers. Windows Server 2008 DNS helps improve your ability to prevent an attack on your DNS infrastructure through the addition of security features. Before considering which of the security features to use, you should be aware of the common threats to DNS security and the level of DNS security in your organization.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>DNS security threats</maml:title><maml:introduction>
<maml:para>The following are the typical ways in which your DNS infrastructure can be threatened by attackers:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:phrase>Footprinting:</maml:phrase> The process by which DNS zone data is obtained by an attacker to provide the attacker with the DNS domain names, computer names, and IP addresses for sensitive network resources. An attacker commonly begins an attack by using this DNS data to diagram, or "footprint," a network. DNS domain and computer names usually indicate the function or location of a domain or computer to help users remember and identify domains and computers more easily. An attacker takes advantage of the same DNS principle to learn the function or location of domains and computers in the network.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:phrase>Denial-of-service attack:</maml:phrase> An attempt by an attacker to deny the availability of network services by flooding one or more DNS servers in the network with recursive queries. As a DNS server is flooded with queries, its CPU usage eventually reaches its maximum and the DNS Server service becomes unavailable. Without a fully operating DNS server on the network, network services that use DNS become unavailable to network users.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:phrase>Data modification:</maml:phrase> An attempt by an attacker (that has footprinted a network using DNS) to use valid IP addresses in IP packets the attacker has created, which gives these packets the appearance of coming from a valid IP address in the network. This is commonly called IP spoofing. With a valid IP address (an IP address within the IP address range of a subnet), the attacker can gain access to the network and destroy data or conduct other attacks.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:phrase>Redirection:</maml:phrase> An attacker redirecting queries for DNS names to servers under the control of the attacker. One method of redirection involves the attempt to pollute the DNS cache of a DNS server with erroneous DNS data that may direct future queries to servers under the control of the attacker. For example, if a query is originally made for widgets.tailspintoys.com and a referral answer provides a record for a name outside the tailspintoys.com domain, such as malicious-user.com, the DNS server uses the cached data for malicious-user.com to resolve a query for that name. Attackers can accomplish redirection whenever they have writable access to DNS data, for example, when dynamic updates are not secure.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section><maml:section>
<maml:title>Mitigating DNS security threats</maml:title><maml:introduction>
<maml:para>DNS can be configured to mitigate these common DNS security issues. The following table lists five main areas on which to focus your DNS security efforts.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>DNS security area</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>DNS namespace</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Incorporate DNS security into your DNS namespace design. For more information, see <maml:navigationLink><maml:linkText>Securing DNS Deployment</maml:linkText><maml:uri href="mshelp://windows/?id=1414cb7f-7305-448e-b26c-fc6f874bb6ec"></maml:uri></maml:navigationLink>.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>DNS Server service</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Review the default DNS Server service security settings and apply Active Directory security features when the DNS Server service is running on a domain controller. For more information, see <maml:navigationLink><maml:linkText>Securing the DNS Server Service</maml:linkText><maml:uri href="mshelp://windows/?id=9f93a319-4e77-4c17-ad4a-10e3ea9847f1"></maml:uri></maml:navigationLink>.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>DNS zones</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Review the default DNS zone security settings and apply secure dynamic updates and Active Directory security features when the DNS zone is hosted on a domain controller. For more information, see <maml:navigationLink><maml:linkText>Securing DNS zones</maml:linkText><maml:uri href="mshelp://windows/?id=f145d739-af95-4773-b755-d6a2a1780a65"></maml:uri></maml:navigationLink>.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>DNS resource records</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Review the default DNS resource record security settings and apply Active Directory security features when the DNS resource records are hosted on a domain controller. For more information, see <maml:navigationLink><maml:linkText>Securing DNS Resource Records</maml:linkText><maml:uri href="mshelp://windows/?id=c6a3e04d-6306-4c63-82d7-49d583de1640"></maml:uri></maml:navigationLink>.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>DNS clients</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Control the DNS server IP addresses that DNS clients use. For more information, see <maml:navigationLink><maml:linkText>Securing DNS Clients</maml:linkText><maml:uri href="mshelp://windows/?id=f707d8fa-3e34-4b2a-b64e-e71adf2c6b69"></maml:uri></maml:navigationLink>.</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction></maml:section><maml:section>
<maml:title>Three levels of DNS security</maml:title><maml:introduction>
<maml:para>The following sections describe the three levels of DNS security.</maml:para>
</maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Low-level security</maml:title><maml:introduction>
<maml:para>Low-level security is a standard DNS deployment without any security precautions configured. Deploy this level of DNS security only in network environments where there is no concern for the integrity of your DNS data or in a private network where there is no threat of external connectivity. Low-level DNS security has the following characteristics:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>The DNS infrastructure of the organization is fully exposed to the Internet.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Standard DNS resolution is performed by all DNS servers in the network.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>All DNS servers are configured with root hints pointing to the root servers for the Internet.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>All DNS servers permit zone transfers to any server.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>All DNS servers are configured to listen on all of their IP addresses.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Cache pollution prevention is disabled on all DNS servers.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Dynamic update is allowed for all DNS zones.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>User Datagram Protocol (UDP) and TCP/IP port 53 is open on the firewall in the network for both source and destination addresses.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Medium-level security</maml:title><maml:introduction>
<maml:para>Medium-level security uses the DNS security features that are available without running DNS servers on domain controllers and storing DNS zones in Active Directory Domain Services ( AD DS). Medium-level DNS security has the following characteristics:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>The DNS infrastructure of the organization has limited exposure to the Internet.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>All DNS servers are configured to use forwarders to point to a specific list of internal DNS servers when they cannot resolve names locally.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>All DNS servers limit zone transfers to servers that are listed in the name server (NS) resource records in their zones.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>DNS servers are configured to listen on specified IP addresses.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Cache pollution prevention is enabled on all DNS servers.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Nonsecure dynamic update is not allowed for any DNS zones.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Internal DNS servers communicate with external DNS servers through the firewall with a limited list of allowed source and destination addresses.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>External DNS servers in front of the firewall are configured with root hints that point to the root servers for the Internet.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>All Internet name resolution is performed using proxy servers and gateways.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>High-level security</maml:title><maml:introduction>
<maml:para>High-level security uses the same configuration as medium-level security. It also uses the security features that are available when the DNS Server service is running on a domain controller and DNS zones are stored in AD DS. In addition, high-level security completely eliminates DNS communication with the Internet. This is not a typical configuration, but it is recommended whenever Internet connectivity is not required. High-level DNS security has the following characteristics:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>The DNS infrastructure of the organization has no Internet communication by internal DNS servers.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>The network uses an internal DNS root and namespace, where all authority for DNS zones is internal.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>DNS servers that are configured with forwarders use internal DNS server IP addresses only.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>All DNS servers limit zone transfers to specified IP addresses.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>DNS servers are configured to listen on specified IP addresses.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Cache pollution prevention is enabled on all DNS servers.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Internal DNS servers are configured with root hints pointing to the internal DNS servers that host the root zone for the internal namespace.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>All DNS servers are running on domain controllers. A discretionary access control list (DACL) is configured on the DNS Server service to allow only specific individuals to perform administrative tasks on the DNS server.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>All DNS zones are stored in AD DS. A DACL is configured to allow only specific individuals to create, delete, or modify DNS zones.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>DACLs are configured on DNS resource records to allow only specific individuals to create, delete, or modify DNS data.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Secure dynamic update is configured for DNS zones, except the top-level and root zones, which do not allow dynamic updates at all.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Installing and Configuring Servers</maml:title><maml:introduction>
<maml:para>The first step in implementing Domain Name System (DNS) in a network is installing and configuring the servers that will provide the service. Before you do so, however, it is important to plan the deployment to ensure the greatest effectiveness of your DNS infrastructure. In addition to planning your zone layout and server location and function, also take into consideration whether you will integrate your DNS infrastructure with Active Directory Domain Services (AD DS).</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Understanding Active Directory Domain Services Integration</maml:linkText><maml:uri href="mshelp://windows/?id=427144ca-37ce-4db7-a611-605338ec01ca"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Understanding Forwarders</maml:linkText><maml:uri href="mshelp://windows/?id=52ec32f6-5eda-4d6a-8e38-809fee243b71"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Using Forwarders</maml:linkText><maml:uri href="mshelp://windows/?id=e2dd91d6-441f-4175-9d1d-d152d148d73c"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Planning DNS Zones</maml:linkText><maml:uri href="mshelp://windows/?id=53661592-0f72-453e-bc5b-8ba193e1f5dc"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Planning DNS Servers</maml:linkText><maml:uri href="mshelp://windows/?id=caa5a07e-98e6-4fce-a8a5-d3556d0f3c92"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Understanding DNS Zone Replication in Active Directory Domain Services</maml:linkText><maml:uri href="mshelp://windows/?id=e93c32c9-0c5c-4822-9c84-d464658d6ed3"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Install a DNS Server</maml:linkText><maml:uri href="mshelp://windows/?id=3cf4d1b1-7a6e-4438-bf4f-22d9468c1732"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Configure a DNS Server for Use with Active Directory Domain Services</maml:linkText><maml:uri href="mshelp://windows/?id=b6793e7e-0bec-4865-a869-f947867dcc17"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Configure a New DNS Server</maml:linkText><maml:uri href="mshelp://windows/?id=3421116c-3790-4a3b-af30-1f486f568bdd"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Configure a DNS Server to Use Forwarders</maml:linkText><maml:uri href="mshelp://windows/?id=e324865f-1cbe-42ec-bf18-a220c0e26fe6"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Create a DNS Application Directory Partition</maml:linkText><maml:uri href="mshelp://windows/?id=66587c39-5a8f-401c-80f7-fa0528c1340f"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Enlist a DNS Server in a DNS Application Directory Partition</maml:linkText><maml:uri href="mshelp://windows/?id=479b0f39-c62f-445c-9c66-363be93362c2"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Remove a DNS Server from a DNS Application Directory Partition</maml:linkText><maml:uri href="mshelp://windows/?id=f8521fc2-120f-4651-b0ce-28f62fe945a5"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Change the Boot Method Used by the DNS Server</maml:linkText><maml:uri href="mshelp://windows/?id=f8ca5381-d1b4-4ea1-89cd-f94f33199bc3"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Configuring Multihomed Servers</maml:linkText><maml:uri href="mshelp://windows/?id=ff3bc7ae-5f22-4fc7-8b87-6028d7e7caf4"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Restrict a DNS server to listen only on selected addresses</maml:linkText><maml:uri href="mshelp://windows/?id=ebac15fc-5773-4cce-ae75-c67b7e3d31c0"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Secure the Server Cache Against Names Pollution</maml:linkText><maml:uri href="mshelp://windows/?id=f8090427-a526-435b-906e-7e961160ecb2"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Modify Security for the DNS Server Service on a Domain Controller</maml:linkText><maml:uri href="mshelp://windows/?id=9537da9f-7427-4358-91d8-ad5fd7be3fe6"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Disable Recursion on the DNS Server</maml:linkText><maml:uri href="mshelp://windows/?id=7558126a-cc90-4854-855d-533d706e7750"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Updating Root Hints</maml:linkText><maml:uri href="mshelp://windows/?id=7fc91f3b-c926-4dd7-a9f5-8d140d261a14"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Update Root Hints on the DNS Server</maml:linkText><maml:uri href="mshelp://windows/?id=5234e7b1-0efc-4495-8e42-8c85d7389fc3"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction><maml:content><maml:sections></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Securing DNS zones</maml:title><maml:introduction>
<maml:para>The Domain Name System (DNS) zone configuration options in the following sections have security implications for both standard and Active Directory-integrated DNS zones.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Configure secure dynamic updates</maml:title><maml:introduction>
<maml:para>By default, the <maml:ui>Dynamic updates</maml:ui> setting is not configured to allow dynamic updates. This is the most secure setting because it prevents an attacker from updating DNS zones. However, this setting prevents you from taking advantage of the administrative benefits that dynamic update provides. To configure computers to update DNS data more securely, store DNS zones in Active Directory Domain Services (AD DS) and use the secure dynamic update feature. Secure dynamic update restricts DNS zone updates to only those computers that are authenticated and joined to the Active Directory domain where the DNS server is located and to the specific security settings that are defined in the access control lists (ACLs) for the DNS zone. </maml:para>
<maml:para>For more information, see <maml:navigationLink><maml:linkText>Allow Only Secure Dynamic Updates</maml:linkText><maml:uri href="mshelp://windows/?id=55e3745f-4c49-44a3-ad60-30e14638ef81"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction></maml:section><maml:section>
<maml:title>Manage the DACL on the DNS zones that are stored in AD DS</maml:title><maml:introduction>
<maml:para>You can use the discretionary access control list (DACL) to control the permissions for the Active Directory users and groups that may control the DNS zones. </maml:para>
<maml:para>The following table lists the default group or user names and permissions for DNS zones that are stored in AD DS.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Group or user names</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Permissions</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Administrators</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Allow: Read, Write, Create All Child objects, Special Permissions</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Authenticated Users</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Allow: Create All Child objects</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Creator Owner</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Special Permissions</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>DnsAdmins</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Allow: Full Control, Read, Write, Create All Child objects, Delete Child objects, Special Permissions</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Domain Admins</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Allow: Full Control, Read, Write, Create All Child objects, Delete Child objects</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Enterprise Admins</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Allow: Full Control, Read, Write, Create All Child objects, Delete Child objects</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Enterprise Domain Controllers</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Allow: Full Control, Read, Write, Create All Child objects, Delete Child objects, Special Permissions</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Everyone</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Allow: Read, Special Permissions</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Pre-Windows 2000 Compatible Access</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Allow: Special Permissions</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>System</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Allow: Full Control, Read, Write, Create All Child objects, Delete Child objects</maml:para>
</maml:entry></maml:row>
</maml:table>
<maml:para>For more information, see <maml:navigationLink><maml:linkText>Modify Security for a Directory-Integrated Zone</maml:linkText><maml:uri href="mshelp://windows/?id=0e462ebd-84fd-432b-a5cd-8c6f3cfa3225"></maml:uri></maml:navigationLink>.</maml:para>
<maml:para>The DNS Server service running on a domain controller that has zones stored in AD DS stores its zone data in AD DS using Active Directory objects and attributes. Configuring the DACL on the DNS Active Directory objects has the same effect as configuring the DACL on DNS zones in DNS Manager. Consequently, the security administrators of Active Directory objects and the security administrators of DNS data should be in direct contact to ensure that the administrators do not reverse each other's security settings. </maml:para>
<maml:para>The following table describes the Active Directory objects and attributes that are used by DNS zone data. </maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Object</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>DnsZone</maml:para>
</maml:entry>
<maml:entry>
<maml:para>This container is created when a zone is stored in AD DS.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>DnsNode</maml:para>
</maml:entry>
<maml:entry>
<maml:para>This leaf object is used to map and associate a name in the zone to resource data.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>DnsRecord</maml:para>
</maml:entry>
<maml:entry>
<maml:para>This multivalued attribute of a dnsNode object is used to store the resource records that are associated with the named node object.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>DnsProperty</maml:para>
</maml:entry>
<maml:entry>
<maml:para>This multivalued attribute of a dnsZone object is used to store zone configuration information.</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction></maml:section><maml:section>
<maml:title>Restrict zone transfers</maml:title><maml:introduction>
<maml:para>By default, the DNS Server service allows zone information to be transferred only to servers that are listed in the name server (NS) resource records of a zone. This is a secure configuration, but for increased security, this setting should be changed to the option that allows zone transfers to specified IP addresses. Changing this setting to allow zone transfers to any server may expose your DNS data to an attacker attempting to footprint your network. </maml:para>
<maml:para>For more information, see <maml:navigationLink><maml:linkText>Modify Zone Transfer Settings</maml:linkText><maml:uri href="mshelp://windows/?id=744b7d08-dfcd-4a1b-8157-fd443cb0482b"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction></maml:section><maml:section>
<maml:title>Understand the compromise involved in zone delegation</maml:title><maml:introduction>
<maml:para>When you are deciding whether to delegate DNS domain names to zones hosted on DNS servers that are administered separately, it is important to consider the security implications of giving multiple individuals the ability to administer the DNS data for your network. DNS zone delegation involves a compromise between the security benefits of having a single authoritative DNS server for all DNS data and the administrative benefits of distributing responsibility for your DNS namespace to separate administrators. This issue is very important when you are delegating the top-level domains of a private DNS namespace, because those domains contain very sensitive DNS data. </maml:para>
<maml:para>For more information, see <maml:navigationLink><maml:linkText>Understanding Zone Delegation</maml:linkText><maml:uri href="mshelp://windows/?id=7cbe9c5e-4187-4fa2-a512-f6162162f22e"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction></maml:section><maml:section>
<maml:title>Recover DNS zone data</maml:title><maml:introduction>
<maml:para>If your DNS data is corrupted, you can restore your DNS zone file from the backup folder, which is located in the %systemroot%/DNS/Backup folder. When a zone is first created, a copy of the zone is added to the backup folder. To recover the zone, copy the original zone file from the backup folder into the %systemroot%/DNS folder. When you use the New Zone Wizard to create the zone, specify the zone file in the %systemroot%/DNS folder as the zone file for the new zone. For more information, see <maml:navigationLink><maml:linkText>Add a Forward Lookup Zone</maml:linkText><maml:uri href="mshelp://windows/?id=7294aebb-0452-4412-b5de-fc09e6b01ed6"></maml:uri></maml:navigationLink>.</maml:para>
<maml:para>This operation applies only to standard zones that are not stored in AD DS.</maml:para>
<maml:para>For more information, see <maml:navigationLink><maml:linkText>Security Information for DNS</maml:linkText><maml:uri href="mshelp://windows/?id=eebcdbcb-eab3-47a8-8355-3e1189b38c7f"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title><Zone Name> Properties Sheet</maml:title><maml:introduction>
<maml:para>You can use the controls in this properties sheet to administer the properties of a single zone. The following table lists the tabs that can appear in the zone properties sheet, depending on the zone type.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Item</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Details</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:ui>General</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Use this tab to view the zone's status and to configure the following zone properties:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Default aging and scavenging settings</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Dynamic updates</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Zone type (including whether the zone data is stored in Active Directory Domain Services (AD DS) or in a file)</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Replication scope (Active Directory–integrated zones only)</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Master servers (secondary and stub zones only)</maml:para>
</maml:listItem>
</maml:list>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Start of Authority (SOA)</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Use this tab to configure the zone's SOA record. The SOA record specifies the following for the zone:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Primary server</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Zone administrator's e-mail address</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Secondary zone expiration values</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Minimum default Time To Live (TTL) values for zone resource records</maml:para>
</maml:listItem>
</maml:list>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Name Servers</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Use this tab to manage the list of authoritative name servers (NS) for the zone.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>WINS</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Use this tab to enable and manage Windows Internet Name Service (WINS) name resolution for the zone. This tab is not available for stub zones.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Zone Transfers</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Use this tab to enable replication of zone data to other servers and to specify which servers can receive zone data. This tab is not available for stub zones.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Security</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>Use this tab to specify the user accounts that can be used to access the zone and the type of access to be allowed to each account. This tab is available for Active Directory–integrated zones only.</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction><maml:content><maml:sections></maml:sections></maml:content><maml:relatedLinks type="seeAlso"><maml:title>See Also</maml:title><maml:navigationLink><maml:linkText>User Interface: DNS Server</maml:linkText><maml:uri href="mshelp://windows/?id=c2c0a226-364e-4c4d-88ee-5c3ef2b3023f"></maml:uri></maml:navigationLink></maml:relatedLinks></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Checklist: Migrate a DNS Server</maml:title><maml:introduction>
<maml:para>You can migrate a DNS server by upgrading a DNS server running an earlier version of Windows to Windows Server 2008, moving zone files from an existing DNS server running another DNS server implementation, or migrating zones using master-secondary zone transfer to DNS servers running Windows Server 2008. Migrating a Domain Name System (DNS) server can improve the performance, security, and reliability of your DNS infrastructure by giving you access to the advanced features that are available in Windows Server 2008. </maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Upgrading a DNS server</maml:linkText><maml:uri href="mshelp://windows/?id=f4fb1647-4ad8-4a92-91e1-ccc72d1ec193#BKMK_upgrade"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Moving zone files</maml:linkText><maml:uri href="mshelp://windows/?id=f4fb1647-4ad8-4a92-91e1-ccc72d1ec193#BKMK_move_files"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Migrating zones from BIND servers</maml:linkText><maml:uri href="mshelp://windows/?id=f4fb1647-4ad8-4a92-91e1-ccc72d1ec193#BKMK_move_bind"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Migrating zones from Windows-based DNS servers</maml:linkText><maml:uri href="mshelp://windows/?id=f4fb1647-4ad8-4a92-91e1-ccc72d1ec193#BKMK_move_win"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction><maml:content><maml:sections><maml:section address="BKMK_upgrade">
<maml:title>Upgrading a DNS server</maml:title><maml:introduction>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Task</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Reference</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Any zones or server configuration files and parameters that are created and stored using the Windows Server 2003 version of the DNS Server service are stored in the same system folder locations. There is no conversion of data required during the process of upgrading from Windows Server 2003 to Windows Server 2008.</maml:para>
</maml:entry>
<maml:entry>
<maml:para> </maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction></maml:section><maml:section address="BKMK_move_files">
<maml:title>Moving zone files</maml:title><maml:introduction>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Task</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Reference</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Copy any zone or boot files that were created with Berkeley Internet Name Domain (BIND) that you intend to use with the DNS Server service to the %systemroot%\System32\DNS folder on the server running Windows Server 2008.</maml:para>
</maml:entry>
<maml:entry>
<maml:para> </maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>If you continue to use a BIND boot file to provide the initial configuration settings that are used by the DNS Server service when it is started, change the boot method that is used by the DNS Server service. Or, rename the zone files from the BIND naming convention to the convention that is used by DNS servers running under the DNS Server service that is provided in Windows operating systems.</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Change the Boot Method Used by the DNS Server</maml:linkText><maml:uri href="mshelp://windows/?id=f8ca5381-d1b4-4ea1-89cd-f94f33199bc3"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>If you do not migrate the BIND boot file or specify the BIND name when you create the zones using DNS Manager, you will have to rename these zones:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Boot file: Rename named.boot to Boot</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Forward lookup zone file: Rename db.<maml:replaceable>domain_name</maml:replaceable> to <maml:replaceable>domain_name</maml:replaceable>.dns</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Reverse lookup zone file: db.<maml:replaceable>IP_network_forward_notation</maml:replaceable> to <maml:replaceable>IP_network_reverse_notation</maml:replaceable>.dns</maml:para>
</maml:listItem>
</maml:list>
<maml:para>For a reverse lookup zone, BIND uses a convention of noting reverse domain names as a forward notation of the mapped IP network, such as db.192.1.168 for a reverse lookup zone that is created for an example IP network address of 192.168.1.0. DNS servers running Windows Server 2008, however, use the fully qualified domain name (FQDN) for the zone, which includes the in-addr.arpa domain, to complete the file name. In this example, the correct name to use for the same zone in Windows Server 2008 DNS is 168.1.192.in-addr.arpa.dns when you copy and rename the file.</maml:para>
</maml:entry>
<maml:entry>
<maml:para> </maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>If you are using the BIND boot file with the DNS Server service after migration, there are other limitations that apply to the use of this file by the DNS Server service. For example, some BIND boot directives are not supported—in particular, <maml:computerOutputInline>xfrnets</maml:computerOutputInline> and other directives that are provided with versions of BIND, such as version 8.1.1 or later. For more information, see articles Q194513 and Q234144 in the Microsoft Knowledge Base (<maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkID=4441</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkID=4441"></maml:uri></maml:navigationLink>). </maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>If you are accustomed to manually editing DNS zone files, be aware that the DNS Server service uses Request for Comments (RFC)-compliant notation for its supported resource records. In most cases, the DNS Server service interprets and loads resource records from zone files that were originally created for BIND-based DNS servers, without any need for file changes. If, however, you have used nonstandard record formatting, the DNS Server service can detect these edits and interpret them as bad zone data.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section><maml:section address="BKMK_move_bind">
<maml:title>Migrating zones from BIND servers</maml:title><maml:introduction>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Task</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Reference</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Configure the BIND servers as the master servers for each of the zones that you want to migrate.</maml:para>
</maml:entry>
<maml:entry>
<maml:para> </maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>On the server running the DNS Server service, add secondary zones for all of your existing zones that are hosted at the BIND-based DNS servers. </maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Add a Forward Lookup Zone</maml:linkText><maml:uri href="mshelp://windows/?id=7294aebb-0452-4412-b5de-fc09e6b01ed6"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>If necessary, create reverse lookup zones for all of your existing reverse lookup zones that are hosted at the BIND-based DNS servers.</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Add a Reverse Lookup Zone</maml:linkText><maml:uri href="mshelp://windows/?id=5b03fa70-89ad-4a21-a179-2e96a43dbe54"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>After completing the zone transfers, convert any of the secondary zones to primary zones for the zones that were obtained from primary zones at the BIND servers.</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Change the Zone Type</maml:linkText><maml:uri href="mshelp://windows/?id=3739d3bb-38d5-48da-b9bf-d80401baf053"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Optional: If the DNS server running Windows Server 2008 is a domain controller, store the zone in Active Directory Domain Services (AD DS).</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Change the Zone Type</maml:linkText><maml:uri href="mshelp://windows/?id=3739d3bb-38d5-48da-b9bf-d80401baf053"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Configure the previous primary servers to be secondary servers for the migrated zones, or demote the previous primary servers.</maml:para>
</maml:entry>
<maml:entry>
<maml:para> </maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>For the other secondary zones that remain, update the master servers for those zones to use the new primary DNS servers running Windows Server 2008.</maml:para>
</maml:entry>
<maml:entry>
<maml:para> </maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction></maml:section><maml:section address="BKMK_move_win">
<maml:title>Migrating zones from Windows-based DNS servers</maml:title><maml:introduction>
<maml:para>These tasks are necessary only if the zones that you are migrating are hosted on Windows-based servers and not stored in AD DS.</maml:para>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Task</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Reference</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>On the server running Windows Server 2008, create secondary zones for all of your existing zones that are hosted at the Windows-based DNS servers.</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Add a Forward Lookup Zone</maml:linkText><maml:uri href="mshelp://windows/?id=7294aebb-0452-4412-b5de-fc09e6b01ed6"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>If necessary, create reverse lookup zones for all of your existing reverse lookup zones that are hosted at the Windows-based DNS servers.</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Add a Reverse Lookup Zone</maml:linkText><maml:uri href="mshelp://windows/?id=5b03fa70-89ad-4a21-a179-2e96a43dbe54"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>After you complete the zone transfers, convert the secondary zones to primary zones for the zones that were migrated.</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Change the Zone Type</maml:linkText><maml:uri href="mshelp://windows/?id=3739d3bb-38d5-48da-b9bf-d80401baf053"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Optional: If the DNS server running Windows Server 2008 is a domain controller, store the zone in AD DS.</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Change the Zone Type</maml:linkText><maml:uri href="mshelp://windows/?id=3739d3bb-38d5-48da-b9bf-d80401baf053"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>Optional: To continue using the previous master servers as DNS servers, convert the migrated zones on the previous master servers to secondary zones.</maml:para>
</maml:entry>
<maml:entry>
<maml:para><maml:navigationLink><maml:linkText>Change the Zone Type</maml:linkText><maml:uri href="mshelp://windows/?id=3739d3bb-38d5-48da-b9bf-d80401baf053"></maml:uri></maml:navigationLink></maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Securing DNS Clients</maml:title><maml:introduction>
<maml:para>The following Domain Name System (DNS) client considerations have security implications for DNS clients in a DNS infrastructure.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Whenever possible, specify static IP addresses for the preferred and alternate DNS servers that a DNS client uses</maml:title><maml:introduction>
<maml:para>If a DNS client is configured to obtain its DNS server addresses automatically, it obtains them from a Dynamic Host Configuration Protocol (DHCP) server. While this method of obtaining DNS server addresses is secure, it is only as secure as the DHCP server. By configuring DNS clients with static IP addresses for the preferred and alternate DNS servers, you may eliminate one possible avenue of attack. </maml:para>
<maml:para>For more information, see; <maml:navigationLink><maml:linkText>Enable DNS for DHCP-Enabled Clients</maml:linkText><maml:uri href="mshelp://windows/?id=806532cf-9b03-4777-bef4-d95c9d4136bb"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction></maml:section><maml:section>
<maml:title>Control which DNS clients have access to the DNS server</maml:title><maml:introduction>
<maml:para>If a DNS server is configured to listen only on specific IP addresses, only DNS clients that are configured to use these IP addresses as preferred and alternate DNS servers will contact the DNS server. </maml:para>
<maml:para>For more information, see <maml:navigationLink><maml:linkText>Restrict a DNS server to listen only on selected addresses</maml:linkText><maml:uri href="mshelp://windows/?id=ebac15fc-5773-4cce-ae75-c67b7e3d31c0"></maml:uri></maml:navigationLink>.</maml:para>
<maml:para>For more information, see <maml:navigationLink><maml:linkText>Security Information for DNS</maml:linkText><maml:uri href="mshelp://windows/?id=eebcdbcb-eab3-47a8-8355-3e1189b38c7f"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Secure the Server Cache Against Names Pollution</maml:title><maml:introduction>
<maml:para>By default, the DNS Server service is secured from cache pollution, which occurs when DNS query responses contain nonauthoritative or malicious data. The <maml:ui>Secure cache against pollution</maml:ui> option prevents an attacker from successfully polluting the cache of a DNS server with resource records that were not requested by the DNS server. Changing this default setting will reduce the integrity of the responses that are provided by DNS Server service. You can use this procedure to restore the default setting if it was previously changed.</maml:para>
<maml:para>Membership in the <maml:phrase>Administrators</maml:phrase> group, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To secure the server cache against names pollution</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open DNS Manager.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the console tree, click the applicable DNS server.</maml:para>
<maml:para><maml:phrase>Where?</maml:phrase></maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>DNS/<maml:replaceable>applicable DNS server</maml:replaceable></maml:para>
</maml:listItem>
</maml:list>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>On the <maml:ui>Action</maml:ui> menu, click <maml:ui>Properties</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Click the <maml:ui>Advanced</maml:ui> tab.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In <maml:ui>Server options</maml:ui>, select the <maml:ui>Secure cache against pollution</maml:ui> check box, and then click <maml:ui>OK</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open DNS Manager, click <maml:ui>Start</maml:ui>, point to <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>DNS</maml:ui>.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>The <maml:ui>Secure cache against pollution</maml:ui> option is enabled by default.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Security Information for DNS</maml:linkText><maml:uri href="mshelp://windows/?id=eebcdbcb-eab3-47a8-8355-3e1189b38c7f"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Securing the DNS Server Service</maml:linkText><maml:uri href="mshelp://windows/?id=9f93a319-4e77-4c17-ad4a-10e3ea9847f1"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Remove a DNS Server from a DNS Application Directory Partition</maml:title><maml:introduction>
<maml:para>You can perform this procedure when you no longer want the Domain Name System (DNS) server to participate in replication of the zone that is hosted in a DNS application directory partition. You cannot remove a DNS server from the DomainDnsZones or ForestDnsZones application directory partitions.</maml:para>
<maml:para>To perform this procedure, you must be a member of the <maml:phrase>DnsAdmins</maml:phrase> or the <maml:phrase>Domain Admins</maml:phrase> group in Active Directory Domain Services (AD DS), or you must have been delegated the appropriate authority. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To remove a DNS server from a DNS application directory partition</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open a command prompt.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Type the following command, and then press ENTER: </maml:para>
<dev:code>dnscmd <ServerName> /UnenlistDirectoryPartition <FQDN> </dev:code>
</maml:section></maml:sections></maml:step></maml:procedure>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Parameter</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Description</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>dnscmd </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Specifies the name of the command-line tool for managing DNS servers.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><ServerName> </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Specifies the DNS host name of the DNS server. You can also type the IP address of the DNS server. To specify the DNS server on the local computer, you can also type a period (.).</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para>/UnenlistDirectoryPartition </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Removes a DNS server from a DNS application directory partition.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><FQDN> </maml:para>
</maml:entry>
<maml:entry>
<maml:para>Required. Specifies the fully qualified domain name (FQDN) of the DNS application directory partition from which you are removing the DNS server that is specified by <maml:replaceable>ServerName</maml:replaceable>.</maml:para>
</maml:entry></maml:row>
</maml:table>
<maml:para>To view the complete syntax for this command, at a command prompt, type the following command, and then press ENTER:</maml:para>
<dev:code>dnscmd /UnenlistDirectoryPartition /?</dev:code>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open an elevated Command Prompt window, click <maml:ui>Start</maml:ui>, point to <maml:ui>All Programs</maml:ui>, click <maml:ui>Accessories</maml:ui>, right-click <maml:ui>Command Prompt</maml:ui>, and then click <maml:ui>Run as administrator</maml:ui>. </maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
<maml:section>
<maml:title>Additional references</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Understanding Active Directory Domain Services Integration</maml:linkText><maml:uri href="mshelp://windows/?id=427144ca-37ce-4db7-a611-605338ec01ca"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Create a DNS Application Directory Partition</maml:linkText><maml:uri href="mshelp://windows/?id=66587c39-5a8f-401c-80f7-fa0528c1340f"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:navigationLink><maml:linkText>Enlist a DNS Server in a DNS Application Directory Partition</maml:linkText><maml:uri href="mshelp://windows/?id=479b0f39-c62f-445c-9c66-363be93362c2"></maml:uri></maml:navigationLink></maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Adding Resource Records</maml:title><maml:introduction>
<maml:para>After you create a zone, you must add additional resource records to it. The most common resource records that you add include the following:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para><maml:phrase>Host (A) resource records:</maml:phrase> for mapping a Domain Name System (DNS) domain name to an IP address that is used by a computer.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:phrase>Alias (CNAME) resource records:</maml:phrase> for mapping an alias DNS domain name to another primary or canonical name.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:phrase>Mail exchanger (MX) resource records:</maml:phrase> for mapping a DNS domain name to the name of a computer that exchanges or forwards mail.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:phrase>Pointer (PTR) resource records</maml:phrase>: for mapping a reverse DNS domain name that is based on the IP address of a computer that points to the forward DNS domain name of that computer.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para><maml:phrase>Service location (SRV) resource records:</maml:phrase> for mapping a DNS domain name to a specified list of DNS host computers that offer a specific type of service, such as Active Directory domain controllers.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Other resource records as needed.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Host (A) resource records</maml:title><maml:introduction>
<maml:para>You use host (A) resource records in a zone to associate DNS domain names of computers (or hosts) to their IP addresses. You can add them to a zone in several ways:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>You can manually create a host (A) resource record for a static TCP/IP client computer by using DNS Manager.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Windows clients and servers use the DHCP Client service to dynamically register and update their own host (A) resource records in DNS when an IP configuration change occurs.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Dynamic Host Configuration Protocol (DHCP)–enabled client computers running earlier versions of Microsoft operating systems can have their host (A) resource records registered and updated by proxy if they obtain their IP lease from a qualified DHCP server. (Only the Windows 2000, Windows Server 2003, and Windows Server 2008 DHCP Server service support this feature.)</maml:para>
</maml:listItem>
</maml:list>
<maml:para>Not all computers require the host (A) resource records, but computers that share resources on a network need them. Any computer that shares resources and must be identified by its DNS domain name must use host (A) resource records to provide DNS name resolution to the IP address for the computer.</maml:para>
<maml:para>Most host (A) resource records that are required in a zone can include other workstations or servers that share resources, other DNS servers, mail servers, and Web servers. These resource records make up the majority of resource records in a zone database.</maml:para>
</maml:introduction></maml:section><maml:section>
<maml:title>Alias (CNAME) resource records</maml:title><maml:introduction>
<maml:para>Alias (CNAME) resource records are also sometimes called canonical name resource records. With these records, you can use more than one name to point to a single host, which makes it easy to do such things as host both a File Transfer Protocol (FTP) server and a Web server on the same computer. For example, the well-known server names (ftp, www) are registered with alias (CNAME) resource records that map to the DNS host name (such as server-1) for the server computer that hosts these services.</maml:para>
<maml:para>We recommend alias (CNAME) resource records for the following scenarios:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>When a host that is specified in an host (A) resource record in the same zone must be renamed</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>When a generic name for a well-known server, such as www, must resolve to a group of individual computers (each with individual host (A) resource records) that provide the same service, for example, in a group of redundant Web servers.</maml:para>
</maml:listItem>
</maml:list>
<maml:para>When you rename a computer with an existing host (A) resource record in the zone, you can use an alias (CNAME) resource record temporarily to allow a grace period for users and programs to switch from the old computer name to the new one, as follows:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>For the new DNS domain name of the computer, add a new host (A) resource record to the zone.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>For the old DNS domain name, add an alias (CNAME) resource record that points to the new host (A) resource record.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Remove the original host (A) resource record for the old DNS domain name (and its associated pointer (PTR) resource record, if applicable) from the zone.</maml:para>
</maml:listItem>
</maml:list>
<maml:para>When you use an alias (CNAME) resource record for aliasing or renaming a computer, set a temporary limit on how long the record is used in the zone before removing it from DNS. If you forget to delete the alias (CNAME) resource record and later its associated host (A) resource record is deleted, the alias (CNAME) resource record can waste server resources trying to resolve queries for a name that is no longer used on the network.</maml:para>
<maml:para>The most common or popular use of an alias (CNAME) resource record is to provide a permanent DNS aliased domain name for generic name resolution of a service-based name, such as www.tailspintoys.com, to more than one computer or one IP address on a Web server. The following example shows the basic syntax of an alias (CNAME) resource record:</maml:para>
<maml:para><maml:replaceable>alias_name</maml:replaceable> <maml:computerOutputInline>IN CNAME</maml:computerOutputInline> <maml:replaceable>primary_canonical_name</maml:replaceable></maml:para>
<maml:para>In this example, a computer named host-a.tailspintoys.com functions as both a Web server named www.tailspintoys.com. and as an FTP server named ftp.tailspintoys.com. To achieve the intended objective of naming this computer, you can add the following CNAME entries in the tailspintoys.com zone:</maml:para>
<dev:code>
host-a IN A 10.0.0.20
ftp IN CNAME host-a
www IN CNAME host-a
</dev:code>
<maml:para>If you later decide to move the FTP server to another computer—, separate from the Web server on host-a—simply change the alias (CNAME) resource record in the zone for ftp.tailspintoys.com and add an additional host (A) resource record to the zone for the new computer hosting the FTP server.</maml:para>
<maml:para>Based on the earlier example, if the new computer is named host-b.tailspintoys.com, the new and revised host (A) and alias (CNAME) resource records appear as follows:</maml:para>
<dev:code>
host-a IN A 10.0.0.20
host-b IN A 10.0.0.21
ftp IN CNAME host-b
www IN CNAME host-a
</dev:code>
</maml:introduction></maml:section><maml:section>
<maml:title>Mail exchanger (MX) resource records</maml:title><maml:introduction>
<maml:para>E-mail applications use the mail exchanger (MX) resource record to locate a mail server based on a DNS domain name in the destination address for the e-mail recipient of a message. For example, a DNS query for the name example.tailspintoys.com can be used to find a mail exchanger (MX) resource record, which makes it possible for an e-mail application to forward or exchange mail to a user with the e-mail address user@tailspintoys.com.</maml:para>
<maml:para>The mail exchanger (MX) resource record shows the DNS domain name for the computer or computers that process mail for a domain. If multiple mail exchanger (MX) resource records exist, the DNS Client service attempts to contact mail servers in the order of preference from lowest value (highest priority) to highest value (lowest priority). The following example shows the basic syntax of a mail exchanger (MX) resource record:</maml:para>
<maml:para><maml:replaceable>mail_domain_name</maml:replaceable> <maml:computerOutputInline>IN MX</maml:computerOutputInline> <maml:replaceable>preference</maml:replaceable><maml:foreignPhrase> </maml:foreignPhrase><maml:replaceable>mailserver_host</maml:replaceable></maml:para>
<maml:para>Using the mail exchanger (MX) resource records in the following example for tailspintoys.com zone, mail that is addressed to user@tailspintoys.com is delivered to user@mailserver0.tailspintoys.com first, if possible. If this server is unavailable, the resolver client can then use user@mailserver1.tailspintoys.com instead.</maml:para>
<dev:code>
@ IN MX 1 mailserver0
@ IN MX 2 mailserver1
</dev:code>
<maml:para>Note that the use of the "at" sign (@) in the records indicates that the mailer DNS domain name is the same as the name of origin (tailspintoys.com) for the zone.</maml:para>
</maml:introduction></maml:section><maml:section>
<maml:title>Pointer (PTR) resource records</maml:title><maml:introduction>
<maml:para>Pointer (PTR) resource records support the reverse lookup process, based on zones that are created and rooted in the in-addr.arpa domain. These records locate a computer by its IP address and resolve this information to the DNS domain name for that computer.</maml:para>
<maml:para>Pointer (PTR) resource records can be added to a zone in several ways:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>You can manually create a pointer (PTR) resource record for a static TCP/IP client computer using DNS, either as a separate procedure or as part of the procedure for creating a host (A) resource record.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Computers use the DHCP Client service to dynamically register and update their pointer (PTR) resource record in DNS when an IP configuration change occurs.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>All other Dynamic Host Configuration Protocol (DHCP)-enabled client computers can have their pointer (PTR) resource records registered and updated by the DHCP server if they obtain their IP lease from a qualified server. The Windows 2000, Windows Server 2003, and Windows Server 2008 DHCP Server service provides this capability.</maml:para>
</maml:listItem>
</maml:list>
<maml:para>The pointer (PTR) resource record is used only in reverse lookup zones to support reverse lookup. </maml:para>
</maml:introduction></maml:section><maml:section>
<maml:title>Service location (SRV) resource records</maml:title><maml:introduction>
<maml:para>Service location (SRV) resource records are required for location of Active Directory domain controllers. Typically, you can avoid manual administration of service location (SRV) resource records when you install Active Directory Domain Services (AD DS).</maml:para>
<maml:para>By default, the Active Directory Domain Services Installation Wizard attempts to locate a DNS server based on the list of preferred or alternate DNS servers, which are configured in any of its TCP/IP client properties, for any of its active network connections. If a DNS server that can accept dynamic update of the service location (SRV) resource record is contacted, the configuration process is complete. (This is also true for other resource records that are related to registering AD DS as a service in DNS.)</maml:para>
<maml:para>If, during the installation, a DNS server that can accept updates for the DNS domain name that is used to name your directory is not found, the wizard can install a DNS server locally and automatically configure it with a zone to support the Active Directory domain.</maml:para>
<maml:para>For example, if the Active Directory domain that you choose for your first domain in the forest is example.tailspintoys.com, you can add and configure a zone that is rooted at the DNS domain name of example.tailspintoys.com to use with the DNS server that is running on the new domain controller.</maml:para>
<maml:para>In the future, the service location (SRV) resource record may also be used to register and look up other well-known TCP/IP services on your network if applications implement and support DNS name queries that specify this record type. </maml:para>
</maml:introduction></maml:section><maml:section>
<maml:title>Other resource records</maml:title><maml:introduction>
<maml:para>Other additional resource records are supported by Windows Server 2008 DNS and are used less frequently in most zones. You can add these additional types of resource records as necessary with DNS Manager. </maml:para>
</maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Change the Boot Method Used by the DNS Server</maml:title><maml:introduction>
<maml:para>You can use this procedure to control whether the Domain Name System (DNS) server obtains its startup information from the registry, from a boot file, or from Active Directory Domain Services (AD DS).</maml:para>
<maml:para>By default, DNS servers use information that is stored in the registry to initialize the service and load any zone data for use at the server. As added options, you can configure the DNS server to boot from a file or, in AD DS environments you can supplement local registry data with zone data that is retrieved for directory-integrated zones that are stored in the Active Directory database. If you use the boot file method, the file that is used must be a text file named Boot, which is located on this computer in the %systemroot%\Windows\System32\Dns folder.</maml:para>
<maml:para>Membership in the <maml:phrase>Administrators</maml:phrase> group, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at <maml:navigationLink><maml:linkText>http://go.microsoft.com/fwlink/?LinkId=83477</maml:linkText><maml:uri href="http://go.microsoft.com/fwlink/?LinkId=83477"></maml:uri></maml:navigationLink>.</maml:para>
</maml:introduction><maml:content><maml:sections><maml:section><maml:title></maml:title><maml:introduction>
<maml:procedure><maml:title>To change the boot method used by the DNS server</maml:title><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Open DNS Manager.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the console tree, right-click the applicable DNS server, and then click <maml:ui>Properties</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>Click the <maml:ui>Advanced</maml:ui> tab.</maml:para>
</maml:section></maml:sections></maml:step><maml:step><maml:sections><maml:section><maml:title></maml:title>
<maml:para>In the <maml:ui>Load zone data on startup</maml:ui> list, select <maml:ui>From registry</maml:ui>, <maml:ui>From file</maml:ui>, or <maml:ui>From Active Directory and registry</maml:ui>.</maml:para>
</maml:section></maml:sections></maml:step></maml:procedure>
</maml:introduction>
<maml:sections>
<maml:section><maml:title></maml:title><maml:introduction></maml:introduction>
<maml:sections>
<maml:section>
<maml:title>Additional considerations</maml:title><maml:introduction>
<maml:list class="unordered">
<maml:listItem>
<maml:para>To open DNS Manager, click <maml:ui>Start</maml:ui>, point to <maml:ui>Administrative Tools</maml:ui>, and then click <maml:ui>DNS</maml:ui>.</maml:para>
</maml:listItem>
</maml:list>
</maml:introduction></maml:section>
</maml:sections>
</maml:section>
</maml:sections>
</maml:section></maml:sections></maml:content></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Service Location (SRV) Resource Record Dialog Box</maml:title><maml:introduction>
<maml:table>
<maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para>Item</maml:para>
</maml:entry>
<maml:entry>
<maml:para>Details</maml:para>
</maml:entry></maml:row>
</maml:tableHeader>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Domain</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>The fully qualified domain name (FQDN) for the domain to which this resource record applies.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Service</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>The universal symbolic name of the TCP/IP service, such as "_telnet" or "_smtp" to be served by this record.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Protocol</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>The transport protocol that is used by this service. In most cases, this value is either Transmission Control Protocol (TCP) or User Datagram Protocol (UDP), although other transport protocols can be used if they are implemented for your network.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Priority</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>A number between 0 and 65535 that indicates the priority or level of preference given for this record to the host that is specified in <maml:ui>Host offering this service</maml:ui>.</maml:para>
<maml:para><maml:ui>Priority</maml:ui> indicates this host’s priority with respect to the other hosts in this domain that offer the same service and are specified by different service location (SRV) resource records. Lower numbers are given higher preference. The highest priority or preference goes to a host (offering the service that is specified in this record) that has a priority value of zero (0).</maml:para>
<maml:para>Where more than one service location (SRV) resource record is present for a specific service, the host with the lowest preference number is given first to Domain Name System (DNS) clients. If this host fails or is not reachable, the SRV-specified host with the next highest preference number is the next host that is used.</maml:para>
<maml:para>If two or more hosts that are listed in the service location (SRV) resource record for a specified service share the same preference number, DNS clients can try hosts of equal preference in random order.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Weight</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>A number between 1 and 65535 to be used as a load-balancing mechanism. When you select among more than one target SRV host for the type of service (specified in <maml:ui>Service</maml:ui>) that use the same <maml:ui>Priority</maml:ui> number, you can use this field to weight preference toward specific hosts. Where several hosts share equal priority, SRV-specified hosts with higher weight values that are entered here should be returned first to resolver clients in SRV query results.</maml:para>
<maml:para>We recommend that you use a value of 0 (no weighting) when load-balancing is not needed. This reduces processing time for SRV queries and makes SRV resource records more readable.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Port number</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>The TCP/IP server port on the host that offers the service that is specified in <maml:ui>Service</maml:ui> on the target host that is specified in <maml:ui>Host offering this service</maml:ui>. The range of port numbers is 0 through 65535. This number is often—but not required to be—a well-known reserved port number as specified in Requests for Comments (RFC) 1700, "Assigned Numbers." Depending on the value in <maml:ui>Protocol</maml:ui> that is included in this record, the port number can represent either a UDP or TCP port.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Host offering this service</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>The FQDN of the target host that provides the type of TCP/IP-based service that is described in <maml:ui>Service</maml:ui>. This name must match a valid host (A) resource record in the DNS domain namespace. If a target FQDN consisting of a single period (".") is used here, it indicates to any DNS resolvers (clients) requesting this type of service that this service is not available for this domain.</maml:para>
</maml:entry></maml:row>
<maml:row>
<maml:entry>
<maml:para><maml:ui>Allow any authenticated user to update all DNS records with the same name. This setting applies only to DNS records for a new name.</maml:ui></maml:para>
</maml:entry>
<maml:entry>
<maml:para>When this option is selected, it permits the resource record to be updated dynamically. When the update is performed, the host requesting the update is granted permission to modify the resource record, but all other nonadministrative permissions are removed from the access control list (ACL) that protects the resource record. This makes it possible for the administrator to create a secure resource record for a host that is not yet online and still enable the resource record to be updated dynamically when the host obtains its IP address through Dynamic Host Configuration Protocol (DHCP).</maml:para>
</maml:entry></maml:row>
</maml:table>
</maml:introduction><maml:content><maml:sections></maml:sections></maml:content><maml:relatedLinks type="seeAlso"><maml:title>See Also</maml:title><maml:navigationLink><maml:linkText>User Interface: DNS Server</maml:linkText><maml:uri href="mshelp://windows/?id=c2c0a226-364e-4c4d-88ee-5c3ef2b3023f"></maml:uri></maml:navigationLink></maml:relatedLinks></maml:conceptual><maml:conceptual contentType="conceptual" xmlns:maml="http://schemas.microsoft.com/maml/2004/10" xmlns:dev="http://schemas.microsoft.com/maml/dev/2004/10"><maml:title>Configuring Multihomed Servers</maml:title><maml:introduction></maml:introduction><maml:content><maml:sections><maml:section>
<maml:title>Configuring multihomed servers</maml:title><maml:introduction>
<maml:para>For multihomed DNS servers (that is, DNS servers with more than one IP address), you can configure the DNS Server service to selectively enable and bind only to IP addresses that you specify by using DNS Manager. This allows you to ensure that only servers and clients configured to use the specified IP addresses can successfully send queries to the DNS server. For proxy servers that are connected to the Internet, for example, you can use this to ensure that only clients on the internal network can access DNS data. By default, the DNS Server service binds to all IP interfaces that are configured for the computer. These interfaces can include the following:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Any additional IP addresses that are configured for a single network connection</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Individual IP addresses that are configured for each separate connection where more than one network connection is installed on the server</maml:para>
</maml:listItem>
</maml:list>
<maml:para>For multihomed DNS servers, you can restrict DNS support for selected IP addresses. When this feature is enabled, the DNS Server service listens for and answers only the DNS requests that are sent to the IP addresses that are specified on the <maml:ui>Interface</maml:ui> tab in the server properties.</maml:para>
</maml:introduction></maml:section><maml:section>
<maml:title>When to specify interfaces</maml:title><maml:introduction>
<maml:para>By default, the DNS Server service listens on all IP addresses and accepts all client requests that are sent to its default service ports (UDP 53 or TCP 53). If you do not want the DNS server to respond to requests received on certain addresses, for example if those addresses correspond to external interfaces, you can configure the DNS server to respond to requests received on only some of its interfaces.</maml:para>
</maml:introduction></maml:section><maml:section>
<maml:title>Additional considerations for multihoming DNS servers</maml:title><maml:introduction>
<maml:para>When you configure additional IP addresses and enable them to be used with a DNS server, consider the following:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Additional system resources are consumed at the server computer.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Although DNS provides the means to configure multiple IP addresses for use with any of your installed network adapters, there is no performance benefit for doing so.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Even if the DNS server is handling multiple zones registered for Internet use, it is not necessary or required by the Internet registration process to have different IP addresses registered for each zone.</maml:para>
</maml:listItem>
</maml:list>
<maml:para>Given these considerations:</maml:para>
<maml:list class="unordered">
<maml:listItem>
<maml:para>Be aware that, when you add IP addresses for use with DNS servers, each additional address might only slightly increase server performance. In instances in which a large overall number of IP addresses are enabled for use, server performance can be degraded noticeably.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>In general, when you add network adapter hardware to the server computer, assign only a single primary IP address for each network connection.</maml:para>
</maml:listItem>
<maml:listItem>
<maml:para>Whenever possible, remove nonessential IP addresses from existing server TCP/IP configurations.</maml:para>
</maml:listItem>
</maml:list>
<maml:alertSet class="note"><maml:title>Note </maml:title>
<maml:para>For more information about how to specify interfaces with the DNS Server service, see <maml:navigationLink><maml:linkText>Restrict a DNS server to listen only on selected addresses</maml:linkText><maml:uri href="mshelp://windows/?id=ebac15fc-5773-4cce-ae75-c67b7e3d31c0"></maml:uri></maml:navigationLink>.</maml:para>
</maml:alertSet>
</maml:introduction></maml:section></maml:sections></maml:content></maml:conceptual><?xml version="1.0" encoding="utf-8"?>
<HelpCollection Id="dnsmgr" DTDVersion="1.0" FileVersion="" LangId="1033" Copyright="© 2005 Microsoft Corporation. All rights reserved." Title="Domain Name System" xmlns="http://schemas.microsoft.com/help/collection/2004/11">
<CompilerOptions CompileResult="H1S" CreateFullTextIndex="Yes" BreakerId="Microsoft.NLG.en.WordBreaker">
<IncludeFile File="dnsmgr.H1F" />
</CompilerOptions>
<TOCDef File="dnsmgr.H1T" Id="dnsmgr_TOC" />
<VTopicDef File="dnsmgr.H1V" />
<KeywordIndexDef File="dnsmgr_AssetId.H1K" />
<KeywordIndexDef File="dnsmgr_BestBet.H1K" />
<KeywordIndexDef File="dnsmgr_LinkTerm.H1K" />
<KeywordIndexDef File="dnsmgr_SubjectTerm.H1K" />
<ItemMoniker Name="!DefaultTOC" ProgId="HxDs.HxHierarchy" InitData="AnyString" />
<ItemMoniker Name="!DefaultFullTextSearch" ProgId="HxDs.HxFullTextSearch" InitData="AnyString" />
<ItemMoniker Name="!DefaultAssetIdIndex" ProgId="HxDs.HxIndex" InitData="AssetId" />
<ItemMoniker Name="!DefaultBestBetIndex" ProgId="HxDs.HxIndex" InitData="BestBet" />
<ItemMoniker Name="!DefaultAssociativeIndex" ProgId="HxDs.HxIndex" InitData="LinkTerm" />
<ItemMoniker Name="!DefaultKeywordIndex" ProgId="HxDs.HxIndex" InitData="SubjectTerm" />
</HelpCollection><?xml version="1.0" encoding="utf-8"?>
<HelpFileList xmlns="http://schemas.microsoft.com/help/filelist/2004/11">
<File Url="assets\061c03a5-199c-44a7-9565-0130767c3ce3.xml" />
<File Url="assets\08a4b951-74f2-4805-973e-e096d69b3dfa.xml" />
<File Url="assets\0e462ebd-84fd-432b-a5cd-8c6f3cfa3225.xml" />
<File Url="assets\0e78d78d-3d2b-40c5-ba88-c8adcd8341e4.xml" />
<File Url="assets\0f8cb43b-2e83-407c-8551-fe4f446a4a81.xml" />
<File Url="assets\1414cb7f-7305-448e-b26c-fc6f874bb6ec.xml" />
<File Url="assets\18fe1818-f1f4-4633-a0bb-92fd6b275f88.xml" />
<File Url="assets\1b10e5bb-6f3a-4b81-bcbc-3a2d0330fadf.xml" />
<File Url="assets\1d130ab3-a25b-4552-aaca-a6da8e6902d2.xml" />
<File Url="assets\1e0c881b-6dbb-4396-b725-61996bdc08bc.xml" />
<File Url="assets\1f34d4ad-0201-400e-9219-f5818c1da2f7.xml" />
<File Url="assets\21afdef0-b5ba-4a0d-bb4e-cb9901a487ac.xml" />
<File Url="assets\247d20d9-5731-4630-8370-ce79805a1f7f.xml" />
<File Url="assets\29c4fd38-d829-45ae-8a03-b4dc82a281a7.xml" />
<File Url="relatedAssets\6d22d535-ffcf-4a3a-92ab-44de6edf6f14.gif" />
<File Url="assets\2ad68d86-7a68-4363-b1b0-18fa66970dba.xml" />
<File Url="assets\2c8e760a-3c20-40f4-a692-15171ee66374.xml" />
<File Url="assets\2e2e0678-1775-4cdd-8779-32d5c281540f.xml" />
<File Url="assets\30f936d3-08e5-431c-8612-81630f5a3038.xml" />
<File Url="assets\33a1535e-7d8c-483b-8d00-ee91869c775b.xml" />
<File Url="assets\3421116c-3790-4a3b-af30-1f486f568bdd.xml" />
<File Url="assets\3739d3bb-38d5-48da-b9bf-d80401baf053.xml" />
<File Url="assets\3cf4d1b1-7a6e-4438-bf4f-22d9468c1732.xml" />
<File Url="assets\412a919f-4249-4341-aecd-bdb35d266338.xml" />
<File Url="assets\427144ca-37ce-4db7-a611-605338ec01ca.xml" />
<File Url="assets\473afe1a-0d68-422f-8194-0d63007ba3ef.xml" />
<File Url="assets\479b0f39-c62f-445c-9c66-363be93362c2.xml" />
<File Url="relatedAssets\58461ea8-b284-4ecd-80b3-f2ec60869b23.gif" />
<File Url="assets\4d785d45-dc9d-4ed2-ba73-e734d55d3319.xml" />
<File Url="assets\5234e7b1-0efc-4495-8e42-8c85d7389fc3.xml" />
<File Url="relatedAssets\d2d99fd8-5456-486d-95be-a01d6af7ae69.gif" />
<File Url="assets\52ec32f6-5eda-4d6a-8e38-809fee243b71.xml" />
<File Url="assets\53305fd6-54fd-45ca-9ff0-19686f48257d.xml" />
<File Url="assets\53661592-0f72-453e-bc5b-8ba193e1f5dc.xml" />
<File Url="assets\55e3745f-4c49-44a3-ad60-30e14638ef81.xml" />
<File Url="assets\5ad68930-7769-4385-8bd0-130ce0ec3d46.xml" />
<File Url="assets\5b03fa70-89ad-4a21-a179-2e96a43dbe54.xml" />
<File Url="assets\5e93f665-7d6f-4ea2-beca-14d91ead7bb3.xml" />
<File Url="assets\60d3d60f-3e84-4c6d-b377-0713e48bea2b.xml" />
<File Url="assets\6159f77f-25bb-42d2-9f6b-dd9905080d60.xml" />
<File Url="assets\6530ccbe-e6e1-4f5b-8d29-9529288ae9a6.xml" />
<File Url="assets\655b928d-8a7c-4b29-9ae6-b591be845ea7.xml" />
<File Url="assets\66587c39-5a8f-401c-80f7-fa0528c1340f.xml" />
<File Url="assets\67c6abe2-d3e2-4171-b9e6-70262651d1b2.xml" />
<File Url="assets\68c3652a-0c55-49b6-ae2e-9ce3f06e4d99.xml" />
<File Url="assets\69d6b9c6-8ac4-449a-a3a7-7c6ad993b22b.xml" />
<File Url="assets\6ac5194f-7b7d-405a-a229-3e04bbdc40a0.xml" />
<File Url="assets\6ed1eb2f-a859-410b-a809-84952f9c2789.xml" />
<File Url="assets\7294aebb-0452-4412-b5de-fc09e6b01ed6.xml" />
<File Url="assets\72a8666b-0143-43d5-98a5-780e81d9131b.xml" />
<File Url="assets\744b7d08-dfcd-4a1b-8157-fd443cb0482b.xml" />
<File Url="assets\7558126a-cc90-4854-855d-533d706e7750.xml" />
<File Url="assets\761844e5-12f2-4882-8f4d-103c5dc51e1b.xml" />
<File Url="assets\76a72c3d-6c2f-489f-814b-33a94f207896.xml" />
<File Url="assets\7c47acc8-e505-4d56-9849-226e53bff23d.xml" />
<File Url="relatedAssets\c7e7d942-13ac-4678-a0a4-dbfffbee3e96.gif" />
<File Url="assets\7cbe9c5e-4187-4fa2-a512-f6162162f22e.xml" />
<File Url="assets\7d9f6ea1-3d84-4841-b30d-fcf73a92e35d.xml" />
<File Url="assets\7fc91f3b-c926-4dd7-a9f5-8d140d261a14.xml" />
<File Url="assets\806532cf-9b03-4777-bef4-d95c9d4136bb.xml" />
<File Url="assets\81005446-0f9b-41d7-b9cb-9f61177e256d.xml" />
<File Url="assets\81e08359-c427-45e9-93f1-399b1d54f5ab.xml" />
<File Url="assets\859fef3c-fec0-4b9f-9ac0-2b35045f527a.xml" />
<File Url="assets\8e3f7e44-91dd-44c4-81cf-158cea708902.xml" />
<File Url="assets\94d8e229-ef7b-4b4f-884f-5fec92bbc911.xml" />
<File Url="assets\9537da9f-7427-4358-91d8-ad5fd7be3fe6.xml" />
<File Url="relatedAssets\7e821f18-10ac-422a-9f75-1f8f3acadb41.gif" />
<File Url="assets\99060a7c-f0bd-41e7-8ec8-5eeae2fbf0ad.xml" />
<File Url="assets\9cf831b9-0fe9-405a-a807-19e27aa406d3.xml" />
<File Url="assets\9f93a319-4e77-4c17-ad4a-10e3ea9847f1.xml" />
<File Url="assets\a73a59b2-3140-46cc-940f-a280961c4ca5.xml" />
<File Url="assets\aca0968d-b719-4943-b04e-29c5c420147d.xml" />
<File Url="assets\acf8b192-752d-4459-b7e4-a404309fcf32.xml" />
<File Url="assets\ad057afb-eb26-4077-b549-728b10c2a208.xml" />
<File Url="assets\b09263e1-ab05-4f7f-a45b-7033bb490175.xml" />
<File Url="assets\b17a56a8-61b6-4c6c-a717-cde3c8099916.xml" />
<File Url="assets\b42fe706-4949-4965-bd17-1afbc909b4ad.xml" />
<File Url="assets\b6793e7e-0bec-4865-a869-f947867dcc17.xml" />
<File Url="assets\ba56ad95-2877-4f56-a9cc-7e2def9242f8.xml" />
<File Url="assets\bc5c7ee2-8e40-41b9-9763-7e8d4601d99d.xml" />
<File Url="assets\c2c0a226-364e-4c4d-88ee-5c3ef2b3023f.xml" />
<File Url="assets\c6a3e04d-6306-4c63-82d7-49d583de1640.xml" />
<File Url="assets\ca37b2cf-5022-4330-b567-3eacb11b7f1a.xml" />
<File Url="assets\caa5a07e-98e6-4fce-a8a5-d3556d0f3c92.xml" />
<File Url="assets\ccf07499-7a36-40bd-8b23-b8c91fa6cfd3.xml" />
<File Url="assets\d30554bd-b6fc-45d2-823c-642a0880bf0f.xml" />
<File Url="assets\da92dc7d-85d5-476d-ae5d-1b215665313f.xml" />
<File Url="assets\dbe90e28-fea7-4962-9429-d58cc42ddffd.xml" />
<File Url="assets\df7d2a74-f697-4af1-a6b1-c2bd41e18e65.xml" />
<File Url="relatedAssets\a94424e0-d4de-41f8-8893-7e8e9f465bbd.gif" />
<File Url="relatedAssets\624dd3fb-47aa-402e-87f8-773e8e9b828f.gif" />
<File Url="relatedAssets\10853d03-fe57-4f44-b77f-aa7dddd20a39.gif" />
<File Url="assets\e2dd91d6-441f-4175-9d1d-d152d148d73c.xml" />
<File Url="assets\e324865f-1cbe-42ec-bf18-a220c0e26fe6.xml" />
<File Url="assets\e54b0af1-e833-4195-9f4f-c80fe34ea4e9.xml" />
<File Url="assets\e8a9ee31-1613-43e4-b796-b74d5040a910.xml" />
<File Url="assets\e93c32c9-0c5c-4822-9c84-d464658d6ed3.xml" />
<File Url="assets\ebac15fc-5773-4cce-ae75-c67b7e3d31c0.xml" />
<File Url="assets\eebcdbcb-eab3-47a8-8355-3e1189b38c7f.xml" />
<File Url="assets\f0e5d191-727c-44d9-976f-1b748f3f7876.xml" />
<File Url="assets\f145d739-af95-4773-b755-d6a2a1780a65.xml" />
<File Url="assets\f39b0f49-8a74-4f7c-8615-87df497aeffb.xml" />
<File Url="assets\f4fb1647-4ad8-4a92-91e1-ccc72d1ec193.xml" />
<File Url="assets\f707d8fa-3e34-4b2a-b64e-e71adf2c6b69.xml" />
<File Url="assets\f8090427-a526-435b-906e-7e961160ecb2.xml" />
<File Url="assets\f8521fc2-120f-4651-b0ce-28f62fe945a5.xml" />
<File Url="assets\f85711b2-d9ac-4e08-84d0-5082e1a7a5d6.xml" />
<File Url="assets\f8ca5381-d1b4-4ea1-89cd-f94f33199bc3.xml" />
<File Url="assets\fbb93390-ad20-4e15-b0c9-53744e6f6e3e.xml" />
<File Url="assets\ff3bc7ae-5f22-4fc7-8b87-6028d7e7caf4.xml" />
</HelpFileList><?xml version="1.0" encoding="utf-8"?>
<VTopicSet DTDVersion="1.0" xmlns="http://schemas.microsoft.com/help/vtopic/2004/11">
<Vtopic Url="assets\061c03a5-199c-44a7-9565-0130767c3ce3.xml" RLTitle="Checklist: Secure Your DNS Server">
<Attr Name="assetid" Value="061c03a5-199c-44a7-9565-0130767c3ce3" />
<Keyword Index="AssetId" Term="061c03a5-199c-44a7-9565-0130767c3ce3" />
<Keyword Index="AssetId" Term="061c03a5-199c-44a7-9565-0130767c3ce31033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="061c03a5-199c-44a7-9565-0130767c3ce3" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\08a4b951-74f2-4805-973e-e096d69b3dfa.xml" RLTitle="Troubleshooting DNS">
<Attr Name="assetid" Value="08a4b951-74f2-4805-973e-e096d69b3dfa" />
<Keyword Index="AssetId" Term="08a4b951-74f2-4805-973e-e096d69b3dfa" />
<Keyword Index="AssetId" Term="08a4b951-74f2-4805-973e-e096d69b3dfa1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="08a4b951-74f2-4805-973e-e096d69b3dfa" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\0e462ebd-84fd-432b-a5cd-8c6f3cfa3225.xml" RLTitle="Modify Security for a Directory-Integrated Zone">
<Attr Name="assetid" Value="0e462ebd-84fd-432b-a5cd-8c6f3cfa3225" />
<Keyword Index="AssetId" Term="0e462ebd-84fd-432b-a5cd-8c6f3cfa3225" />
<Keyword Index="AssetId" Term="0e462ebd-84fd-432b-a5cd-8c6f3cfa32251033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="0e462ebd-84fd-432b-a5cd-8c6f3cfa3225" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\0e78d78d-3d2b-40c5-ba88-c8adcd8341e4.xml" RLTitle="Set Aging and Scavenging Properties for the DNS Server">
<Attr Name="assetid" Value="0e78d78d-3d2b-40c5-ba88-c8adcd8341e4" />
<Keyword Index="AssetId" Term="0e78d78d-3d2b-40c5-ba88-c8adcd8341e4" />
<Keyword Index="AssetId" Term="0e78d78d-3d2b-40c5-ba88-c8adcd8341e41033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="0e78d78d-3d2b-40c5-ba88-c8adcd8341e4" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\0f8cb43b-2e83-407c-8551-fe4f446a4a81.xml" RLTitle="Securing DNS">
<Attr Name="assetid" Value="0f8cb43b-2e83-407c-8551-fe4f446a4a81" />
<Keyword Index="AssetId" Term="0f8cb43b-2e83-407c-8551-fe4f446a4a81" />
<Keyword Index="AssetId" Term="0f8cb43b-2e83-407c-8551-fe4f446a4a811033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="0f8cb43b-2e83-407c-8551-fe4f446a4a81" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\1414cb7f-7305-448e-b26c-fc6f874bb6ec.xml" RLTitle="Securing DNS Deployment">
<Attr Name="assetid" Value="1414cb7f-7305-448e-b26c-fc6f874bb6ec" />
<Keyword Index="AssetId" Term="1414cb7f-7305-448e-b26c-fc6f874bb6ec" />
<Keyword Index="AssetId" Term="1414cb7f-7305-448e-b26c-fc6f874bb6ec1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="1414cb7f-7305-448e-b26c-fc6f874bb6ec" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\18fe1818-f1f4-4633-a0bb-92fd6b275f88.xml" RLTitle="Zone Aging/Scavenging Properties Dialog Box">
<Attr Name="assetid" Value="18fe1818-f1f4-4633-a0bb-92fd6b275f88" />
<Keyword Index="AssetId" Term="18fe1818-f1f4-4633-a0bb-92fd6b275f88" />
<Keyword Index="AssetId" Term="18fe1818-f1f4-4633-a0bb-92fd6b275f881033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="18fe1818-f1f4-4633-a0bb-92fd6b275f88" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\1b10e5bb-6f3a-4b81-bcbc-3a2d0330fadf.xml" RLTitle="Configuring Zone Properties">
<Attr Name="assetid" Value="1b10e5bb-6f3a-4b81-bcbc-3a2d0330fadf" />
<Keyword Index="AssetId" Term="1b10e5bb-6f3a-4b81-bcbc-3a2d0330fadf" />
<Keyword Index="AssetId" Term="1b10e5bb-6f3a-4b81-bcbc-3a2d0330fadf1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="1b10e5bb-6f3a-4b81-bcbc-3a2d0330fadf" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\1d130ab3-a25b-4552-aaca-a6da8e6902d2.xml" RLTitle="New Features in DNS for Windows Server 2008 R2">
<Attr Name="assetid" Value="1d130ab3-a25b-4552-aaca-a6da8e6902d2" />
<Keyword Index="AssetId" Term="1d130ab3-a25b-4552-aaca-a6da8e6902d2" />
<Keyword Index="AssetId" Term="1d130ab3-a25b-4552-aaca-a6da8e6902d21033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="1d130ab3-a25b-4552-aaca-a6da8e6902d2" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\1e0c881b-6dbb-4396-b725-61996bdc08bc.xml" RLTitle="Pause or Resume a Zone">
<Attr Name="assetid" Value="1e0c881b-6dbb-4396-b725-61996bdc08bc" />
<Keyword Index="AssetId" Term="1e0c881b-6dbb-4396-b725-61996bdc08bc" />
<Keyword Index="AssetId" Term="1e0c881b-6dbb-4396-b725-61996bdc08bc1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="1e0c881b-6dbb-4396-b725-61996bdc08bc" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\1f34d4ad-0201-400e-9219-f5818c1da2f7.xml" RLTitle="Create a Zone Delegation">
<Attr Name="assetid" Value="1f34d4ad-0201-400e-9219-f5818c1da2f7" />
<Keyword Index="AssetId" Term="1f34d4ad-0201-400e-9219-f5818c1da2f7" />
<Keyword Index="AssetId" Term="1f34d4ad-0201-400e-9219-f5818c1da2f71033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="1f34d4ad-0201-400e-9219-f5818c1da2f7" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\21afdef0-b5ba-4a0d-bb4e-cb9901a487ac.xml" RLTitle="Checklist: Automatically Remove Stale Resource Records">
<Attr Name="assetid" Value="21afdef0-b5ba-4a0d-bb4e-cb9901a487ac" />
<Keyword Index="AssetId" Term="21afdef0-b5ba-4a0d-bb4e-cb9901a487ac" />
<Keyword Index="AssetId" Term="21afdef0-b5ba-4a0d-bb4e-cb9901a487ac1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="21afdef0-b5ba-4a0d-bb4e-cb9901a487ac" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\247d20d9-5731-4630-8370-ce79805a1f7f.xml" RLTitle="Troubleshooting Dynamic Updates">
<Attr Name="assetid" Value="247d20d9-5731-4630-8370-ce79805a1f7f" />
<Keyword Index="AssetId" Term="247d20d9-5731-4630-8370-ce79805a1f7f" />
<Keyword Index="AssetId" Term="247d20d9-5731-4630-8370-ce79805a1f7f1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="247d20d9-5731-4630-8370-ce79805a1f7f" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\29c4fd38-d829-45ae-8a03-b4dc82a281a7.xml" RLTitle="Remove a Server from DNS Manager">
<Attr Name="assetid" Value="29c4fd38-d829-45ae-8a03-b4dc82a281a7" />
<Keyword Index="AssetId" Term="29c4fd38-d829-45ae-8a03-b4dc82a281a7" />
<Keyword Index="AssetId" Term="29c4fd38-d829-45ae-8a03-b4dc82a281a71033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="29c4fd38-d829-45ae-8a03-b4dc82a281a7" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="relatedAssets\6d22d535-ffcf-4a3a-92ab-44de6edf6f14.gif">
<Keyword Index="AssetId" Term="6d22d535-ffcf-4a3a-92ab-44de6edf6f14" />
</Vtopic>
<Vtopic Url="assets\2ad68d86-7a68-4363-b1b0-18fa66970dba.xml" RLTitle="Understanding Zones">
<Attr Name="assetid" Value="2ad68d86-7a68-4363-b1b0-18fa66970dba" />
<Keyword Index="AssetId" Term="2ad68d86-7a68-4363-b1b0-18fa66970dba" />
<Keyword Index="AssetId" Term="2ad68d86-7a68-4363-b1b0-18fa66970dba1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="2ad68d86-7a68-4363-b1b0-18fa66970dba" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\2c8e760a-3c20-40f4-a692-15171ee66374.xml" RLTitle="Allow Dynamic Updates">
<Attr Name="assetid" Value="2c8e760a-3c20-40f4-a692-15171ee66374" />
<Keyword Index="AssetId" Term="2c8e760a-3c20-40f4-a692-15171ee66374" />
<Keyword Index="AssetId" Term="2c8e760a-3c20-40f4-a692-15171ee663741033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="2c8e760a-3c20-40f4-a692-15171ee66374" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\2e2e0678-1775-4cdd-8779-32d5c281540f.xml" RLTitle="Checklist: Store Data in an AD DS Application Partition">
<Attr Name="assetid" Value="2e2e0678-1775-4cdd-8779-32d5c281540f" />
<Keyword Index="AssetId" Term="2e2e0678-1775-4cdd-8779-32d5c281540f" />
<Keyword Index="AssetId" Term="2e2e0678-1775-4cdd-8779-32d5c281540f1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="2e2e0678-1775-4cdd-8779-32d5c281540f" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\30f936d3-08e5-431c-8612-81630f5a3038.xml" RLTitle="Specify Other DNS Servers as Authoritative for a Zone">
<Attr Name="assetid" Value="30f936d3-08e5-431c-8612-81630f5a3038" />
<Keyword Index="AssetId" Term="30f936d3-08e5-431c-8612-81630f5a3038" />
<Keyword Index="AssetId" Term="30f936d3-08e5-431c-8612-81630f5a30381033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="30f936d3-08e5-431c-8612-81630f5a3038" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\33a1535e-7d8c-483b-8d00-ee91869c775b.xml" RLTitle="Start Immediate Scavenging of Stale Resource Records">
<Attr Name="assetid" Value="33a1535e-7d8c-483b-8d00-ee91869c775b" />
<Keyword Index="AssetId" Term="33a1535e-7d8c-483b-8d00-ee91869c775b" />
<Keyword Index="AssetId" Term="33a1535e-7d8c-483b-8d00-ee91869c775b1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="33a1535e-7d8c-483b-8d00-ee91869c775b" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\3421116c-3790-4a3b-af30-1f486f568bdd.xml" RLTitle="Configure a New DNS Server">
<Attr Name="assetid" Value="3421116c-3790-4a3b-af30-1f486f568bdd" />
<Keyword Index="AssetId" Term="3421116c-3790-4a3b-af30-1f486f568bdd" />
<Keyword Index="AssetId" Term="3421116c-3790-4a3b-af30-1f486f568bdd1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="3421116c-3790-4a3b-af30-1f486f568bdd" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\3739d3bb-38d5-48da-b9bf-d80401baf053.xml" RLTitle="Change the Zone Type">
<Attr Name="assetid" Value="3739d3bb-38d5-48da-b9bf-d80401baf053" />
<Keyword Index="AssetId" Term="3739d3bb-38d5-48da-b9bf-d80401baf053" />
<Keyword Index="AssetId" Term="3739d3bb-38d5-48da-b9bf-d80401baf0531033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="3739d3bb-38d5-48da-b9bf-d80401baf053" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\3cf4d1b1-7a6e-4438-bf4f-22d9468c1732.xml" RLTitle="Install a DNS Server">
<Attr Name="assetid" Value="3cf4d1b1-7a6e-4438-bf4f-22d9468c1732" />
<Keyword Index="AssetId" Term="3cf4d1b1-7a6e-4438-bf4f-22d9468c1732" />
<Keyword Index="AssetId" Term="3cf4d1b1-7a6e-4438-bf4f-22d9468c17321033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="3cf4d1b1-7a6e-4438-bf4f-22d9468c1732" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\412a919f-4249-4341-aecd-bdb35d266338.xml" RLTitle="DNS Tools">
<Attr Name="assetid" Value="412a919f-4249-4341-aecd-bdb35d266338" />
<Keyword Index="AssetId" Term="412a919f-4249-4341-aecd-bdb35d266338" />
<Keyword Index="AssetId" Term="412a919f-4249-4341-aecd-bdb35d2663381033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="412a919f-4249-4341-aecd-bdb35d266338" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\427144ca-37ce-4db7-a611-605338ec01ca.xml" RLTitle="Understanding Active Directory Domain Services Integration">
<Attr Name="assetid" Value="427144ca-37ce-4db7-a611-605338ec01ca" />
<Keyword Index="AssetId" Term="427144ca-37ce-4db7-a611-605338ec01ca" />
<Keyword Index="AssetId" Term="427144ca-37ce-4db7-a611-605338ec01ca1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="427144ca-37ce-4db7-a611-605338ec01ca" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\473afe1a-0d68-422f-8194-0d63007ba3ef.xml" RLTitle="Checklist: Configure DNS Client Settings">
<Attr Name="assetid" Value="473afe1a-0d68-422f-8194-0d63007ba3ef" />
<Keyword Index="AssetId" Term="473afe1a-0d68-422f-8194-0d63007ba3ef" />
<Keyword Index="AssetId" Term="473afe1a-0d68-422f-8194-0d63007ba3ef1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="473afe1a-0d68-422f-8194-0d63007ba3ef" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\479b0f39-c62f-445c-9c66-363be93362c2.xml" RLTitle="Enlist a DNS Server in a DNS Application Directory Partition">
<Attr Name="assetid" Value="479b0f39-c62f-445c-9c66-363be93362c2" />
<Keyword Index="AssetId" Term="479b0f39-c62f-445c-9c66-363be93362c2" />
<Keyword Index="AssetId" Term="479b0f39-c62f-445c-9c66-363be93362c21033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="479b0f39-c62f-445c-9c66-363be93362c2" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="relatedAssets\58461ea8-b284-4ecd-80b3-f2ec60869b23.gif">
<Keyword Index="AssetId" Term="58461ea8-b284-4ecd-80b3-f2ec60869b23" />
</Vtopic>
<Vtopic Url="assets\4d785d45-dc9d-4ed2-ba73-e734d55d3319.xml" RLTitle="Understanding DNS Client Settings">
<Attr Name="assetid" Value="4d785d45-dc9d-4ed2-ba73-e734d55d3319" />
<Keyword Index="AssetId" Term="4d785d45-dc9d-4ed2-ba73-e734d55d3319" />
<Keyword Index="AssetId" Term="4d785d45-dc9d-4ed2-ba73-e734d55d33191033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="4d785d45-dc9d-4ed2-ba73-e734d55d3319" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\5234e7b1-0efc-4495-8e42-8c85d7389fc3.xml" RLTitle="Update Root Hints on the DNS Server">
<Attr Name="assetid" Value="5234e7b1-0efc-4495-8e42-8c85d7389fc3" />
<Keyword Index="AssetId" Term="5234e7b1-0efc-4495-8e42-8c85d7389fc3" />
<Keyword Index="AssetId" Term="5234e7b1-0efc-4495-8e42-8c85d7389fc31033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="5234e7b1-0efc-4495-8e42-8c85d7389fc3" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="relatedAssets\d2d99fd8-5456-486d-95be-a01d6af7ae69.gif">
<Keyword Index="AssetId" Term="d2d99fd8-5456-486d-95be-a01d6af7ae69" />
</Vtopic>
<Vtopic Url="assets\52ec32f6-5eda-4d6a-8e38-809fee243b71.xml" RLTitle="Understanding Forwarders">
<Attr Name="assetid" Value="52ec32f6-5eda-4d6a-8e38-809fee243b71" />
<Keyword Index="AssetId" Term="52ec32f6-5eda-4d6a-8e38-809fee243b71" />
<Keyword Index="AssetId" Term="52ec32f6-5eda-4d6a-8e38-809fee243b711033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="52ec32f6-5eda-4d6a-8e38-809fee243b71" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\53305fd6-54fd-45ca-9ff0-19686f48257d.xml" RLTitle="DNS Overview">
<Attr Name="assetid" Value="53305fd6-54fd-45ca-9ff0-19686f48257d" />
<Keyword Index="AssetId" Term="53305fd6-54fd-45ca-9ff0-19686f48257d" />
<Keyword Index="AssetId" Term="53305fd6-54fd-45ca-9ff0-19686f48257d1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="53305fd6-54fd-45ca-9ff0-19686f48257d" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\53661592-0f72-453e-bc5b-8ba193e1f5dc.xml" RLTitle="Planning DNS Zones">
<Attr Name="assetid" Value="53661592-0f72-453e-bc5b-8ba193e1f5dc" />
<Keyword Index="AssetId" Term="53661592-0f72-453e-bc5b-8ba193e1f5dc" />
<Keyword Index="AssetId" Term="53661592-0f72-453e-bc5b-8ba193e1f5dc1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="53661592-0f72-453e-bc5b-8ba193e1f5dc" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\55e3745f-4c49-44a3-ad60-30e14638ef81.xml" RLTitle="Allow Only Secure Dynamic Updates">
<Attr Name="assetid" Value="55e3745f-4c49-44a3-ad60-30e14638ef81" />
<Keyword Index="AssetId" Term="55e3745f-4c49-44a3-ad60-30e14638ef81" />
<Keyword Index="AssetId" Term="55e3745f-4c49-44a3-ad60-30e14638ef811033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="55e3745f-4c49-44a3-ad60-30e14638ef81" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\5ad68930-7769-4385-8bd0-130ce0ec3d46.xml" RLTitle="<DNS Server Name> Properties Sheet">
<Attr Name="assetid" Value="5ad68930-7769-4385-8bd0-130ce0ec3d46" />
<Keyword Index="AssetId" Term="5ad68930-7769-4385-8bd0-130ce0ec3d46" />
<Keyword Index="AssetId" Term="5ad68930-7769-4385-8bd0-130ce0ec3d461033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="5ad68930-7769-4385-8bd0-130ce0ec3d46" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\5b03fa70-89ad-4a21-a179-2e96a43dbe54.xml" RLTitle="Add a Reverse Lookup Zone">
<Attr Name="assetid" Value="5b03fa70-89ad-4a21-a179-2e96a43dbe54" />
<Keyword Index="AssetId" Term="5b03fa70-89ad-4a21-a179-2e96a43dbe54" />
<Keyword Index="AssetId" Term="5b03fa70-89ad-4a21-a179-2e96a43dbe541033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="5b03fa70-89ad-4a21-a179-2e96a43dbe54" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\5e93f665-7d6f-4ea2-beca-14d91ead7bb3.xml" RLTitle="Add a Stub Zone">
<Attr Name="assetid" Value="5e93f665-7d6f-4ea2-beca-14d91ead7bb3" />
<Keyword Index="AssetId" Term="5e93f665-7d6f-4ea2-beca-14d91ead7bb3" />
<Keyword Index="AssetId" Term="5e93f665-7d6f-4ea2-beca-14d91ead7bb31033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="5e93f665-7d6f-4ea2-beca-14d91ead7bb3" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\60d3d60f-3e84-4c6d-b377-0713e48bea2b.xml" RLTitle="Add a Resource Record to a Zone">
<Attr Name="assetid" Value="60d3d60f-3e84-4c6d-b377-0713e48bea2b" />
<Keyword Index="AssetId" Term="60d3d60f-3e84-4c6d-b377-0713e48bea2b" />
<Keyword Index="AssetId" Term="60d3d60f-3e84-4c6d-b377-0713e48bea2b1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="60d3d60f-3e84-4c6d-b377-0713e48bea2b" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\6159f77f-25bb-42d2-9f6b-dd9905080d60.xml" RLTitle="Mail Exchanger (MX) Resource Record Dialog Box">
<Attr Name="assetid" Value="6159f77f-25bb-42d2-9f6b-dd9905080d60" />
<Keyword Index="AssetId" Term="6159f77f-25bb-42d2-9f6b-dd9905080d60" />
<Keyword Index="AssetId" Term="6159f77f-25bb-42d2-9f6b-dd9905080d601033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="6159f77f-25bb-42d2-9f6b-dd9905080d60" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\6530ccbe-e6e1-4f5b-8d29-9529288ae9a6.xml" RLTitle="Notify Dialog Box">
<Attr Name="assetid" Value="6530ccbe-e6e1-4f5b-8d29-9529288ae9a6" />
<Keyword Index="AssetId" Term="6530ccbe-e6e1-4f5b-8d29-9529288ae9a6" />
<Keyword Index="AssetId" Term="6530ccbe-e6e1-4f5b-8d29-9529288ae9a61033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="6530ccbe-e6e1-4f5b-8d29-9529288ae9a6" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\655b928d-8a7c-4b29-9ae6-b591be845ea7.xml" RLTitle="Modify Security for a Resource Record">
<Attr Name="assetid" Value="655b928d-8a7c-4b29-9ae6-b591be845ea7" />
<Keyword Index="AssetId" Term="655b928d-8a7c-4b29-9ae6-b591be845ea7" />
<Keyword Index="AssetId" Term="655b928d-8a7c-4b29-9ae6-b591be845ea71033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="655b928d-8a7c-4b29-9ae6-b591be845ea7" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\66587c39-5a8f-401c-80f7-fa0528c1340f.xml" RLTitle="Create a DNS Application Directory Partition">
<Attr Name="assetid" Value="66587c39-5a8f-401c-80f7-fa0528c1340f" />
<Keyword Index="AssetId" Term="66587c39-5a8f-401c-80f7-fa0528c1340f" />
<Keyword Index="AssetId" Term="66587c39-5a8f-401c-80f7-fa0528c1340f1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="66587c39-5a8f-401c-80f7-fa0528c1340f" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\67c6abe2-d3e2-4171-b9e6-70262651d1b2.xml" RLTitle="New ATM Address (ATMA) Resource Record Dialog Box">
<Attr Name="assetid" Value="67c6abe2-d3e2-4171-b9e6-70262651d1b2" />
<Keyword Index="AssetId" Term="67c6abe2-d3e2-4171-b9e6-70262651d1b2" />
<Keyword Index="AssetId" Term="67c6abe2-d3e2-4171-b9e6-70262651d1b21033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="67c6abe2-d3e2-4171-b9e6-70262651d1b2" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\68c3652a-0c55-49b6-ae2e-9ce3f06e4d99.xml" RLTitle="Managing Resource Records">
<Attr Name="assetid" Value="68c3652a-0c55-49b6-ae2e-9ce3f06e4d99" />
<Keyword Index="AssetId" Term="68c3652a-0c55-49b6-ae2e-9ce3f06e4d99" />
<Keyword Index="AssetId" Term="68c3652a-0c55-49b6-ae2e-9ce3f06e4d991033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="68c3652a-0c55-49b6-ae2e-9ce3f06e4d99" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\69d6b9c6-8ac4-449a-a3a7-7c6ad993b22b.xml" RLTitle="Use Aging and Scavenging">
<Attr Name="assetid" Value="69d6b9c6-8ac4-449a-a3a7-7c6ad993b22b" />
<Keyword Index="AssetId" Term="69d6b9c6-8ac4-449a-a3a7-7c6ad993b22b" />
<Keyword Index="AssetId" Term="69d6b9c6-8ac4-449a-a3a7-7c6ad993b22b1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="69d6b9c6-8ac4-449a-a3a7-7c6ad993b22b" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\6ac5194f-7b7d-405a-a229-3e04bbdc40a0.xml" RLTitle="Adding Zones">
<Attr Name="assetid" Value="6ac5194f-7b7d-405a-a229-3e04bbdc40a0" />
<Keyword Index="AssetId" Term="6ac5194f-7b7d-405a-a229-3e04bbdc40a0" />
<Keyword Index="AssetId" Term="6ac5194f-7b7d-405a-a229-3e04bbdc40a01033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="6ac5194f-7b7d-405a-a229-3e04bbdc40a0" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\6ed1eb2f-a859-410b-a809-84952f9c2789.xml" RLTitle="Add a Server to DNS Manager">
<Attr Name="assetid" Value="6ed1eb2f-a859-410b-a809-84952f9c2789" />
<Keyword Index="AssetId" Term="6ed1eb2f-a859-410b-a809-84952f9c2789" />
<Keyword Index="AssetId" Term="6ed1eb2f-a859-410b-a809-84952f9c27891033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="6ed1eb2f-a859-410b-a809-84952f9c2789" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\7294aebb-0452-4412-b5de-fc09e6b01ed6.xml" RLTitle="Add a Forward Lookup Zone">
<Attr Name="assetid" Value="7294aebb-0452-4412-b5de-fc09e6b01ed6" />
<Keyword Index="AssetId" Term="7294aebb-0452-4412-b5de-fc09e6b01ed6" />
<Keyword Index="AssetId" Term="7294aebb-0452-4412-b5de-fc09e6b01ed61033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="7294aebb-0452-4412-b5de-fc09e6b01ed6" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\72a8666b-0143-43d5-98a5-780e81d9131b.xml" RLTitle="Reset Aging and Scavenging Properties for a Specified Resource Record">
<Attr Name="assetid" Value="72a8666b-0143-43d5-98a5-780e81d9131b" />
<Keyword Index="AssetId" Term="72a8666b-0143-43d5-98a5-780e81d9131b" />
<Keyword Index="AssetId" Term="72a8666b-0143-43d5-98a5-780e81d9131b1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="72a8666b-0143-43d5-98a5-780e81d9131b" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\744b7d08-dfcd-4a1b-8157-fd443cb0482b.xml" RLTitle="Modify Zone Transfer Settings">
<Attr Name="assetid" Value="744b7d08-dfcd-4a1b-8157-fd443cb0482b" />
<Keyword Index="AssetId" Term="744b7d08-dfcd-4a1b-8157-fd443cb0482b" />
<Keyword Index="AssetId" Term="744b7d08-dfcd-4a1b-8157-fd443cb0482b1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="744b7d08-dfcd-4a1b-8157-fd443cb0482b" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\7558126a-cc90-4854-855d-533d706e7750.xml" RLTitle="Disable Recursion on the DNS Server">
<Attr Name="assetid" Value="7558126a-cc90-4854-855d-533d706e7750" />
<Keyword Index="AssetId" Term="7558126a-cc90-4854-855d-533d706e7750" />
<Keyword Index="AssetId" Term="7558126a-cc90-4854-855d-533d706e77501033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="7558126a-cc90-4854-855d-533d706e7750" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\761844e5-12f2-4882-8f4d-103c5dc51e1b.xml" RLTitle="Troubleshooting DNS Clients">
<Attr Name="assetid" Value="761844e5-12f2-4882-8f4d-103c5dc51e1b" />
<Keyword Index="AssetId" Term="761844e5-12f2-4882-8f4d-103c5dc51e1b" />
<Keyword Index="AssetId" Term="761844e5-12f2-4882-8f4d-103c5dc51e1b1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="761844e5-12f2-4882-8f4d-103c5dc51e1b" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\76a72c3d-6c2f-489f-814b-33a94f207896.xml" RLTitle="Understanding Dynamic Update">
<Attr Name="assetid" Value="76a72c3d-6c2f-489f-814b-33a94f207896" />
<Keyword Index="AssetId" Term="76a72c3d-6c2f-489f-814b-33a94f207896" />
<Keyword Index="AssetId" Term="76a72c3d-6c2f-489f-814b-33a94f2078961033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="76a72c3d-6c2f-489f-814b-33a94f207896" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\7c47acc8-e505-4d56-9849-226e53bff23d.xml" RLTitle="Checklist: Add a Domain Controller with the DNS Server Service">
<Attr Name="assetid" Value="7c47acc8-e505-4d56-9849-226e53bff23d" />
<Keyword Index="AssetId" Term="7c47acc8-e505-4d56-9849-226e53bff23d" />
<Keyword Index="AssetId" Term="7c47acc8-e505-4d56-9849-226e53bff23d1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="7c47acc8-e505-4d56-9849-226e53bff23d" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="relatedAssets\c7e7d942-13ac-4678-a0a4-dbfffbee3e96.gif">
<Keyword Index="AssetId" Term="c7e7d942-13ac-4678-a0a4-dbfffbee3e96" />
</Vtopic>
<Vtopic Url="assets\7cbe9c5e-4187-4fa2-a512-f6162162f22e.xml" RLTitle="Understanding Zone Delegation">
<Attr Name="assetid" Value="7cbe9c5e-4187-4fa2-a512-f6162162f22e" />
<Keyword Index="AssetId" Term="7cbe9c5e-4187-4fa2-a512-f6162162f22e" />
<Keyword Index="AssetId" Term="7cbe9c5e-4187-4fa2-a512-f6162162f22e1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="7cbe9c5e-4187-4fa2-a512-f6162162f22e" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\7d9f6ea1-3d84-4841-b30d-fcf73a92e35d.xml" RLTitle="Understanding Aging and Scavenging">
<Attr Name="assetid" Value="7d9f6ea1-3d84-4841-b30d-fcf73a92e35d" />
<Keyword Index="AssetId" Term="7d9f6ea1-3d84-4841-b30d-fcf73a92e35d" />
<Keyword Index="AssetId" Term="7d9f6ea1-3d84-4841-b30d-fcf73a92e35d1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="7d9f6ea1-3d84-4841-b30d-fcf73a92e35d" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\7fc91f3b-c926-4dd7-a9f5-8d140d261a14.xml" RLTitle="Updating Root Hints">
<Attr Name="assetid" Value="7fc91f3b-c926-4dd7-a9f5-8d140d261a14" />
<Keyword Index="AssetId" Term="7fc91f3b-c926-4dd7-a9f5-8d140d261a14" />
<Keyword Index="AssetId" Term="7fc91f3b-c926-4dd7-a9f5-8d140d261a141033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="7fc91f3b-c926-4dd7-a9f5-8d140d261a14" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\806532cf-9b03-4777-bef4-d95c9d4136bb.xml" RLTitle="Enable DNS for DHCP-Enabled Clients">
<Attr Name="assetid" Value="806532cf-9b03-4777-bef4-d95c9d4136bb" />
<Keyword Index="AssetId" Term="806532cf-9b03-4777-bef4-d95c9d4136bb" />
<Keyword Index="AssetId" Term="806532cf-9b03-4777-bef4-d95c9d4136bb1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="806532cf-9b03-4777-bef4-d95c9d4136bb" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\81005446-0f9b-41d7-b9cb-9f61177e256d.xml" RLTitle="Set Aging and Scavenging Properties for a Zone">
<Attr Name="assetid" Value="81005446-0f9b-41d7-b9cb-9f61177e256d" />
<Keyword Index="AssetId" Term="81005446-0f9b-41d7-b9cb-9f61177e256d" />
<Keyword Index="AssetId" Term="81005446-0f9b-41d7-b9cb-9f61177e256d1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="81005446-0f9b-41d7-b9cb-9f61177e256d" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\81e08359-c427-45e9-93f1-399b1d54f5ab.xml" RLTitle="Advanced Dialog Box (WINS)">
<Attr Name="assetid" Value="81e08359-c427-45e9-93f1-399b1d54f5ab" />
<Keyword Index="AssetId" Term="81e08359-c427-45e9-93f1-399b1d54f5ab" />
<Keyword Index="AssetId" Term="81e08359-c427-45e9-93f1-399b1d54f5ab1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="81e08359-c427-45e9-93f1-399b1d54f5ab" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\859fef3c-fec0-4b9f-9ac0-2b35045f527a.xml" RLTitle="Start or Stop a DNS Server">
<Attr Name="assetid" Value="859fef3c-fec0-4b9f-9ac0-2b35045f527a" />
<Keyword Index="AssetId" Term="859fef3c-fec0-4b9f-9ac0-2b35045f527a" />
<Keyword Index="AssetId" Term="859fef3c-fec0-4b9f-9ac0-2b35045f527a1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="859fef3c-fec0-4b9f-9ac0-2b35045f527a" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\8e3f7e44-91dd-44c4-81cf-158cea708902.xml" RLTitle="DNS">
<Attr Name="assetid" Value="8e3f7e44-91dd-44c4-81cf-158cea708902" />
<Keyword Index="AssetId" Term="8e3f7e44-91dd-44c4-81cf-158cea708902" />
<Keyword Index="AssetId" Term="8e3f7e44-91dd-44c4-81cf-158cea7089021033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="8e3f7e44-91dd-44c4-81cf-158cea708902" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\94d8e229-ef7b-4b4f-884f-5fec92bbc911.xml" RLTitle="Understanding Zone Types">
<Attr Name="assetid" Value="94d8e229-ef7b-4b4f-884f-5fec92bbc911" />
<Keyword Index="AssetId" Term="94d8e229-ef7b-4b4f-884f-5fec92bbc911" />
<Keyword Index="AssetId" Term="94d8e229-ef7b-4b4f-884f-5fec92bbc9111033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="94d8e229-ef7b-4b4f-884f-5fec92bbc911" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\9537da9f-7427-4358-91d8-ad5fd7be3fe6.xml" RLTitle="Modify Security for the DNS Server Service on a Domain Controller">
<Attr Name="assetid" Value="9537da9f-7427-4358-91d8-ad5fd7be3fe6" />
<Keyword Index="AssetId" Term="9537da9f-7427-4358-91d8-ad5fd7be3fe6" />
<Keyword Index="AssetId" Term="9537da9f-7427-4358-91d8-ad5fd7be3fe61033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="9537da9f-7427-4358-91d8-ad5fd7be3fe6" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="relatedAssets\7e821f18-10ac-422a-9f75-1f8f3acadb41.gif">
<Keyword Index="AssetId" Term="7e821f18-10ac-422a-9f75-1f8f3acadb41" />
</Vtopic>
<Vtopic Url="assets\99060a7c-f0bd-41e7-8ec8-5eeae2fbf0ad.xml" RLTitle="Understanding Reverse Lookup">
<Attr Name="assetid" Value="99060a7c-f0bd-41e7-8ec8-5eeae2fbf0ad" />
<Keyword Index="AssetId" Term="99060a7c-f0bd-41e7-8ec8-5eeae2fbf0ad" />
<Keyword Index="AssetId" Term="99060a7c-f0bd-41e7-8ec8-5eeae2fbf0ad1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="99060a7c-f0bd-41e7-8ec8-5eeae2fbf0ad" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\9cf831b9-0fe9-405a-a807-19e27aa406d3.xml" RLTitle="Troubleshooting zone problems">
<Attr Name="assetid" Value="9cf831b9-0fe9-405a-a807-19e27aa406d3" />
<Keyword Index="AssetId" Term="9cf831b9-0fe9-405a-a807-19e27aa406d3" />
<Keyword Index="AssetId" Term="9cf831b9-0fe9-405a-a807-19e27aa406d31033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="9cf831b9-0fe9-405a-a807-19e27aa406d3" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\9f93a319-4e77-4c17-ad4a-10e3ea9847f1.xml" RLTitle="Securing the DNS Server Service">
<Attr Name="assetid" Value="9f93a319-4e77-4c17-ad4a-10e3ea9847f1" />
<Keyword Index="AssetId" Term="9f93a319-4e77-4c17-ad4a-10e3ea9847f1" />
<Keyword Index="AssetId" Term="9f93a319-4e77-4c17-ad4a-10e3ea9847f11033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="9f93a319-4e77-4c17-ad4a-10e3ea9847f1" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\a73a59b2-3140-46cc-940f-a280961c4ca5.xml" RLTitle="Enable DNS to Use WINS Resolution">
<Attr Name="assetid" Value="a73a59b2-3140-46cc-940f-a280961c4ca5" />
<Keyword Index="AssetId" Term="a73a59b2-3140-46cc-940f-a280961c4ca5" />
<Keyword Index="AssetId" Term="a73a59b2-3140-46cc-940f-a280961c4ca51033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="a73a59b2-3140-46cc-940f-a280961c4ca5" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\aca0968d-b719-4943-b04e-29c5c420147d.xml" RLTitle="Managing Servers and Zones">
<Attr Name="assetid" Value="aca0968d-b719-4943-b04e-29c5c420147d" />
<Keyword Index="AssetId" Term="aca0968d-b719-4943-b04e-29c5c420147d" />
<Keyword Index="AssetId" Term="aca0968d-b719-4943-b04e-29c5c420147d1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="aca0968d-b719-4943-b04e-29c5c420147d" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\acf8b192-752d-4459-b7e4-a404309fcf32.xml" RLTitle="Deploying a GlobalNames Zone">
<Attr Name="assetid" Value="acf8b192-752d-4459-b7e4-a404309fcf32" />
<Keyword Index="AssetId" Term="acf8b192-752d-4459-b7e4-a404309fcf32" />
<Keyword Index="AssetId" Term="acf8b192-752d-4459-b7e4-a404309fcf321033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="acf8b192-752d-4459-b7e4-a404309fcf32" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\ad057afb-eb26-4077-b549-728b10c2a208.xml" RLTitle="Configure DNS for Static Clients">
<Attr Name="assetid" Value="ad057afb-eb26-4077-b549-728b10c2a208" />
<Keyword Index="AssetId" Term="ad057afb-eb26-4077-b549-728b10c2a208" />
<Keyword Index="AssetId" Term="ad057afb-eb26-4077-b549-728b10c2a2081033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="ad057afb-eb26-4077-b549-728b10c2a208" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\b09263e1-ab05-4f7f-a45b-7033bb490175.xml" RLTitle="Troubleshooting DNS Servers">
<Attr Name="assetid" Value="b09263e1-ab05-4f7f-a45b-7033bb490175" />
<Keyword Index="AssetId" Term="b09263e1-ab05-4f7f-a45b-7033bb490175" />
<Keyword Index="AssetId" Term="b09263e1-ab05-4f7f-a45b-7033bb4901751033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="b09263e1-ab05-4f7f-a45b-7033bb490175" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\b17a56a8-61b6-4c6c-a717-cde3c8099916.xml" RLTitle="Server Aging/Scavenging Properties Dialog Box">
<Attr Name="assetid" Value="b17a56a8-61b6-4c6c-a717-cde3c8099916" />
<Keyword Index="AssetId" Term="b17a56a8-61b6-4c6c-a717-cde3c8099916" />
<Keyword Index="AssetId" Term="b17a56a8-61b6-4c6c-a717-cde3c80999161033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="b17a56a8-61b6-4c6c-a717-cde3c8099916" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\b42fe706-4949-4965-bd17-1afbc909b4ad.xml" RLTitle="New Name Server Record Dialog Box">
<Attr Name="assetid" Value="b42fe706-4949-4965-bd17-1afbc909b4ad" />
<Keyword Index="AssetId" Term="b42fe706-4949-4965-bd17-1afbc909b4ad" />
<Keyword Index="AssetId" Term="b42fe706-4949-4965-bd17-1afbc909b4ad1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="b42fe706-4949-4965-bd17-1afbc909b4ad" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\b6793e7e-0bec-4865-a869-f947867dcc17.xml" RLTitle="Configure a DNS Server for Use with Active Directory Domain Services">
<Attr Name="assetid" Value="b6793e7e-0bec-4865-a869-f947867dcc17" />
<Keyword Index="AssetId" Term="b6793e7e-0bec-4865-a869-f947867dcc17" />
<Keyword Index="AssetId" Term="b6793e7e-0bec-4865-a869-f947867dcc171033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="b6793e7e-0bec-4865-a869-f947867dcc17" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\ba56ad95-2877-4f56-a9cc-7e2def9242f8.xml" RLTitle="New Host Dialog Box">
<Attr Name="assetid" Value="ba56ad95-2877-4f56-a9cc-7e2def9242f8" />
<Keyword Index="AssetId" Term="ba56ad95-2877-4f56-a9cc-7e2def9242f8" />
<Keyword Index="AssetId" Term="ba56ad95-2877-4f56-a9cc-7e2def9242f81033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="ba56ad95-2877-4f56-a9cc-7e2def9242f8" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\bc5c7ee2-8e40-41b9-9763-7e8d4601d99d.xml" RLTitle="Managing Clients">
<Attr Name="assetid" Value="bc5c7ee2-8e40-41b9-9763-7e8d4601d99d" />
<Keyword Index="AssetId" Term="bc5c7ee2-8e40-41b9-9763-7e8d4601d99d" />
<Keyword Index="AssetId" Term="bc5c7ee2-8e40-41b9-9763-7e8d4601d99d1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="bc5c7ee2-8e40-41b9-9763-7e8d4601d99d" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\c2c0a226-364e-4c4d-88ee-5c3ef2b3023f.xml" RLTitle="User Interface: DNS Server">
<Attr Name="assetid" Value="c2c0a226-364e-4c4d-88ee-5c3ef2b3023f" />
<Keyword Index="AssetId" Term="c2c0a226-364e-4c4d-88ee-5c3ef2b3023f" />
<Keyword Index="AssetId" Term="c2c0a226-364e-4c4d-88ee-5c3ef2b3023f1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="c2c0a226-364e-4c4d-88ee-5c3ef2b3023f" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\c6a3e04d-6306-4c63-82d7-49d583de1640.xml" RLTitle="Securing DNS Resource Records">
<Attr Name="assetid" Value="c6a3e04d-6306-4c63-82d7-49d583de1640" />
<Keyword Index="AssetId" Term="c6a3e04d-6306-4c63-82d7-49d583de1640" />
<Keyword Index="AssetId" Term="c6a3e04d-6306-4c63-82d7-49d583de16401033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="c6a3e04d-6306-4c63-82d7-49d583de1640" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\ca37b2cf-5022-4330-b567-3eacb11b7f1a.xml" RLTitle="Checklist: Use Forwarders">
<Attr Name="assetid" Value="ca37b2cf-5022-4330-b567-3eacb11b7f1a" />
<Keyword Index="AssetId" Term="ca37b2cf-5022-4330-b567-3eacb11b7f1a" />
<Keyword Index="AssetId" Term="ca37b2cf-5022-4330-b567-3eacb11b7f1a1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="ca37b2cf-5022-4330-b567-3eacb11b7f1a" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\caa5a07e-98e6-4fce-a8a5-d3556d0f3c92.xml" RLTitle="Planning DNS Servers">
<Attr Name="assetid" Value="caa5a07e-98e6-4fce-a8a5-d3556d0f3c92" />
<Keyword Index="AssetId" Term="caa5a07e-98e6-4fce-a8a5-d3556d0f3c92" />
<Keyword Index="AssetId" Term="caa5a07e-98e6-4fce-a8a5-d3556d0f3c921033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="caa5a07e-98e6-4fce-a8a5-d3556d0f3c92" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\ccf07499-7a36-40bd-8b23-b8c91fa6cfd3.xml" RLTitle="Checklist: Create an Alias (CNAME) Record">
<Attr Name="assetid" Value="ccf07499-7a36-40bd-8b23-b8c91fa6cfd3" />
<Keyword Index="AssetId" Term="ccf07499-7a36-40bd-8b23-b8c91fa6cfd3" />
<Keyword Index="AssetId" Term="ccf07499-7a36-40bd-8b23-b8c91fa6cfd31033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="ccf07499-7a36-40bd-8b23-b8c91fa6cfd3" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\d30554bd-b6fc-45d2-823c-642a0880bf0f.xml" RLTitle="Checklist: Use Resource Records">
<Attr Name="assetid" Value="d30554bd-b6fc-45d2-823c-642a0880bf0f" />
<Keyword Index="AssetId" Term="d30554bd-b6fc-45d2-823c-642a0880bf0f" />
<Keyword Index="AssetId" Term="d30554bd-b6fc-45d2-823c-642a0880bf0f1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="d30554bd-b6fc-45d2-823c-642a0880bf0f" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\da92dc7d-85d5-476d-ae5d-1b215665313f.xml" RLTitle="Enable Automatic Scavenging of Stale Resource Records">
<Attr Name="assetid" Value="da92dc7d-85d5-476d-ae5d-1b215665313f" />
<Keyword Index="AssetId" Term="da92dc7d-85d5-476d-ae5d-1b215665313f" />
<Keyword Index="AssetId" Term="da92dc7d-85d5-476d-ae5d-1b215665313f1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="da92dc7d-85d5-476d-ae5d-1b215665313f" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\dbe90e28-fea7-4962-9429-d58cc42ddffd.xml" RLTitle="Change the Zone Replication Scope">
<Attr Name="assetid" Value="dbe90e28-fea7-4962-9429-d58cc42ddffd" />
<Keyword Index="AssetId" Term="dbe90e28-fea7-4962-9429-d58cc42ddffd" />
<Keyword Index="AssetId" Term="dbe90e28-fea7-4962-9429-d58cc42ddffd1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="dbe90e28-fea7-4962-9429-d58cc42ddffd" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\df7d2a74-f697-4af1-a6b1-c2bd41e18e65.xml" RLTitle="Checklist: Create a Reverse Lookup Zone">
<Attr Name="assetid" Value="df7d2a74-f697-4af1-a6b1-c2bd41e18e65" />
<Keyword Index="AssetId" Term="df7d2a74-f697-4af1-a6b1-c2bd41e18e65" />
<Keyword Index="AssetId" Term="df7d2a74-f697-4af1-a6b1-c2bd41e18e651033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="df7d2a74-f697-4af1-a6b1-c2bd41e18e65" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="relatedAssets\a94424e0-d4de-41f8-8893-7e8e9f465bbd.gif">
<Keyword Index="AssetId" Term="a94424e0-d4de-41f8-8893-7e8e9f465bbd" />
</Vtopic>
<Vtopic Url="relatedAssets\624dd3fb-47aa-402e-87f8-773e8e9b828f.gif">
<Keyword Index="AssetId" Term="624dd3fb-47aa-402e-87f8-773e8e9b828f" />
</Vtopic>
<Vtopic Url="relatedAssets\10853d03-fe57-4f44-b77f-aa7dddd20a39.gif">
<Keyword Index="AssetId" Term="10853d03-fe57-4f44-b77f-aa7dddd20a39" />
</Vtopic>
<Vtopic Url="assets\e2dd91d6-441f-4175-9d1d-d152d148d73c.xml" RLTitle="Using Forwarders">
<Attr Name="assetid" Value="e2dd91d6-441f-4175-9d1d-d152d148d73c" />
<Keyword Index="AssetId" Term="e2dd91d6-441f-4175-9d1d-d152d148d73c" />
<Keyword Index="AssetId" Term="e2dd91d6-441f-4175-9d1d-d152d148d73c1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="e2dd91d6-441f-4175-9d1d-d152d148d73c" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\e324865f-1cbe-42ec-bf18-a220c0e26fe6.xml" RLTitle="Configure a DNS Server to Use Forwarders">
<Attr Name="assetid" Value="e324865f-1cbe-42ec-bf18-a220c0e26fe6" />
<Keyword Index="AssetId" Term="e324865f-1cbe-42ec-bf18-a220c0e26fe6" />
<Keyword Index="AssetId" Term="e324865f-1cbe-42ec-bf18-a220c0e26fe61033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="e324865f-1cbe-42ec-bf18-a220c0e26fe6" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\e54b0af1-e833-4195-9f4f-c80fe34ea4e9.xml" RLTitle="Add an Alias (CNAME) Resource Record to a Zone">
<Attr Name="assetid" Value="e54b0af1-e833-4195-9f4f-c80fe34ea4e9" />
<Keyword Index="AssetId" Term="e54b0af1-e833-4195-9f4f-c80fe34ea4e9" />
<Keyword Index="AssetId" Term="e54b0af1-e833-4195-9f4f-c80fe34ea4e91033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="e54b0af1-e833-4195-9f4f-c80fe34ea4e9" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\e8a9ee31-1613-43e4-b796-b74d5040a910.xml" RLTitle="View When a Zone Can Start Scavenging Stale Records">
<Attr Name="assetid" Value="e8a9ee31-1613-43e4-b796-b74d5040a910" />
<Keyword Index="AssetId" Term="e8a9ee31-1613-43e4-b796-b74d5040a910" />
<Keyword Index="AssetId" Term="e8a9ee31-1613-43e4-b796-b74d5040a9101033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="e8a9ee31-1613-43e4-b796-b74d5040a910" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\e93c32c9-0c5c-4822-9c84-d464658d6ed3.xml" RLTitle="Understanding DNS Zone Replication in Active Directory Domain Services">
<Attr Name="assetid" Value="e93c32c9-0c5c-4822-9c84-d464658d6ed3" />
<Keyword Index="AssetId" Term="e93c32c9-0c5c-4822-9c84-d464658d6ed3" />
<Keyword Index="AssetId" Term="e93c32c9-0c5c-4822-9c84-d464658d6ed31033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="e93c32c9-0c5c-4822-9c84-d464658d6ed3" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\ebac15fc-5773-4cce-ae75-c67b7e3d31c0.xml" RLTitle="Restrict a DNS server to listen only on selected addresses">
<Attr Name="assetid" Value="ebac15fc-5773-4cce-ae75-c67b7e3d31c0" />
<Keyword Index="AssetId" Term="ebac15fc-5773-4cce-ae75-c67b7e3d31c0" />
<Keyword Index="AssetId" Term="ebac15fc-5773-4cce-ae75-c67b7e3d31c01033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="ebac15fc-5773-4cce-ae75-c67b7e3d31c0" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\eebcdbcb-eab3-47a8-8355-3e1189b38c7f.xml" RLTitle="Security Information for DNS">
<Attr Name="assetid" Value="eebcdbcb-eab3-47a8-8355-3e1189b38c7f" />
<Keyword Index="AssetId" Term="eebcdbcb-eab3-47a8-8355-3e1189b38c7f" />
<Keyword Index="AssetId" Term="eebcdbcb-eab3-47a8-8355-3e1189b38c7f1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="eebcdbcb-eab3-47a8-8355-3e1189b38c7f" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\f0e5d191-727c-44d9-976f-1b748f3f7876.xml" RLTitle="Installing and Configuring Servers">
<Attr Name="assetid" Value="f0e5d191-727c-44d9-976f-1b748f3f7876" />
<Keyword Index="AssetId" Term="f0e5d191-727c-44d9-976f-1b748f3f7876" />
<Keyword Index="AssetId" Term="f0e5d191-727c-44d9-976f-1b748f3f78761033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="f0e5d191-727c-44d9-976f-1b748f3f7876" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\f145d739-af95-4773-b755-d6a2a1780a65.xml" RLTitle="Securing DNS zones">
<Attr Name="assetid" Value="f145d739-af95-4773-b755-d6a2a1780a65" />
<Keyword Index="AssetId" Term="f145d739-af95-4773-b755-d6a2a1780a65" />
<Keyword Index="AssetId" Term="f145d739-af95-4773-b755-d6a2a1780a651033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="f145d739-af95-4773-b755-d6a2a1780a65" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\f39b0f49-8a74-4f7c-8615-87df497aeffb.xml" RLTitle="<Zone Name> Properties Sheet">
<Attr Name="assetid" Value="f39b0f49-8a74-4f7c-8615-87df497aeffb" />
<Keyword Index="AssetId" Term="f39b0f49-8a74-4f7c-8615-87df497aeffb" />
<Keyword Index="AssetId" Term="f39b0f49-8a74-4f7c-8615-87df497aeffb1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="f39b0f49-8a74-4f7c-8615-87df497aeffb" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\f4fb1647-4ad8-4a92-91e1-ccc72d1ec193.xml" RLTitle="Checklist: Migrate a DNS Server">
<Attr Name="assetid" Value="f4fb1647-4ad8-4a92-91e1-ccc72d1ec193" />
<Keyword Index="AssetId" Term="f4fb1647-4ad8-4a92-91e1-ccc72d1ec193" />
<Keyword Index="AssetId" Term="f4fb1647-4ad8-4a92-91e1-ccc72d1ec1931033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="f4fb1647-4ad8-4a92-91e1-ccc72d1ec193" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\f707d8fa-3e34-4b2a-b64e-e71adf2c6b69.xml" RLTitle="Securing DNS Clients">
<Attr Name="assetid" Value="f707d8fa-3e34-4b2a-b64e-e71adf2c6b69" />
<Keyword Index="AssetId" Term="f707d8fa-3e34-4b2a-b64e-e71adf2c6b69" />
<Keyword Index="AssetId" Term="f707d8fa-3e34-4b2a-b64e-e71adf2c6b691033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="f707d8fa-3e34-4b2a-b64e-e71adf2c6b69" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\f8090427-a526-435b-906e-7e961160ecb2.xml" RLTitle="Secure the Server Cache Against Names Pollution">
<Attr Name="assetid" Value="f8090427-a526-435b-906e-7e961160ecb2" />
<Keyword Index="AssetId" Term="f8090427-a526-435b-906e-7e961160ecb2" />
<Keyword Index="AssetId" Term="f8090427-a526-435b-906e-7e961160ecb21033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="f8090427-a526-435b-906e-7e961160ecb2" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\f8521fc2-120f-4651-b0ce-28f62fe945a5.xml" RLTitle="Remove a DNS Server from a DNS Application Directory Partition">
<Attr Name="assetid" Value="f8521fc2-120f-4651-b0ce-28f62fe945a5" />
<Keyword Index="AssetId" Term="f8521fc2-120f-4651-b0ce-28f62fe945a5" />
<Keyword Index="AssetId" Term="f8521fc2-120f-4651-b0ce-28f62fe945a51033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="f8521fc2-120f-4651-b0ce-28f62fe945a5" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\f85711b2-d9ac-4e08-84d0-5082e1a7a5d6.xml" RLTitle="Adding Resource Records">
<Attr Name="assetid" Value="f85711b2-d9ac-4e08-84d0-5082e1a7a5d6" />
<Keyword Index="AssetId" Term="f85711b2-d9ac-4e08-84d0-5082e1a7a5d6" />
<Keyword Index="AssetId" Term="f85711b2-d9ac-4e08-84d0-5082e1a7a5d61033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="f85711b2-d9ac-4e08-84d0-5082e1a7a5d6" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\f8ca5381-d1b4-4ea1-89cd-f94f33199bc3.xml" RLTitle="Change the Boot Method Used by the DNS Server">
<Attr Name="assetid" Value="f8ca5381-d1b4-4ea1-89cd-f94f33199bc3" />
<Keyword Index="AssetId" Term="f8ca5381-d1b4-4ea1-89cd-f94f33199bc3" />
<Keyword Index="AssetId" Term="f8ca5381-d1b4-4ea1-89cd-f94f33199bc31033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="f8ca5381-d1b4-4ea1-89cd-f94f33199bc3" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\fbb93390-ad20-4e15-b0c9-53744e6f6e3e.xml" RLTitle="Service Location (SRV) Resource Record Dialog Box">
<Attr Name="assetid" Value="fbb93390-ad20-4e15-b0c9-53744e6f6e3e" />
<Keyword Index="AssetId" Term="fbb93390-ad20-4e15-b0c9-53744e6f6e3e" />
<Keyword Index="AssetId" Term="fbb93390-ad20-4e15-b0c9-53744e6f6e3e1033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="Windows Longhorn Server" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="contentArea" Value="Operations_Operating" />
<Attr Name="subject_productTechnology" Value="Networking_DNS" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="fbb93390-ad20-4e15-b0c9-53744e6f6e3e" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
<Vtopic Url="assets\ff3bc7ae-5f22-4fc7-8b87-6028d7e7caf4.xml" RLTitle="Configuring Multihomed Servers">
<Attr Name="assetid" Value="ff3bc7ae-5f22-4fc7-8b87-6028d7e7caf4" />
<Keyword Index="AssetId" Term="ff3bc7ae-5f22-4fc7-8b87-6028d7e7caf4" />
<Keyword Index="AssetId" Term="ff3bc7ae-5f22-4fc7-8b87-6028d7e7caf41033" />
<Attr Name="appliesToProduct" Value="Windows Server 2008 R2" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHDATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISENOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDNOHVSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHSTANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="LHWEBSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2DATACENTERSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISEIA64SERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2ENTERPRISESERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2STANDARDSERVER" />
<Attr Name="APPLIESTOPRODUCTSPECIFIC" Value="WS08R2WEBSERVER" />
<Attr Name="appliesToSite" Value="BWCOnly" />
<Attr Name="CommunityContent" Value="1" />
<Attr Name="WillHaveMamlFeed" Value="True" />
<Attr Name="zzpub_assetBug" Value="Windows 7 BOM 1736" />
<Attr Name="zzpub_MtpsProductFamily" Value="WS" />
<Attr Name="zzpub_MTPSVersion" Value="11" />
<Attr Name="Locale" Value="kbEnglish" />
<Attr Name="AssetID" Value="ff3bc7ae-5f22-4fc7-8b87-6028d7e7caf4" />
<Attr Name="TopicType" Value="kbArticle" />
</Vtopic>
</VTopicSet><?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE HelpTOC>
<HelpTOC xmlns="http://schemas.microsoft.com/help/toc/2004/11" DTDVersion="1.0" Id="dnsmgr_TOC" FileVersion="" LangId="1033" ParentNodeIcon="Book" PluginStyle="Hierarchical">
<HelpTOCNode Url="mshelp://windows/?tocid=d878b99e-cc23-4940-b1e6-09a5078f5a6d" Title="">
<HelpTOCNode Url="mshelp://windows/?id=8e3f7e44-91dd-44c4-81cf-158cea708902" Title="DNS">
<HelpTOCNode Url="mshelp://windows/?id=1d130ab3-a25b-4552-aaca-a6da8e6902d2" Title="New Features in DNS for Windows Server 2008 R2" />
<HelpTOCNode Url="mshelp://windows/?id=53305fd6-54fd-45ca-9ff0-19686f48257d" Title="DNS Overview" />
<HelpTOCNode Url="mshelp://windows/?id=7c47acc8-e505-4d56-9849-226e53bff23d" Title="Checklist: Add a Domain Controller with the DNS Server Service" />
<HelpTOCNode Url="mshelp://windows/?id=2e2e0678-1775-4cdd-8779-32d5c281540f" Title="Checklist: Store Data in an AD DS Application Partition" />
<HelpTOCNode Url="mshelp://windows/?id=ca37b2cf-5022-4330-b567-3eacb11b7f1a" Title="Checklist: Use Forwarders" />
<HelpTOCNode Url="mshelp://windows/?id=21afdef0-b5ba-4a0d-bb4e-cb9901a487ac" Title="Checklist: Automatically Remove Stale Resource Records" />
<HelpTOCNode Url="mshelp://windows/?id=ccf07499-7a36-40bd-8b23-b8c91fa6cfd3" Title="Checklist: Create an Alias (CNAME) Record" />
<HelpTOCNode Url="mshelp://windows/?id=d30554bd-b6fc-45d2-823c-642a0880bf0f" Title="Checklist: Use Resource Records" />
<HelpTOCNode Url="mshelp://windows/?id=061c03a5-199c-44a7-9565-0130767c3ce3" Title="Checklist: Secure Your DNS Server" />
<HelpTOCNode Url="mshelp://windows/?id=473afe1a-0d68-422f-8194-0d63007ba3ef" Title="Checklist: Configure DNS Client Settings" />
<HelpTOCNode Url="mshelp://windows/?id=f4fb1647-4ad8-4a92-91e1-ccc72d1ec193" Title="Checklist: Migrate a DNS Server" />
<HelpTOCNode Url="mshelp://windows/?id=df7d2a74-f697-4af1-a6b1-c2bd41e18e65" Title="Checklist: Create a Reverse Lookup Zone" />
<HelpTOCNode Url="mshelp://windows/?id=f0e5d191-727c-44d9-976f-1b748f3f7876" Title="Installing and Configuring Servers">
<HelpTOCNode Url="mshelp://windows/?id=427144ca-37ce-4db7-a611-605338ec01ca" Title="Understanding Active Directory Domain Services Integration" />
<HelpTOCNode Url="mshelp://windows/?id=52ec32f6-5eda-4d6a-8e38-809fee243b71" Title="Understanding Forwarders" />
<HelpTOCNode Url="mshelp://windows/?id=e2dd91d6-441f-4175-9d1d-d152d148d73c" Title="Using Forwarders" />
<HelpTOCNode Url="mshelp://windows/?id=53661592-0f72-453e-bc5b-8ba193e1f5dc" Title="Planning DNS Zones" />
<HelpTOCNode Url="mshelp://windows/?id=caa5a07e-98e6-4fce-a8a5-d3556d0f3c92" Title="Planning DNS Servers" />
<HelpTOCNode Url="mshelp://windows/?id=e93c32c9-0c5c-4822-9c84-d464658d6ed3" Title="Understanding DNS Zone Replication in Active Directory Domain Services" />
<HelpTOCNode Url="mshelp://windows/?id=3cf4d1b1-7a6e-4438-bf4f-22d9468c1732" Title="Install a DNS Server" />
<HelpTOCNode Url="mshelp://windows/?id=b6793e7e-0bec-4865-a869-f947867dcc17" Title="Configure a DNS Server for Use with Active Directory Domain Services" />
<HelpTOCNode Url="mshelp://windows/?id=3421116c-3790-4a3b-af30-1f486f568bdd" Title="Configure a New DNS Server" />
<HelpTOCNode Url="mshelp://windows/?id=e324865f-1cbe-42ec-bf18-a220c0e26fe6" Title="Configure a DNS Server to Use Forwarders" />
<HelpTOCNode Url="mshelp://windows/?id=66587c39-5a8f-401c-80f7-fa0528c1340f" Title="Create a DNS Application Directory Partition" />
<HelpTOCNode Url="mshelp://windows/?id=479b0f39-c62f-445c-9c66-363be93362c2" Title="Enlist a DNS Server in a DNS Application Directory Partition" />
<HelpTOCNode Url="mshelp://windows/?id=f8521fc2-120f-4651-b0ce-28f62fe945a5" Title="Remove a DNS Server from a DNS Application Directory Partition" />
<HelpTOCNode Url="mshelp://windows/?id=f8ca5381-d1b4-4ea1-89cd-f94f33199bc3" Title="Change the Boot Method Used by the DNS Server" />
<HelpTOCNode Url="mshelp://windows/?id=ff3bc7ae-5f22-4fc7-8b87-6028d7e7caf4" Title="Configuring Multihomed Servers" />
<HelpTOCNode Url="mshelp://windows/?id=ebac15fc-5773-4cce-ae75-c67b7e3d31c0" Title="Restrict a DNS Server to Listen Only on Selected Addresses" />
<HelpTOCNode Url="mshelp://windows/?id=f8090427-a526-435b-906e-7e961160ecb2" Title="Secure the Server Cache Against Names Pollution" />
<HelpTOCNode Url="mshelp://windows/?id=9537da9f-7427-4358-91d8-ad5fd7be3fe6" Title="Modify Security for the DNS Server Service on a Domain Controller" />
<HelpTOCNode Url="mshelp://windows/?id=7558126a-cc90-4854-855d-533d706e7750" Title="Disable Recursion on the DNS Server" />
<HelpTOCNode Url="mshelp://windows/?id=7fc91f3b-c926-4dd7-a9f5-8d140d261a14" Title="Updating Root Hints" />
<HelpTOCNode Url="mshelp://windows/?id=5234e7b1-0efc-4495-8e42-8c85d7389fc3" Title="Update Root Hints on the DNS Server" />
</HelpTOCNode>
<HelpTOCNode Url="mshelp://windows/?id=aca0968d-b719-4943-b04e-29c5c420147d" Title="Managing Servers and Zones">
<HelpTOCNode Url="mshelp://windows/?id=6ed1eb2f-a859-410b-a809-84952f9c2789" Title="Add a Server to DNS Manager" />
<HelpTOCNode Url="mshelp://windows/?id=29c4fd38-d829-45ae-8a03-b4dc82a281a7" Title="Remove a Server from DNS Manager" />
<HelpTOCNode Url="mshelp://windows/?id=859fef3c-fec0-4b9f-9ac0-2b35045f527a" Title="Start or Stop a DNS Server" />
<HelpTOCNode Url="mshelp://windows/?id=1e0c881b-6dbb-4396-b725-61996bdc08bc" Title="Pause or Resume a Zone" />
</HelpTOCNode>
<HelpTOCNode Url="mshelp://windows/?id=6ac5194f-7b7d-405a-a229-3e04bbdc40a0" Title="Adding Zones">
<HelpTOCNode Url="mshelp://windows/?id=2ad68d86-7a68-4363-b1b0-18fa66970dba" Title="Understanding Zones" />
<HelpTOCNode Url="mshelp://windows/?id=94d8e229-ef7b-4b4f-884f-5fec92bbc911" Title="Understanding Zone Types" />
<HelpTOCNode Url="mshelp://windows/?id=99060a7c-f0bd-41e7-8ec8-5eeae2fbf0ad" Title="Understanding Reverse Lookup" />
<HelpTOCNode Url="mshelp://windows/?id=7294aebb-0452-4412-b5de-fc09e6b01ed6" Title="Add a Forward Lookup Zone" />
<HelpTOCNode Url="mshelp://windows/?id=5b03fa70-89ad-4a21-a179-2e96a43dbe54" Title="Add a Reverse Lookup Zone" />
<HelpTOCNode Url="mshelp://windows/?id=5e93f665-7d6f-4ea2-beca-14d91ead7bb3" Title="Add a Stub Zone" />
<HelpTOCNode Url="mshelp://windows/?id=acf8b192-752d-4459-b7e4-a404309fcf32" Title="Deploying a GlobalNames Zone" />
</HelpTOCNode>
<HelpTOCNode Url="mshelp://windows/?id=1b10e5bb-6f3a-4b81-bcbc-3a2d0330fadf" Title="Configuring Zone Properties">
<HelpTOCNode Url="mshelp://windows/?id=7cbe9c5e-4187-4fa2-a512-f6162162f22e" Title="Understanding Zone Delegation" />
<HelpTOCNode Url="mshelp://windows/?id=94d8e229-ef7b-4b4f-884f-5fec92bbc911" Title="Understanding Zone Types" />
<HelpTOCNode Url="mshelp://windows/?id=1f34d4ad-0201-400e-9219-f5818c1da2f7" Title="Create a Zone Delegation" />
<HelpTOCNode Url="mshelp://windows/?id=a73a59b2-3140-46cc-940f-a280961c4ca5" Title="Enable DNS to Use WINS Resolution" />
<HelpTOCNode Url="mshelp://windows/?id=30f936d3-08e5-431c-8612-81630f5a3038" Title="Specify Other DNS Servers as Authoritative for a Zone" />
<HelpTOCNode Url="mshelp://windows/?id=3739d3bb-38d5-48da-b9bf-d80401baf053" Title="Change the Zone Type" />
<HelpTOCNode Url="mshelp://windows/?id=dbe90e28-fea7-4962-9429-d58cc42ddffd" Title="Change the Zone Replication Scope" />
<HelpTOCNode Url="mshelp://windows/?id=0e462ebd-84fd-432b-a5cd-8c6f3cfa3225" Title="Modify Security for a Directory-Integrated Zone" />
<HelpTOCNode Url="mshelp://windows/?id=744b7d08-dfcd-4a1b-8157-fd443cb0482b" Title="Modify Zone Transfer Settings" />
</HelpTOCNode>
<HelpTOCNode Url="mshelp://windows/?id=68c3652a-0c55-49b6-ae2e-9ce3f06e4d99" Title="Managing Resource Records">
<HelpTOCNode Url="mshelp://windows/?id=f85711b2-d9ac-4e08-84d0-5082e1a7a5d6" Title="Adding Resource Records" />
<HelpTOCNode Url="mshelp://windows/?id=76a72c3d-6c2f-489f-814b-33a94f207896" Title="Understanding Dynamic Update" />
<HelpTOCNode Url="mshelp://windows/?id=2c8e760a-3c20-40f4-a692-15171ee66374" Title="Allow Dynamic Updates" />
<HelpTOCNode Url="mshelp://windows/?id=55e3745f-4c49-44a3-ad60-30e14638ef81" Title="Allow Only Secure Dynamic Updates" />
<HelpTOCNode Url="mshelp://windows/?id=60d3d60f-3e84-4c6d-b377-0713e48bea2b" Title="Add a Resource Record to a Zone" />
<HelpTOCNode Url="mshelp://windows/?id=e54b0af1-e833-4195-9f4f-c80fe34ea4e9" Title="Add an Alias (CNAME) Resource Record to a Zone" />
<HelpTOCNode Url="mshelp://windows/?id=655b928d-8a7c-4b29-9ae6-b591be845ea7" Title="Modify Security for a Resource Record" />
<HelpTOCNode Url="mshelp://windows/?id=69d6b9c6-8ac4-449a-a3a7-7c6ad993b22b" Title="Use Aging and Scavenging">
<HelpTOCNode Url="mshelp://windows/?id=7d9f6ea1-3d84-4841-b30d-fcf73a92e35d" Title="Understanding Aging and Scavenging" />
<HelpTOCNode Url="mshelp://windows/?id=81005446-0f9b-41d7-b9cb-9f61177e256d" Title="Set Aging and Scavenging Properties for a Zone" />
<HelpTOCNode Url="mshelp://windows/?id=0e78d78d-3d2b-40c5-ba88-c8adcd8341e4" Title="Set Aging and Scavenging Properties for the DNS Server" />
<HelpTOCNode Url="mshelp://windows/?id=da92dc7d-85d5-476d-ae5d-1b215665313f" Title="Enable Automatic Scavenging of Stale Resource Records" />
<HelpTOCNode Url="mshelp://windows/?id=33a1535e-7d8c-483b-8d00-ee91869c775b" Title="Start Immediate Scavenging of Stale Resource Records" />
<HelpTOCNode Url="mshelp://windows/?id=e8a9ee31-1613-43e4-b796-b74d5040a910" Title="View When a Zone Can Start Scavenging Stale Records" />
<HelpTOCNode Url="mshelp://windows/?id=72a8666b-0143-43d5-98a5-780e81d9131b" Title="Reset Aging and Scavenging Properties for a Specified Resource Record" />
</HelpTOCNode>
</HelpTOCNode>
<HelpTOCNode Url="mshelp://windows/?id=bc5c7ee2-8e40-41b9-9763-7e8d4601d99d" Title="Managing Clients">
<HelpTOCNode Url="mshelp://windows/?id=4d785d45-dc9d-4ed2-ba73-e734d55d3319" Title="Understanding DNS Client Settings" />
<HelpTOCNode Url="mshelp://windows/?id=806532cf-9b03-4777-bef4-d95c9d4136bb" Title="Enable DNS for DHCP-Enabled Clients" />
<HelpTOCNode Url="mshelp://windows/?id=ad057afb-eb26-4077-b549-728b10c2a208" Title="Configure DNS for Static Clients" />
</HelpTOCNode>
<HelpTOCNode Url="mshelp://windows/?id=0f8cb43b-2e83-407c-8551-fe4f446a4a81" Title="Securing DNS">
<HelpTOCNode Url="mshelp://windows/?id=eebcdbcb-eab3-47a8-8355-3e1189b38c7f" Title="Security Information for DNS" />
<HelpTOCNode Url="mshelp://windows/?id=1414cb7f-7305-448e-b26c-fc6f874bb6ec" Title="Securing DNS Deployment" />
<HelpTOCNode Url="mshelp://windows/?id=9f93a319-4e77-4c17-ad4a-10e3ea9847f1" Title="Securing the DNS Server Service" />
<HelpTOCNode Url="mshelp://windows/?id=f145d739-af95-4773-b755-d6a2a1780a65" Title="Securing DNS Zones" />
<HelpTOCNode Url="mshelp://windows/?id=c6a3e04d-6306-4c63-82d7-49d583de1640" Title="Securing DNS Resource Records" />
<HelpTOCNode Url="mshelp://windows/?id=f707d8fa-3e34-4b2a-b64e-e71adf2c6b69" Title="Securing DNS Clients" />
</HelpTOCNode>
<HelpTOCNode Url="mshelp://windows/?id=08a4b951-74f2-4805-973e-e096d69b3dfa" Title="Troubleshooting DNS">
<HelpTOCNode Url="mshelp://windows/?id=761844e5-12f2-4882-8f4d-103c5dc51e1b" Title="Troubleshooting DNS Clients" />
<HelpTOCNode Url="mshelp://windows/?id=b09263e1-ab05-4f7f-a45b-7033bb490175" Title="Troubleshooting DNS Servers" />
<HelpTOCNode Url="mshelp://windows/?id=247d20d9-5731-4630-8370-ce79805a1f7f" Title="Troubleshooting Dynamic Updates" />
<HelpTOCNode Url="mshelp://windows/?id=9cf831b9-0fe9-405a-a807-19e27aa406d3" Title="Troubleshooting Zone Problems" />
</HelpTOCNode>
<HelpTOCNode Url="mshelp://windows/?id=412a919f-4249-4341-aecd-bdb35d266338" Title="DNS Tools" />
<HelpTOCNode Url="mshelp://windows/?id=c2c0a226-364e-4c4d-88ee-5c3ef2b3023f" Title="User Interface: DNS Server">
<HelpTOCNode Url="mshelp://windows/?id=5ad68930-7769-4385-8bd0-130ce0ec3d46" Title="<DNS Server Name> Properties Sheet" />
<HelpTOCNode Url="mshelp://windows/?id=f39b0f49-8a74-4f7c-8615-87df497aeffb" Title="<Zone Name> Properties Sheet" />
<HelpTOCNode Url="mshelp://windows/?id=81e08359-c427-45e9-93f1-399b1d54f5ab" Title="Advanced Dialog Box (WINS)" />
<HelpTOCNode Url="mshelp://windows/?id=6159f77f-25bb-42d2-9f6b-dd9905080d60" Title="Mail Exchanger (MX) Resource Record Dialog Box" />
<HelpTOCNode Url="mshelp://windows/?id=67c6abe2-d3e2-4171-b9e6-70262651d1b2" Title="New ATM Address (ATMA) Resource Record Dialog Box" />
<HelpTOCNode Url="mshelp://windows/?id=ba56ad95-2877-4f56-a9cc-7e2def9242f8" Title="New Host Dialog Box" />
<HelpTOCNode Url="mshelp://windows/?id=b42fe706-4949-4965-bd17-1afbc909b4ad" Title="New Name Server Record Dialog Box" />
<HelpTOCNode Url="mshelp://windows/?id=6530ccbe-e6e1-4f5b-8d29-9529288ae9a6" Title="Notify Dialog Box" />
<HelpTOCNode Url="mshelp://windows/?id=b17a56a8-61b6-4c6c-a717-cde3c8099916" Title="Server Aging/Scavenging Properties Dialog Box" />
<HelpTOCNode Url="mshelp://windows/?id=fbb93390-ad20-4e15-b0c9-53744e6f6e3e" Title="Service Location (SRV) Resource Record Dialog Box" />
<HelpTOCNode Url="mshelp://windows/?id=18fe1818-f1f4-4633-a0bb-92fd6b275f88" Title="Zone Aging/Scavenging Properties Dialog Box" />
</HelpTOCNode>
</HelpTOCNode>
</HelpTOCNode>
</HelpTOC><?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE HelpIndex>
<HelpIndex DTDVersion="1.0" Name="AssetId" /><?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE HelpIndex>
<HelpIndex DTDVersion="1.0" Name="BestBet" /><?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE HelpIndex>
<HelpIndex DTDVersion="1.0" Name="LinkTerm" /><?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE HelpIndex>
<HelpIndex DTDVersion="1.0" Name="SubjectTerm" /> GuU P! H V > ֜LKkQZp*A I%T*h(I%$T(Pa)K%} F ˛swt/D : j.;6jhb͕Kɦb 0pu[4ЉDo`@9ao@Tl U`U@e{; /("
+ͼg>: YխӼ.W ˖y{y9ﳤWjuܯM>5_r6{լ |>?yՈ-
Wsꆫa|w};U[j ϱ^p^{© SͲ}fo<TSgu NOM S%NO7_j>Sgus\:݄O8}<l~{=}TU|zn Uf}X_cz,3\wxƟG5WjOacj#gmWzxθ;\k>
wS5ZOs>qv ;Ǯ+o[ޫA.?GQ>z:"ݮnyS}gN5KMUlxyZkݴsھCrw{]U.{rSg}n<TٍSW0# Pω? ;n^]T͓C۵NxY-S5^OYvF;٪ z>ͯ96 o8?ܱ kͳeuknŵkoǪfk3eM>T f|Ωs\V7]wuw!O[ s{wswj~c ẳsX͑\:v\g _}n x7.\Tc=}6뵧Aŧ> u5C_>\t|6GwV]v<_O _C~9jFҝth 7r/>5; j q_hCm?t{
h;f?__8w%/ָ/|pw:m}opsN|ۉ/.i[?ۗcn?ܷoWNmôyɿ\ mr~ m;mo yɎ]4Mp>[ς8. }H?F;s}/NfN?p.<?ioi^8O1w;WO=O[q ǦGh}iW6˛]t^ O~_[g К6=
BsOcZtBϟc-5GO~xǯ5!ٿ![>ȯ?;|hI~vt~Kɷ
Kӳ:AvOi=Gt<m =t>xoi܌GoټFw|hoo\s̯o>f9e|#,5Nzͯ}6_k]z x~]4"
y~;F~{ί|6[厎g&e{:gk
b~}v} 5ܞޓs4u>t` m^f }hCE Ї6ё>ٕ>h7}CrvӇ?iԇ>tVԇ?kn{fӐO>TO4v]u O;~V wpwڏ]q}wrwڎsxڏ
t-xuxڎ]hţnY }3 c<mnmv<<~m<<ǎmZ6{l-mN8^{َ'F#>;;l = uY +h|َ&W0G_֣
뙇/їhuaїĺh:mtetez-7eu4e =vY ]7WG_֣ f:zue: F_־%SN_֣'.壗uh˚tmwew4et۽we㷷#;ay>'{|̧n S껁wCy |Χ |Sߪw]~Nwj}Ϸsc/>yo# }C>}8R P<c <Z`>;S .
\^L͕kfn:Rus}$w[? ϝBPx ޞ]}};x,7N))=S
auJ) N)XR
OS=S
p:Ja\uO)oR)8R)=S
0=
SJa{Y)|N)R)RX)R):a{JJauO)R)xR
SJa&||J6çJF|a)N)XR
S&;avJ)\ON))?>S
0>
GSJa|i)<N)R
Spf;mRؿS
awJ) N)R
ϺSJa\wO))OR
SJa|wJ)N)R;)RS
;}R
SJa}}JXR
S&<axJ)\OR
S>S
a}JFO))RXW)R
/Spf<R?S
a]J)),I_J)p s03 0 303 0 303 0 303 0 303 0 303 0 303 0 303 0 303 0 303 0 303 0 303 0 303 0 303 0yKt}3] ŐbP.pbbb1| ]bX4|1 _ /CŐb1t>| !_/CŽ+^ _/ËŐbVV/bf 3_/ÍPb1z| ? _/ÐpbH,|1[/Ó!0b\|1[_ ./!0~1 2_/ÙbH|1_/!bb s_Cpbd/aŰb1}f/ápHb1,} H_/äb1\2} <{_u-xhZ-EѢh-ZEhZ-EѢh-ZEhZ-EѢh-ZEhZ-EѢh-ZEhZ-EѢh-ZEhZ-EѢh-ZEhZ-EѢh-ZEhZ-EѢh-Zx }YqDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD}D'Yڷ6}+nkl/oNr)Sks{f>7)d=7ԻZ|ncWs߿ ϙzcnN9ũ/NMfaSzF ݙfӞ͛j5¸p.\
p\. ¸p.\
p\. ¸p.\
p\. ¸p.\
p\. ¸p.\
p\. ¸p.\
p\. ¸p.\
p\. ¸p.\
p\. ¸p.\
p\. ¸p.\
p\. ¸p.\
p\. ߺАԨb
bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbcb#ʼx/^x^/ŋx/^x^/ŋx/^x^/ŋx/^x^/ŋx/^x^/ŋx/^x^/ŋx/^x^/ŋx/^x^/ŋx/^x^ /Q @-A7O۫}t n?ۏ4`X, `,X `X, aaް`,X `X, `,X `X6,xaKMg`,X `X ,hz5Eg`,X `Xc^ `z]=E`,X `X, `,X apÂܮx;>g[ fwAG2 ; ;6C ag| w O@G<C }&Cu>ax } @#GT >`}cGٌu؇ \@? j~)},XjX iiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiz]*\啫rUW*\rU*W\啫rUW*\rU*W\啫rUW*\rU*W\啫rUW*\rU*W\啫rUW*\rU*W\啫rUW*\rU*W\啫rUW*\rŮ3l4MM4iiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiii]zLJ*W\啫rUW*\rU*W\啫rUm+rUW*\rU*W\啫rUW*\rU*W\啫rUW*\rU*W\啫rUW*\rU*W\啫rUW*\rU*W\啫rUW*\rU*W\啫+vaX~iiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiii~Vk7z>]KoU{;)?`,S~Vl61iiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiaiiiiiiiiiiiiiiiiiiiiiii{4MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MMӶ4MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM4iiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiiݶS4MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM44MM4=M+ϛ4MM6c.ݷYr/[̶鿕-n ](-ܙٿ\=[ϵv.wonXKkfnT?{[ \~6=%|\= [myw.ϥ|ɿ58w\{ 0 3%cuO]+ dA'uK2&ֶk[6k٣Y.,fQ:suUUQ ܻ7;xa~$QB+1F4')URi<nXˀ9Q 9BÉ u̙#Qs0uuhRcx 1A ") VА)ѭ&MdzOT@=*}`?p;o#:joUӐJ"'} "om0{7'
}0ױޖ Gvְ1<DkwOU|S_F捼@g 4ፌ6`[&~+^5,L8Oȩ,5lq ,gU9$E""w+"mQMTV _Xtn %>s{<_<Ѭz-/f|, z:P,LE?frGQ{Qt➝'i
/VؙV v얛x ۏ㲮_~ V 8l K { (|-}]}#^ń3xj]Yߴͳs۫-+\ N`CU+%1 Z;w# }Qezt݃ޱ˕uctHOġ-6je}a AOS율p$NP2
>rt-~&9T b? Lߖ~W9<EKP BWh5]V6yܪ5⾈2H4iF{TN%o%?DT2V ӓ+=(۶s:7W2%ā>Oä{ 5mD&d`ڥEӢkT|_Q u {L䏉#퇏V(m)`Y +>` KbZ/ ^t# VGw oĬcO#'tFV{ ;+ʹOh ~9l(o ޑz{h \ҿ芲g!F[7bPyQɨQy^»6 eL3麽g{A=5>ev WD7 VIoD}qF X0zxJ!ξPDħf
'@O
".ѵx uךrT,}6=&
,ڨz
q͓^.
aZqJ}y>0)r}3 V0ZM(s@rjG W3<ۂf8f,9ߑ LASU (GFsp`NH @ !{ӓSvp^0ܺ\⋪ikwjU5k[~+E|WlP*R+,{"z;l@Z,njguM*H\DOz=uG*[bok.m)~WB䳫71kWƻ=݃㱢}`g ̀< ф q?-3 O蔡 !2(0~N
o)JRW
yF9ZW
"JI'%z]aSzmL_YV qʳw<`\
Kq*Qgwy*xavV&b 8v,6af/W!g{ Rs _ƙfWNqV%!:.տnSoF\=}uG ceL[|v P,7ĥ`w1j&}E_~
Qo1'z˪
WEp66U
}ov טo[/+'J k6b% Binu6ti6u]
kg \6`/B]E#u͆{;m=Ҹӛ^{XL
-lc&j!#KBn!LM\u>쵓 'Wskwh6<0
rl">U*t4=(7"g[2Jn+AOD_Yj{o<rdAӉ Yoc?}~m23\=ܾ0nq 9x\?\ؒ vX}7p"HHq@@ ԠhK1+hw;1 k$|p#@`pq3.گ~v
%h9-낟Vl~.m`O/UO*7Nzگ8Z7]0a uUbr}\AB[Aɹy
Yz%K
`rbyQ- & pM zj@D^ nOYKL7BQƵGդ)AZlBjG YޅJH:u|= X9φ^fXv) .|]{ E
W17],#
c >8DD Klkt! ? ˱($
cR VM. $fk-ʃ\U_T0~4džK63t[]@
|J-z!(,(H6K^w\]f2cHJ+\DVfbo uB .BtB_MV}[me2X빊\fJfyIvB- x>w^EAliܞC53?6tWW ) A%IG^+{CtNQzQIb'uV+=ĺG
aq̐\;͍"^ vCΧhY #(zgn72O Q8U0hނТ9jzC8=9N 8hh;
rW6@'& wQfj}/L`Oh0.U1(81fj[(<NLzJhC:*/So& uG v$Fyڼ> }XfG`OTqvd?w9L,E|6OAPǃ[t)s
F =%ѝPJ6;2DbV Y
|wIj<'52MXIKn`zֹ\*p+PZ&a1[ߟn֝6SNPw 5 RYjRAN3@#nzwl Y ϲL[nD=Kw7:k|aA7#-Sǩ$rԩH6z{b (ǐɖC3C 4DTd1"xWL b@'?6^9HD Q.j/sUπ;N r"yso0k2*KAd@͵ >(<|z2\%fAߨ=<ؙ}g\$ 6%[+x7R7h Ei E;䰻 ~bqb5ڛ.>ڪ+j 5+bu1`R(8yz}`r ¾&
WkԘm-#?+h\&js?$ydϣ`uޗOU+QQi$}ٻ@K-71a\wP:H3{4bm Jɛ1ֲ&f
M&սh =Eh Ix!~ pXݐ
3Y88~1X #]
q?˕|Ƴ֪]^`lT1k$aLfLdj^u,Viqo|m VolNkڈ:X{A)B`Lx}&[C\)lQfw ou!\b6K`vMקHw =ɢSPŃ_7lcI*dS7:+uUX wcf5;-˒u>[ni]R%N)pʐ7Yt<sgLLM@Ud$ݕ7Xᙷ?JYy >-a;
tbp
A̡ҒP
dϺ""f~Ul*dC4 7.
۟Evl HۡuJiUA`7J 7R֜$L}Y7*Nŷx~?Pױ
e n+ZM"o
Gk.@!:wUK^Xi62xS 5^|+K|o@{Ꞙ
g+}'C^ZآjpgI@I)Jot|y7K8_16L FZhMHrF/>
ARGHɷ|J].iG
9nZ_ pQ*O"; G_,[icl(1G(-x
[kqWܐs4
`s䥊 iHE
=LF@F[Ȇ bJhS|_A8+٭u5'(J3ۧ80Zt7(tmcI'^r$Fœ@9 i䜸wo햩"mC]>L \< #]/ϘLcw1hh SH)- voӃ_{U-2\S*o'%Wޭ QFC. k[rl1"W_ږLJ0bW
x^;inX* D,uNhv[J%Ժu<=K:@uj(玕zq 4
_/+w$A?PULp̗at@R(;?rùyV C>ek3>vs"fKW7<SR &J#MK)- V[1al֨S !<P̳V |>S* C0%]SLnNrU|A(\)i\i خ!' !nF撀
HU, EB\\Z斓鳄h '} Y =@DgΟ `p6PA~"-b?QWskty Ȕx-TQ SU {Pz(aT?@ܣ\wH ^mIX">ɬ߫I=,L#)N1~ p0 AFTF_V40`&g_X ? -i/ LS~N 5yTui߷j }.H/jߗ ù^$
?@#/Aپ,
A*huY/ըgѱ lKP k8d 27{ԋŪ0 pQAq dJS e(iX֞T&!%DQFH_0)& yL#8jzP xq,l~Bq)akK6eӷQ+&vyϋRMaV0amwtlqiyp@t4 WtJՃ n?hSF:fRĶ>UϺ3 CMPU[ -JP dό_#l.PqGE~{7Oѧǎjje7({Ft;J%* H$EbX.p֪TՋZbne}k y/<`E# Ggs6t
:Ssܔ~33ovhBg< pCSY6Gu"7Hm7Kc~&cqJsߖg -̸}B; oP`4q(XvȾ,LzhV&v
+!+u+k:aS]"(Sw%冥geO;2y>̔ 14z=:ga7(H0mlmhkW Ix
<IG|+& o/?/
eģ`V!\wF:DZl/UD`@{Raxkj~{+T'k>wpP
<6go j/J#gyk|<,g>Yϳ|,gY>|,g>Yϳ|,gY>ￃh 1 ݿ@ZzQA z(:F/sbB~hfeك(^m WVA[
{+7h9T -w@L?w,nc7"kNmE0@VϬuyΛ鈑Z| p= |R@&ǛcI5ꇯC# g n:6Z-{Bs=мѵysj㜀vS p_N^[ hFکƶ6YAMdh!C (*Lxx虆mV!DIKq.E1bW t!OKLJ'WR`ྂO{{rkT1 G^ NJ9Q4 -Df㭛@ BX#K c)e4١Ccs&8
rk
K $e&]P=vaL* aC |AY( =G`0_\GmN V'J)!ŷ⛎+5i{ #&MQ`emdov*E#H:pT0F$+q ; ("6ug}\*䥈 b^5|;a=aѼh1Ͱ<3_&(OPS!3Ly4Srܿ͊)'fSg43(np1Q.KZ0A2fS~Op[w^ QJXR<eΒ Z[܆,œO&!Ҝ{7&W(y']`,ݧwKikUlx_?}2*\
%-EWNq0+](2r0k ԮDDkTb d\'svE||qQWG= AIW&7}| |GF;u0f <'e青ꎀE KĶȲ
hVSZB/M-||Qpr7^'6Hx9. QB[ >5<9<E>[{%wW3Stz+Ol?S/D 1Gc#{كGOUcﾇ3#']s3:xw"
i7@2;"eǵT pq=U]e؟z>Ff;"mb4vEhO\sk I1ڣ;%\bC{Tui)0C:HO ؈O|ĈGGb-MW_?@
k)fc):r[سgUkҭ"j@pFST2ץ I@In MJ;FLDxvwdR>
j$BK!!9m펔[R(ˋfN ?RcQ3 oI" s_<'S{4 p[V7fn#fGAC{~`}k?8+E\)ɲx~ =Az G$ߔ!ib! 0%-*KdLn9s64`_x1t6iMY uk{r!h(Ϡ"4ZΚ}B(yp l@'uRO V w]ь?I5AQРX=.^M'jQmi 4 Kl?I v<Ǫn2~.e=0KM
m#a1
1G{}ϣd[&Q-kWuDbz ~m_ {ˆSA'$/k,AϧߔC UX>Ȱ*u'9+c U+ؚifP"L Gtę){DܠaLxW+㗻\dН 轮 \Ju~/ m];K4W( wwݖxp3pVy.*8 ] gp'+(&AIaF1w\ " ~ >cL/YKňN=ܽ#9oCXCؗ/^3DێϺ#xڰ'a/
zV(WU6wM`ڏQ-ЩGI~8.{rܞ!DDwݭ[b TM5gј5ն,LOIw&D4"j1}B@JK-
^mney 0K71%8{UI1u :0-=9˗ohrŏ_svkPC6KnsWhnSU_^i'z0hu]Ѽs]*F]%ܯ
ܻP ᥒb@o3
/, B TDO`k7f(A&xD"hj[ Qֳ&tؑ[dײ
B@#RqO6SdUpKv%S+K zY)7!Dc`V*dvkvAAzTL]SÁ68G|Gޚ +Ah/K `?xnL!E]@fw~I
5h߶
T}iz^{,}Kj;fv\fbNumv$Zn4>44=?%WKm+J
.a'
''B; ϹV+ z 1h ]
0 @|2+kɏ F/3g6pJճs;̿;-Fu>(cL?uO?c &8 +"wgcsd-{M3a]Eul K`GL7op)>Ve?b5 )χ} T{TSK?-f G
c4cKqkwqv
KKǤ}~JԒ#CC*+9amTW3~f[zȊ].%-aʵ-;V|Wj^թ'Jfg kqjj7{ۨv6<%lLTw%|K Ɵ qf vtΟA,h8(r#ŷ:Q26mcãű$IBT_p)T"=ĭp /% wXRv~ЮzX_K,߯H])hM7DP~_\p?{Q 1\oxvl]:
O"=B|g>fڋY kzF~&|#eY:bKYcR]hԵBs;t<
5ɑ62~aXxz 2 "%D#m ݚPr#D{.=wYfݺ[w:6'iBXuR -uB"a>xf ė Az#V<d{6sf(qF{4f=(};3KȬc =
v >N4O,v/XWUv
&R
fQ rt>hjG!8tJ$B@ ,l.u }wKJ0V_rzQӍUb6[PVL_[{{N5J۩^G9_HK:xYMA iP0~f6YAKv>%h "ٷeyE0PHMl6/ 64Rm-El_3ECϮ%"6vej/|[ g l/9#) 3bm22.h0ybYYZYPVTDBCK`K&!¤+K~e_9o])a̖%X;G%|v YLUFɏؼ$_1 K~
K[>8>}D/ r<Q0M,cRq371lxkKƺCljV84cI
ޝJjA.[˥Y ]w2{* ]&WJAa͙ c uh3F;},L %RǕLzt*-,'1'w5
ZtZXysxXꚭ@C3כO^7(/L(1 Fn5rZN\- "m .=Z"K , IVJ<7;햎 RƂW
Ю: k [פRЎѠoiXUEV P`.w'm϶c&ADB f@ێ 2?hqGT|35_:Bl6!U~VY,k"Ra|kp41(j5 @/gyxKs7]g֓PPuT%Gny Dr%w{#N5q#=,ui9$LzfO/? 5LzKWwzssK |:qZS}m2 "Q1Q e}BK˶ 53hF%-U ]@E[Yqn4Ɂx|)cmU6V#ְxeC8.tMP'Y h&ly$u[L)/Mt`(+R݁0%g;%&] >n(jZӢs7(qUB
H@Lj /UȆ| M! 94lCu@n/@*̳ )CXoft G6H sI'!L*K}(])-`a' F#vŁN&e]xYrIDg"
EJ`!uiT
O{ &0Y6]k_)|60dž\a/! !b"6̔@F4}@-m d#8)
f2*K KIJ#
ƥ]}^v.%)_a`'R:'@E p +˛./w8jLDZ
`"e Z`Xw8_>Sbvɻjt&Bw gIY/&ҖżtPOM`LMD%$$?#W""?]G `t&x9Fp@ C
p<azM׳U)\@P2Ľ[h
7*(i
27Tu媜iI, TN0 pHJ=S6ыN~kX|iniU¡K,I.-e*oNb9
,(Rs?6eoR+ >]٩mzgD*XSw2^,brp'G awsh6Fv ۬T "okB~j'v`GKx4}O'w%8Jd@ExL z<O͡KN̹Z#I=x1rXl3<4kfVsb]p֩ɽ\&Qs`뚤%3
ShS Zcx
-mq 4,x >^ (22e(@\f˲7
i,ɵ ^'^G(=fT$M,^sxe`Hh1x|n`:Sڿ~d
W:k xUF5a W 1ɷ2m~" d>gbDпȽˆP{R^6?趛ɭ-|
M&bBS} ];oBoϏ2 ڻ V\5X5;ʾ'ɡybM䢔a%4dŢRyq >nLPS6K4D8WGk _vH
i'`*u)"267Hc'o`ϮyXۉa68c݆}Y _{ 9[DެvOO5\u3;ê [s' bP_k'uB m̢@4bhd;$ZmۦIbpnhtxY3/A=pέ2*K"B8wU!Qz`q%0!_
O9X ݫǽZ-'%OI&aI{m2X+1dQV
*q ]Tylj&d_a>4~-,}1%;e?fvjp1٠C:A=
FG{،apN/]UIDY0 2ɯ=RH
Zı'=E=&tutvxރ9
3+f;NV˪lQlKj1ߋ5cRneJ{[m6m3V
zk"$NxNJZAf5J~Od<M߱eB
X.Ej9::sr;ËMĭ.J6\ !d+#pXm!нށF5 [ h Z \͍bNsЋH;l8sUtRŎHUZWa͖&F(!w,o6l"Iq!ݤAt+{&L ݛ; t KdQZ(Mr /eҊAI#26k \Wz- m4a| K0#n Setŗ
Fh;9r͕uv$%jIQ^ic
EF}d;li D)
I\Soc1Ѐj $$.XY6؆䶑ݱH-wJM D QZ@Z5Q*'h{ŋ
aD ?N#h1t; q 1 ,kWh i*-.nTD
̤!Y1Y\e& eX[[;,.ȕVfj"a_Ax/7 4֨jX(>o78Q^w~
aҺ*T cfU7*q/ssA y_g_]'O)g0C:VC
c" 0LwϪ +U,cDt}%Jd P+V2ՠ&uN-zM,PtⴘZ |{C%e5##DS^/[A1aHu<Qpԭ;q*{_%OoT5&-]9Ue|@s]6\{ouWड़'GgO(W~@د{}٨cmܕ 撷_Z)LՌ?|!MKyK%1*ಟuE1 ˤFj
ڽ:]yR j ٜMC ]J˘W 5Ƒ7> ,kObu=0;%8crTdV-[pF,|lbm_퀹Q ΏƖ$4$ecnvmE6fW4n9⥖v 4PDa/`(>b/ r.Y.;pߥ;xZ~I/!M>.wV ҒLe v\j0Z )Ӟr{f bmUH_ȲW|@ɩ!欕&ni4qGSݹCF~,C&w
R}0Ë"J
Q3AvdPMtA$R/ Ϻ zвbE*fvե9K$[X~cRj
C08_#$|G;t.qdXrD^Ɍ GCA!\:Bai' )L7pi h`&Eݛ4۱S"25ѣ&@{<`1l,W.UtQ= v}!&%[6ی+fYR8Y>#zY)lT"
fwZY7ɛB$wΣJ r(f #)e0a/xfgDZ%H5du79{YßFSK)*
W|eTZm
bW;dmش_>c |F$'YcL0׆xZ ']m^1ɛdܻ3Oo?(oz褠Mz{+ f-eF0 'i߅0G rpFVer?k;f 'jT24J)ݲJ¶{ՌXۉsc|Ĕ l{> $Á奆w f{jޖd֓*$XJ;FI}.y6_VF<+'j3M34Jgp7_'Ѵ1j(`i(
!Ō G8f0 @? 7 LK!BM/q8ˇ%P<Z;SST}[GCj9.f!}JV\ Σƫ;+QV/&j f ml GnHSs%]*3d,V
CQa
sId. fAJQ@yYe0$8QA7\:HE۟PUgWV6" ;!
+E%Ο^ =@]Y
~C`J 7u0l<rKh࿃O ncZa2 $YݑʫԦ./5ruzТi?"sA m ӌ=dAqm9llBu')b+Eޛv
ŵc.Edh2hҶ > o~\6lw7Pn(p۽$EzJؓ;oS%º]
1Zד7=˟s. כdHۡyA%2,sD[qEgqY% xzFn1],QgrKOQm`.e7Qf
aRiPD='e,2콈n7uSM.3 H΄k),!(,^%=Y41A G2 'xʧ ~NNkʖdQd ܼ
t-pXQFY]ǤZ"'\r& /xY!ypƛ~EOj=p(qfh)T~.V趆J&
CI.^oMԾ [%^O碥0^hg-lrľ
Yr a8Kel /4ϐURƮW isyr|w6JfgĞӈH:_d-Վ@ '1/jeCoxV>H}绉fG|>q?|~cq0?|+s` v[rbjή母2~"Իp@ćy*+rE6yBoE_0É[w"L-J; !cb9JF
3Vrl[ cK짽QִsUM=Zm Od!nkSdʝfWQ#/v] >>jXt;C3^{kF$B=#U[,PpBG7)nљylJZr<~ǿ2 ⓛÉuo
HI4RZ n
9͢!_Yͪ2 ~ ʣԸ
ߵ/}'Yi;寸LIƉ B ]6*w*wmh鏡oiZQРW i
94 h _Oha <WL Z[b M.D"ЭT( ֝\ޑvQ;CePhxDq
<^)u)6ܠ-6jz"zx44-oWqXM0"~l eٰ8#%%TU&`Ma g_j Liwv2fL?Hi(pf|~N&Du tߖwk+-z}\PuKU#}>w玌ɬuiq8hkCU zI{uı,SPn M%$D"XG!PAA@BW %;-
9`=p6r\YFdށNzg!x![qD0j.`9o] rE#֙N͖oj
cYͣ0TQX6d{8[E'Ϫk]A7Z9<xpiiu7947[`'U/;DV X͵,x&%'n_gV8c0PqV\ 0HZSM{92)* +iwT;y4N<V{{%x{xj$Ԑ̔Ulhʫx9'5l6PM1pQ˼g!uMJy
+N(q-I/x, O;ڭW lJ\i%ih{
jG펑Lcm뙜]1X3> }#w1}wwp0)Rw>L]ܥ5z>/80ŠQH
Ȝ80ϤEdL!VmYc1wEnm3P~i@ivOS6?w'M} |3
Q>P6%) 9e& SvHF)tk\эO_,_aBk#WPn١:Av*cWW/sAnޟh^}G/# s[#md6^\%nz2bqF<Ɲ-,SƩiNC~2mLځ+Y@?Y-<v ˏ }6lN&ȩ6Bݫ..r_nPN2RFJGew[
#\/6Jr>.cjkӠ` UÐBM&.ѧJ8u `z]UZʻ5!99I| O ]Jf9S})s0
(F%4"< 6^C +ſ
\h_m)8#|ͳT3I
IxS5EsL
uC(;)fTSS#i?FD{ie|Q } IfJR85_V5 ܻ/[Sb),L<5h;3~}?\R[μ8;46H9 :8 FNh?ejػEw7$>f&e;<"X{=G<
p;k9tfcOa#q{<Q V?(-&[+k+aLZտfpzXiĎ!~<; N * y[cq-VӐM~? (jev y'Q,<7
bޕ8M M]ԇW
Hw6.@ŔVmÜ?ռ ݲ o T(F|< b$O BkK_
FofT⇛jc˳ igZ0J/e_WR)Ӌ) , hˮU n1QH 9p3.[b[b#tȺDРs;Q[
'tYIo Yoj7R.Ϋ <C]E+hMnBYwlH ҹM`dyC %Cs0h )w8uPqWe# ?5]gd{ݱr+ 3ʟR1<JWX bzJjAMm%-eW#]+
/X
Wc(Ikֱ;-nzynÅg qQ
wm{ $Kh#~s?V;*m@ܘ.G6P >LeE8b6
c^?Ƽ0-"R{GATp1ɦcW֔-/5 +4c=iܻjR[4$ Qf.:̓`o iI946Vy?Ag5qpp: Hē\e\h+U)*Qf^r&]#wQхطΜ@@`͊9XܨTNz9$E؎t?$JT"1kl^Klh.# ?iekzZԱ&f&"CZt?(X$@ $)DnUNV%6St!BHZ
go+a9^\\Lal7fd<ֽ> QH pdnR兀W :̕gt܇L .b:Q$M'3 uĂ?`7ᓎ6AvW@jIF,09>ޏ)~ΙYItB
:|tE#Xַd\ARY \Iij6G d"-)t~^
^|H_Yk
d:PdM.fff'fjq#7;Vkذjƌj9$#g@Qr9ܺr:
]: ?]°ZytSډxkNjǣ89 f9/ *(2Ѣ( =VUgWfodGt
w
=;jGRV'=瑂z78g(j,d-)mpx_nD@yȈQi1V.gH?kjhiu61Ek
k,|RE շ:UPB DhsFRvv iNpWDF;0Z(viK7#pu!aoVy|6UQN}-n%&rR ޝ21qpk4Jn~ApBNQX`IJRxD䍆#ޮIIJG>0#_U}07)V-ɀ͌\ MhWI!t&)#9U
C Va,YIŻqz=NlJ<RXM<j7jѾ Y> -py &jPghShէg
/gIh w'<J}u~0`zK Ucxm
<4M!q>}zfKGzxIk'?2m0߯Y
NNU&Ӝd>͜bUf-3EttUTg A_5Kx~Hu3kJY0Z!$ <W7 {б5J|C|HBT K&>|-|%E+@ Av`4ybIjul,Kۍ7$Q p.^Al:U/5 iDyb K
f\{:[%9@6}n:~ Zqྖ?7{v?.w
ϓ\¡L p kz qnE nRyX@ ϵ-؈7<mN{cdu"ԔRP q<i|%yaܱ7! ]X ܝ/4zڤ dɍkn9_;)b)ak*G'<_##W'Y&6l±/|7ϝy0/˾o#^=bkT얼vUSȹxݔ}{;lím+iSp '8SzZU]ĩ;8}K()Kj/6r7&ݴ^Gr; 0
!Ub5eS {U8m\tScOñ6#v)u*J $<q&;:d ;`7b dT] X/2ӨXqx-w<)Ų<e7|S;b@%!>r L> 3 ;
χtʱEc>ьڱ ԝ1
O = yN97-D$FvEb\ꤕC[@~gMsȁG{{ 54`#uAwO &~+SQճj+J `,. c嗰,dE7ٕ}b<*ˌc G®\=M !W_\m][B) 6X.i9UEj6[5U`]1n1l5C)rMul Er
G4! ZHک+ʌ=S 6 fc:4 YZ+wg%D^l*#]Ҩ]_Ahq' Tss-:Ș`tjiZ;sl| ;x#=['0 0mV B>mT..=ֶ*TFHfſ*F /zr /0 ?9K>M/Si @Y"DD<ۦ/Fsx; +hQCݍ&۶¾<> hz>sEY|4Abj>[S
,/.9AI%c״ /h !(ԮѮugJ'JKť{?8&Qv "/
*O@o=X<@^^v7l5NÀyeu@`EJ$UD/gMU=j;!po+1wГw39 L,%'x]oLe K KHU&̊
]* 蓁3L" 0чR>,TJj %<6:; 荶8 t_$p1]ؼwj}>T5Cecf+kB ֯tܬgkOMe:8M''NJ013m|%~~mv.NhA.Ч) 3?&;V>mo/֧2ￓuv*eejXt2ؤ ]ٚWOu3=
Yg5ttjލS2̬$:SYH7B ]U 1=#3N}')ͬkN H{[c'*kOs*gTm:N [|ϪkYجE;-D4
I\/Y߮&-Y\i^k PP6 ]
ɘƻT<O7I)/ dwނ*yZQ _->idaQS x6oLǭ+ NohǦg%6/s^1y۸
JL;84pC_ZՔKesWv%x]E>R ZM^[8 Pbz`+1
>~4@'}rlk ځG #3%d]rŏu' weݽ\țE_Z~4 d .$ru`r{Wٶ`Q Zh4ȕ C~̴̜Gso89vφY`ўk.\K)lSw
Ȇ}vqvfHMoV'_K^a9H"o臬|CF7zʚ)M
lb, 餯mb=BP. (:奲&$-Ynjc 7;
%ŹS6ؐ Bce4<$@3>Be¿7ȱ,O d_5y-ILa8LN~yiJ(
8 'ƣn6NW kbN{. 9~؉m:Uqa<5^
=>۪3Âm`N;
64ϛܱ wZNfqYvK c$2.!R fi9L
ﲧL8̛߲#mHtHLnMlh9x~kUY.lq$"j k+k?X5X%1/_G~ʴV%Qu0Db)3+Z ].$E W* ECɝ5vۥ-ض5r: -@`y leFt Jh ]Ɩ!Y
i"( Rix ڱ3VLEWzpĤiF tzKqCR:jpE[XaN3kzpo=-n}pY}f\伳[Vhꡁˏ:XnKs(Ȝ~W*<* <1kmBAzppG]<d0,Q6)CZQ?3l ΤPiaon6OqtO57BĀʘ&#rA{+8KM/_3EDX^70o Lu| HJP^KRhC߀;QLhs>U)+D;{'tI5:lG%g>'1_4t,o 7
B$, #I D>y!QpԱ¤ 2k?!gUZ w哉ڂ3ElK؇z6Awе/L\MnbKn{% W8iMP3
CX0I VA}ѻStpLCsc@Fym89iuSiѐgS4̖{W8Lnft5\EA N^ku6548#g `(A=QPvsܹQ[љ*'`V+U/ok0zGA' 6cZX RocsC n-qp0c.;+a x;P@ќ]RuM?7cKΧyliI_d-HM\Pϖk vBj`f7ĶfT
njvӒG8n*);1 A3W6@.
ψ1C*^|_P3,kS
na@yc [@vE=DmJkQPDk; (zH M\B8c8~`aZtkYndcDMB
6 E[ ܒdN!65Q҄j.u/V- 9LشVҽ _%G&Y$iڛvļ
=B7MĈmf8$ d>NQ%m: ޜ}FYg QBIp+!I//B)1w]Sl9
$L7q8Ar<:zS d6S;F8CsD5 ǖ-a
|SCຎs YaɿEE ޡN"v%8xihA<BѵJbB=D8ڋ>9 nc R"ݗ
HI+U)2L}jam
Fq [<7${/R~#f B~B@Yå
PVҗ-".w VL̖ WBN:?Y֦%*3ʻ<J[;Z5XT*j[:_CK g3/<} 2 <4[g6D bwp@ߕgvrԠ,&6{^SB\P_GBXx!J
{) Yt ٽTE9˛ I%PiemAR 5Y^ a[
ܳYH
hW^RQ¨W
EP18s7QX !dہތw am!;AFѨANCtNO0?r7UkpHO:BХs
hz.
O; ç%7Op\+'pA/q61cnɶ.L7{yS岤Q9 W $56
s jn[KVdς;1E]pQ!WǐIHJ5ri-;wu&߈Խr5,ي
F#ֿV (,Yp_f,7-{@pOu6J2'y^5dA`6,afèF(p' oZb %rznfgqiF]@}mc LQƜn%P,k=?ciĎլ4iu+&Z
d˂]&`uE8Mׅ؛=-j {Yk= .H8QkGi\ɪ<ϖe::OŻsT> =isZԞgǴq YŴN?j堟ExR ]$ 0. 30-F*|M.團m>EYds?vgoH=yp @{=*"ѻ {"K2'/puB: d_d]qAg̱o星aZ78O8;o:s]0+ܜ2.zO6;펭E9&PLd KݹcEcsEylLU(}ژU%
/CRS 3ؓH =e)~ҕp0 Qyj
Ub^W^Xs [ȼu*-)}}b?gca}1>~ qAگE6~]Y)ۚRp 9=`>x?:C ڞQ&/8Xꐟ8{V F.RT:^AkAtf
T=*kA({/iz
o~5V10I_q0U Idaw2'SWh&[aFs5rW-'[+ԉ) ^ur(qg7. .@#lU5Ĝ^!6R2ϙs^'J + lJb6^1H+5pzOm %=Qݠ[XY ɖEm1gz
yƾG`._wr;L=?b&PꄃrjP14 ;iJ-;M"
F)BU+^VFn
oEs,*':DvZ:fTα=zHOt) ^* Hi i; ÜZkxLĺmrJRnT׆ 4JU|ڠI) tP ɠEh/Mf.4C O"Tg* ®
SiXW*M
h&ri0ϳvHΒ aZ{Da9H8._n= || }=$u֢ⱛFjmU*{0 ' V5=65S k&4T[鞚{\L's*WWc5Q;po ^ud=$KwRaKRO0Q`*y dV# :`.#((~ᜤ\@X )HQ$ =Nj%:=g"]:vzom5 Gք:ec,T.+sg
8[0MG
CJz>Fhٜ\
gׇNns% %4e.xkXZI|7y?˵) T ls)ghzn
щǹA o)?2"g K9@i=/--{ݿNox WӾ ]F+|61+`_..
fHWrr x a"x&,DC`@@>? \ 0hl0WA/j:\:\9}÷:w?;3<;?:9؛. \^IST{i9ugډ(y2"Gb< (8\3vt V5wbg٫z eH&qa+ A.JuI'9sFd|kwg "UStFUx6&=bȏKU*I2.T3N2-SxBV]l͗@_R8:ڙ#E[n,%277`ܰb2iB 4YnXl{c_.kg=_Gg0̚u5>B'4:ώN#E%AFɩg&Mt KtuؕW!z$gD |?ߢXS
<V 0\j
<*T&a q vӱe3 0qF@Ք·p8zV|s;("ie@׆eO, M֭>w4|ԫ w%,]?hFz h
ߧYkp~G:azel'' ?nE?"/?jm_t{_glrl hND elTcե\bZՈ/zRhsTKi+SDQ4dY[<6 _ FhZ Q
\
9>/$U
/{zkrB0$&57;æ9C#e?dɋ [c4e_b9l-
Pg[>#ʋ(F Yx>bxPԼ.~llW.ou\-QAQ/H6 Q/W4l5^ h֎A.fa
SШb/ l~+ +9#Mх2@429ۖA'jx vgis
~@5ÿC^0a ~tc? Fؕ3J,oGn
X9R.mֱձ1"pؒ/~n02?#C;ݼ~N$,;]O u8/H5Sὕ.Z8ˤ2NT^|u=^G2\#<:C4=E< _*) %G& oA?Rx 8v,,ڈ5N֊lwAj_X )B`ⅴUػޡ#*Fu(xvi_
&d:R[$gFt*nϛwFyó疇I:WBGz5T{8/Ԣq = <iM7PJKc$SB8ЏaL >UB($ ͽ?"0'"1_)]
{pN+xVo'%x_0]D
tJ? wf
>C+@ v 4&0Ǩ{h<&Z;< =Kc+,oR-w݅S 3#裞qמC#g#@a`<D3<q<?, C}K5+ aqen;ռit
xj#ڏs
lKc^
E] [u ꔕK , AUmfCBOF%a1:H#دpW}a5yu6FLr=⭚ &z
]zNtL=X3u&ޞ5 @q53ԅ34TԨHf5ȷ
iJ,y~=Dԑz YI8 pЪ2 ?a1Nda(j%ׂ 5Ø-;Q9v(ψe c kEBC#,7ܑJ2v~0L*
7
sy謙ڳsM1O
x;?Wϡ4Z3<31Ng.9Cٌ¬}AZk輷wi^T ?aί+#zxTO8_7'n@%wc8\5RIՅjə<?1& teM:jո>=Gis_q:ON?7'_
m=jMwe\LÑ1WS5j#nzls
>d`/u!i1.m3c𭠃r"o֫JQ(Vs6ÿT(}G % -(Ve7l^.N^14 i1R|(1T
횀I}a]39&" Gkw8T-0-<'O&lݰ\,uy7Z%,>jH%BwdEVљ)9/D6 3W
NeQv|Bdl-1S9Fzu $ЂzX=h }FRُfoF[25 ?,^K=+M*6t1xx`a*0gVfwW~Shj:oR (xW|cWXő!KTW
/BWJ {/5 oaվ8rs RE\<=Ji&i# HSbNZfJ6U6\Kr5eY7]cǕ#aulYrV#H Dw KH2 *˸FJvŴhLc>NJ> $%4 ^ ~H$nx3 G$#FT ѲRlKqBw|ϙ{* k/fetnKU1&KXtΌ_;6>Eþɷ2Ro͓db>h٩1` \u3mSz\ps7VQ䖧èS8DÝ.w?`͛ Ŷ7 ⳾Ykg%gڃY^;G+80 A!9g~L/Q/#VAnTB%۱aN G]\#2i1͏ Z$'%ӌ< _IkQ%Ω7/}A&3 f:.-!\0;b| V\γ9Zm[0WI
QofsͅfH}աݞ*.'4& dV.objW P.;ﮯ^%P%>kʵt C3̂b'2P}X0vM Fo#Frt@we,/+&˫S О [
bK'/mz6+ћ>u@>{~v_' XC sI{n }cbYZ}}KS u nEp
;pB>KJ"Wl,+K.<spҝ|d6 xj0_~JKVK Tdmey|+m`R妯)&N,#^o; d#}@ Y `ԚXw'(I<XSUsDx
:CM
D>> N.hҥ9 bKVyHNf8`/~? rynX)ܔte4XQVO"<xI X:HmLx(i9lҋF
퉾frL0Xb
/}mR^hR\ӽ3s-3bnˊx_~| 4ߪz)Ƥ x^9ΈVwsҭG2TSzgv q?}:a$Sl}/T`©s쓋[)(}YKW< xb>y[0 x #}gʊj57-pnqS, ">XGkbh@lmؒKJ r ς
($" 1/;x`y!Ty `w6;q0V.
w$ ˤX5C\+O'FC ^w8a-8Mۅ ֓UlViljV ||C<exam2z%W{u>;u2]j> L 3||7uYN P frg۳wi @]K4foCEH%EdbTRFr:b%(2P> 1\k`W` ?ҁɍkt: i}}OO[Yj#mC<Y?pW㽆V
< 4:Z+/w =Ki 0s ԍ; c~ǻ n{F
#19q؉;Ȧv|1+@Lo {~Y28*) .tȩ P"MoKz݉ ǂ#q:;>%UuqݞɋN 7bAE@!Y߷us#*e12esk 6V ')ƀ%J$`x#&-䪪
:Hmޤe&&P&ނX}`>
?,i^/zCs5bܦf_eg+QKi"
~иqh5D
-&6.ez | UrbF҇.-^ăuYXStXz$#SƙK=!2>, ʄ XqѩV_uW&vW_ИM<\NV0$~5ϕ:]Ԅ̮nVgx4 kXG{lj>T>G<#.mԍNLO (ٓqZ=\T3Fy9xm8 Cn+۵`zjCu"MJE'Izv F}ߦtz*Q7QCJ/r(8iSi+ݺ t,88XZ='WN0+PTZW ~փk8yU/Ȋa+Zmaō]0Jv8/B(I7VJx֪,YutDt즬.E>E.41<L. ^N Bx; t> biwɑGtSaqXa]$c!db7J!^qwf ?Q ެ&-Q~Dv8]zjx\S])>S BX4)T#E
@yu\g4\7M M4)/Dw4hRgxqð( ZSЪLTnO}v}Srs H6f*Ce>;_} 4#%Ƶ}ex##6Dt=k'Ƈ-S|
m[*U*tUI7l;kSuoTX3fj,6[YtտߢcO#5vNluvڙa5yf,ba.RLQiTpfv` F +GY>:JuȁkH` DED($9b >hk=<w΄BeZL~=a:Ng<g'6ZV-Y21sElΑ/B qq
ay bkeZXW.݁P-4@hZ秓 meԌAjw}6msdKTd(xxܾS4?`/Hw%jLEŶ\ ig̑
z~+݁J џ@<8w+ޢft]F'
ZW1[x7~IOa\/Q( tK(+LmٶÇtyQj₃ g؍TڬX j%hʉ
QY2_.a+%R3ru8kaf0?3 c=]},6,RQG4;yڶr' 5, XVddzP4 OsE?
hۓ-TZME\ A>hGqOx&}
Rn"E9"S:RӚyW+?
XD<S <ZBn
?Ku{=z >
(39FvW@b\ t zkפz쳡L1dСg[8`VG$ͅ%}ɨ_hx0'|,;TB~!C%t6 =R*j3'Hl)525d>҄qYľq:sq&p6;MsÐ>67-$#Kqb dfGc2єD7mx @po;b# >vPR 31I){Jq 04h+*/9<4lX/dX oa Q;ZL <`Z\Tofmx@ =OCwT$-"ras$T- A
xĠ^0q!8B6!_lsI(Wpl{FqiaK4G|pf< 2r>F*,T4 :srxѷߞ[bu#d.ё=Fы;jV0s.ӏ \baXb3e-eN1+%9j.
k%'<٪EVImfF҄}EEC ̘5}u^N[t.LmHΣxcB\^jImn{X˙%lo:j
Ε*lؙ#fݡd4 Z/9jUJe}%+P~,oUW&Nl^)L,q+.es ]zAՈ{l 3kZXE[fH\ 6WΙ?"74 VQcZ2d<RoM<u/sOWoFm.eqpXէ{dܴ7}mHc Z%eɊֶ V Zp!ɸUi-
OE{MBR%zO`b^aO<0&%Ohⶔg_ 0Wv# 2 rVkМz#G
BYPo@M6̶p-(FwipZr
٤~v+a4*C72 EO8K [^<_&0<B'ZkZЗ
O1c'
/6 $r$k 'צ}ZچhtJ}gC
&& yGWMѽ5%]z3R0oĭh3[Y&Va">2 k >Wp `[G~]{ԮR!'*5<ç5 ru7&)lOF# DƬ=7aބ~k!,c|o FOv;CD9%'"-MO&i6cm5 D0!w>
,KM<T 9`0G2mPGq$I*tɚۅ ?_<yH4E<`
rHfD^JV0ē8>=L}c+uXrZ cVߘ|"tyVPgdD]dskp SOjڎ%X}.>x=b$~= 8If|V 9ޮ {p גw\7M=_π`L{O-F2G
+Q"T>CdPWĺY*^.>iH Yd (e,PFQnEyJ3FtҀ%g? 8>X!;2%s(<L4ǻA/Z6rUz
b=%aGAFq4#@X)9@蔡-rl)A 6#2
x erRbO eNyvM BG odVÖg;sQ?[Ƿ_j}B1H(rx,7.|0?A|s^S) 8e:fhy6>f*DcU(ZICP?^ς`Lit $hGId^`ЫLcv%Vy \$zșG0-jHnM=4(-}~ pw%(poHX4 \?eU{?X]trA7#kQv]rJ͔[rP!6Mkg( dN*9[-sۂl7鵢`5"%M{f :Pb{GDS!^ nRkٓ7%˳ ns _bʌfI"% (=T>N|}$ p~
祔Gev؇1W* l) B
ϛӛA"ifu1<D`ǹv+Q26,+"<П^'Ӳ,!> ,j⊞O5v1R__m-#SR@Fo'C4n Ѵsog ,upL]Ro=<SS]a?ñnxzcO]$p7O*я,.SaŊ
P7ՖxjwFgκ?"qY}4]"2]rOފL4% cUD?@)XIﳐ4!4+ekTjzȽ2L1sDJYFΧ\H7:j^0 [G,g^JVQ0'͐E(Tt=ƒ$^ދ:IX8v>RIj
B-kTn7|?^ilY >ҭu iuh:<!JB G\Il+3?χM95% ,JX Tt@asx 8>|Wx<f\#,[o1[\bf[#IN;[ݽ1 o^@ gVZѼ= 9U߽D5lٷH^Dd ZMW+-y ڠd[[DbA:oj#-#hBDȭj {ͫiI[YLpşHڋn!UF`c'`+8 "a.n5`MiQmV `4 [7!WgZ-JP:RNϛaSxֿbI &B|Cu
Rp #os\#HN^c? :8Ht6`,ABHe,E5Ak.) )Q҇@'O
[jӄ+۪k?)v XXWTU-))'K$#t6d$AP}@kiس0$Aց ׀oFp6 }jrElPKDd*Fd"%/ѹoCT7uǷ8|ĐGu}c|cr FIb.3_Gp|-\D4c5Մ1tQVlLE972j
Rvòf!cr1aV̱BYi2FrnуA (E~B5nZg6?k(?]_+b\67NJke ׇX: +;#S;3+[}^k T~SK&^Ԟ7 82lE.EN/Iݢloׅ:l}`&con"
, PI}zMPh5EƂ10l7
;9ƒ
cHCe4לGTrи~<?,JySmbGkȆF(ZH27beɁDVI]0I +E 75 [ Lp=A1c)|iA>`UozFT_0>PIĎZ]be4[孌M1|" Ax®x!~yr)b(5H^-h }ۃE=_rQl}炖T mH Wzԥ )6 :9Evnm
RѼC(]% *? l[N5`=R|5݀/[lH+ s`9j%хf@9`^ kEIT"VXqơl`N#:JOyVcksGe<F}N"?lO o"hb>{\m RÆrA Y%
Z#$tT:$x*2~ oGtt('P A)ptb%[xqXx\}{W Se5@ !hdb|/Z>` ȯC1x4睤=ȧʽ o{o,6A2ϋO&ݫ R/Nt1<
G3Np8mP7ё ʳMJk) <^{z F>r*wZbGCi?XX5j?n cG1e( k1&y i³#{Bkt8{FmFm7 P,=4=r@_cu DXeS8x
k!ٜޓo u(;&7uZJH/:_vvz#:eBf>
-~,K"C.oՠGh1׆-w}%+dR'*eت:zFغjKx{"+rѓF-/
O_xB\_P 9*ƈ{!M\h/>OʠpTxBғ1p ,f,PxaAEP_|åpX# zE>ԟ~͐ #-=ւ /3-w C`?!у#Bies=
M )Ԏ#R`.oO__w}Zr=3s$-P {K"; ɪ>YipT~ 9wN58z<|]$bj$ +R),sgQVxw=hvK: F/5 bW6HJ<vPt5oIAo bv3rl Vy$l#P%_Pj?+ m2
)cH)EVӨo5XynE7l p R 0 ޜsp88$h%_ ҢZhXk6UaX42D`% jZ ٽIv-f!d Kه/ iJ{S#Զ,G"[VHG!aެu4ܽÝe&dd e4VDPUH?tMX@E&阿h c"s"l"r"#"F7}]1ׯp&^&)< ژzPِ3rPKzXw
t s@L@_,Na (u~NL\-C-}wꨓJ3xncH͉ SqfA$:.D=xdwnguoG9 c9)"}.t>>B!#O/kf(}%(' M/NwJuY8YTď$C 7a*3'2va\X]ox+|@x<Ai<}4s #Gϫ!Tfݖz#[XlhH:7I4 v| P?tޟ-p=wcZ`L J[~ #a,rJ~qADN-^DU\.B:$ƱR/
'~gԴl]8?e~ye'\2PY@m)ҏگT?f>ilg}nyS CmDȞmgK:/4.fe!\/D=) >2:mbhn!wKX_2k'bEy,_#HcsoQ
2Pj ~VW{C%8uȆs<o+} 0${niӤd ߮}o: [ھ^2!{M 0l})ls0 Q$st M4eoءR% c>& |q8<Pxmr >9`(MbρΌcUWhɱ췸0NZ]>C_R hĎ+Tv^؟0߲;ML3=?h~65 3Qf48G
D ~}Y ` S\I^;W/G5u.;A,"{ p;/xߝb &< 2ܿݿܐs獏"> ~{ӷ.$ dB_@0Ѐ 擪v&$VWl@~բgvYkMB
xzß"e6\w~4&3 [ DR~yuhYQrJ Ѩ2"H3"̳1ٗ}@ z1[f@j
w&҃5I0P <@:p{"nٜORW9 NsS i<6CDgmCC^@1Kz &84)V>ީSxx(W1hxa+gn`NVH5E_-[m'Gx= /\Tal8X29%-wq8i:L=4), @GzC}oÚghϺ_Ԩg;;Une& U|9F@ïpaw-Xe7:HԝV6҆a<Ň+EVylXu]@֭ |m\xg+MŁ.zVé.Og5*敩1?sKxX6yG< KL r
Țyf ݴX'KĜۼ٭z}TLL3iM~x7g(Λ3[vA9[%ø8K-Q*] >Jo>V)g,1G:~`0ōnڧh\=kn}d3>Ʊf
X LB^
@>bsl|)T'ߵFEB<}杴5ނD=udTA?k_ c<>Ù)<!.{˃yqncR!x>0scyrng{Nroӣɘ 9*# (f) 8gudӥ =Onl2PhUה9 `V=7ƅ&_Hּ]OoͻդzFwJL|=
V tge ' $ 1Z[)wCP} O
,6@Aa -5w2Qt p7nŖY} l>["V@B=Eu?[&W:A/لgYrG]gidޫ0d _EK3XЊ{EDufKpn_Fy'!a<Y%-nicFgl>fN?*m陵 ߽5MA Ӽ<fv Ne^ O [ٗ ֻ 0NpŽ\
t`1spT
̒\%'d+r'3W.|x>S]0R]!Ar].
hYPפoj7kԈqYq`@@JN"zg]>fJ Vf9FJ>9]0LO#0n0uD0W%sR1"yb/C t:믯M =$q~Σ زl{Ar "K[C⍣mSӃ! ۿd:놬f4m#6zBf@3= bK w hCqZ'3"A}1hpYZ魭gM8lٽ7_ ~,[w[ _g ;+ƅʿOX.Xl6k@ $ 8v#g'S3>pw~ C9m7[r
$ =ӳQ1Ã8w?.j '[2a~Mf+aLB4SLbdPPY84?zK: }
efTc֘Wƚջ(>^ o*yHun9V3{}ଡ଼M?Z l nxv_W(p=97m: w/^~rsᒺVJ7W7A[23)*6bum{84>6.Ni
\8agEmW~=` fXlp,|hˤuȂ
/.̈AuI \^_gt\;LkZ
x
T ~JP \!>]~ lf9[3woH ;0&}M/wԯ9%tP cPTRy*yD<m^ˆi[L,Tw.CX)Л?X_O $VmX sm!04`udV1`.yݣp1uMYV]?ޜgo_Po4}KM=8KO[ȼ1e~@` Ybi8_l誜XHOGЪaDž pAl %a$֒;@ ȟjo~lqŨۅݏю2/GP2r!#(Y;W7_-/n7*ݯ up>U\ԟPio
LH."Pì)
k&s+?={ퟒINMJv]cDBvcK| yVk{Gռ;$*:#Zh ^ NZc$$:@q
cGuV\~ҬUdjIUE!D+*k6 o[6 $P\:BxF|ǿۘ 0
-?Tm#537 nx=O.Ӡ@u rɂʓwd^xnW9>ӄ 8c.Kjq.t}~- oy` m:~FC?ÏA{va.rd(nm
ד)-G* %fG+HϮFɞGn=tP`֚4w%Y P&o?'x'_8݆<CMR۾3x#当sGݘ*?"o4|}mCM05$%ˋY!fe1ۣ2t3/%~p _tqq 5[ 3پ W ~xM<g ;w ;UUl.NF瞹3
*%i6k =0
/ 0dzTr5"xQ۷!^x*BYImo; ffUg w*(Ui h5 $J
on4 ȹ2?; ۶^<0_7`©;ڟi_2I-$puc
iL⨶fRz4Cw3>"QjO@@gY4 p5, TH{Ndֽvciv2*ZZ xruDx~ _
z>{jI+ؠʺC2ev &&^F'xN<c@л{k .ҷ&p]0do!}8 yp[mTop H- y<.WƳwܠ ".A k9k.(xI6 / ݏW&-x gg [ʗe;ob nkX }va~ l6/Ad~W1 kY <uaRKǧ
''lm%$͛:y_|,TG&]J
fl?7eݢ/M vy顛;lW1+d};I^#߉|9ɂ.!v YW<pG/b|!:RX*ؓ 3"%g0B_3x<?eKH'̈́}/9 |^ !{&ݰ|7 {b4Ot]w/ۯ
.cIҜ$ʅQp1b͘\)=>5)o c<g& u{ ~?P y/ctCv{
o=_kD ޑ~? q [af lfh^EH-!ivQ*_+d1i3 =zxwfc~!MAra!H5B#U,mpi* uAt =: $3%)>3k2UYU W3G{%BL҃ o`5ݞ| T+**,4Vn)]zR3Na,S^
@ƭMrk(S;
fzc,>nи;g'~x?27$e
%y%ѥA)eH4A4sĵς[^<MgBEۿQ^:O黵pIϓ VE"U<2vg^@s_ Mz=ϱQ/m-{,mS!ǻۍŤclYbI{Kstb7]"MM%T,UL]] p뙦g` @/kߤk^+MN]N/@} gCto{qK7We,8hh-˕k6(uGA<o] >cȞcNY<-ol;,{ NEo OIHOyw0e sE嘹k5Nԓ=+B\ `0ZG\u]Wu^Q0Mi{^sƣu?hH&ҡOH)<nl} ^Ʉ\
&ob/z]ǯt@kI;{mb_Jb`7\RO )bavMa {Ò, SM҆}NŽ`Ymf ?g̎F'hx*]/
uR3ׇOxdeJߗEd$v2kh-?d|H/՜>k_@9k?"fO,yDӸI_Fz=mA l(p<x
!ke; ަд#)J,ar<b_wo?RoLe z^PVto(D 1Sm[kףvx
\]$<0P/]Wj*}@iWNs'l:-i112_JTdV7׆ ':k;v}(_Ig7T.EE
~ݿ H7g| ǻ续7q+
f@?[15
ڭ-Nk)ט}o.
,NgտD XU1S:-kn )Ppg
y'/ˎ[. [>=ƻ;'%5LKaaNoNG+&z?ELhV̩ ¸2+C.d$7qWF\hUB^SLþu/*z
^3G|fPR>4b66}',f]:'$AW V`%*_ gy^n@0.3 l)D}k¶x{ax (ݽM/uP &eמGm6pA<zDd~f]wm49,䮴%&GM'>2WU8ߠjW2Ї!O
=LWFsx+kW
Lv|7t KoZ!]cVvMSyLѰcc | + EL6
o 3 U4cjewE^y%{]p ʵ$F7
PܗzF ~Y]]7bڰ[hN+ֳAB[+:/Y>' bU.oijE>)~)??>G~b̔\B2XtXs$|F|/%K~FE""# V_/.>M Ukj1hz3鍜JJA+rUly@NIH^nVxC\x2K+~Pq6PQk#K`Oڠ.lxA=c繊avq ;݉/8q<QΟ VtKg5(UŷV}/"Y˔Ԧ=vdSzI5b$# P ٟovgi
>曛S\ր0/qk<fk-P~R]hmL{wh#R2vwʈ_#tk;e$.x]KL5Q
M̵Alr4C{2}|ma +:KZM n V"I OJĖLEvy w<_5 sM7O"cc; l> !XpJ/zM@㼸P }i %}p_㥘[%i ^Ȋgm_Yb|Ƈ;Q#l; }m~l(.H yAf]ys١kPfZW:k:^ěz+(ն^VE" !\EO@M/qFue%ܟ0 h (rǙxEw# rlWB <y=e%E_\ĵK+oX_1hh?bE47j :]~ P/~i઼ R|yG} MN֮ms-gЩQC%8wLxt> l?ɱ6)$/\> .t;!¾0IXʷҡS^.wK hGTFmAi脲
|)iNE ,x4',j^7.gw)\.<g N/#IElym #_
<1;-k*0Pj'
ƴS?̧]o=teZ:Y+R-VBC_H'Q^ *CھJ0uBOB\KN`u;fNf [ z[7ɠ= W}>>/_S qQH( :MS9ə;xE=deF3 |ax0 g+U) ߔf#
sXeBPᴂM4P "TTd ˊ R0͉8^\
$څ{dǣÏ TZCdp}ωxC*34}/ s?&$ 38lE]?%, Ns/)op(Sz bbL+.q671KF.EwO;6r5&s R{]{喛'!߹KڅoRg#C?]O <\]%$Kf=LL /+=C.Q37JوHiV &k +6ٱj*{|`;b fݰ=ϧ|(~ k Z
7THy>?9=~;^Е`\1b1C
cVQ'c#0%!T[&%%k7xA8,tP `b-!-`z 2r&>?9]J93:ٓa`_7;עmWLW?ƪAfs( Yzd|Ćgq";&ẓ^-T 4 e 9] xd6gC] bAEN}o5篿՟\(/|&.~
@ؽjΑݭ ?24sEo ;gS>g{Mw){ߐJQU|BzK{ r+r9&IMwf()U)R
:/' 26&B
-bw(Ijp,^?rv~cA.qEwwǴŸS<_{s7"5,xU/-gf ):d- XRR w:F
e~llIİD=qI_ k},?({
]娾"qqGĦHsUKYK>`VIi~d˥kiJ#~zӖ>:n ̃0EJc:r=E>.iwKPst Ov ˏcF+.'<o{h7VQ]$'&tL"VI x+ͮ-~Ƕ߯,7pg>E ^&7H FRE gb=#IG uW^LgD@\+6z
Mv 7ikm~xW[nn'ԻߚS{,u4T4R{$He$q'',S/>ZNkA,jZ46 a+ ^ex\. :ͣŎ095%*'Mc?3*;}.Ƃ {7r#5V CղWf;,`c2s{wԎDt b B`uj c;/YxW
#srcHc_? t~/U& R 6 tŹٶUA䜻 'yЇm}gH~ówWKN { ad 5&h` .5ҹl,<,-@u^'뤶m7+mRL?(̻[!lRqazٜG?*ze,}v$pUq-x|:(-{RJ 9ttgacn(( 19`Ñ,fRؒ2'|zsX^B`l*|Z6`ynW^E_,e-3VK>k`6/8c"]ke6)Ї@rI\\c$8~ (Wfq )fX1'T^/s'A!k[DnlU{^@~ & 3?^&Bf_|:vW+cYyՌlNY #aebSk;i!X` %nI7;
<7R{ g?S%+81' oz7 bݵ+tuH Bgkf>- \v_yfOԧ{2-7"V_tۧmGr4n e[݂\tT T/8?`@VQ{N+M_8l}%
amʍ.,uȧ+X>u&!9O
W?ʠs3s~+a$E랩;Y#na@Hz7kn4pr^23Qs[
Sf]qNX61;vA -| L|sf897 o /|#[onY#tr+=_~7T^{ "O֨YODY[%Ӛ&j
D3v˫X*$;i( mX5֨\ n5oN]v6|t -d|cڊΰMÀw\GBp;m>}{op X1A?#Mƕ:Pk\w/2~hRBAuv|OG wJTyz^w V.z~Փ7gMH!쫎"7X`Ü'|#MQsZOrM1".*մ KǨ1| yE@ ˝/G
wuNjU"r)ϲǓ=oQI`vڙ$LdF
;Mx`vx)e^3s9
y]OO1W$HT2*~A/|̂5(mwxۜZJE 82 R=/Nc|R4\ȕR2J,f ? ;Xяx#MW Mc;/_0
)MͶ ]<=R5n f:ٻ.cax /s lv+?K&Mtsh"7Z nLq0l~6X
l$ Ko^wZ!Z|<n3 jTGlܦ=嘞irPŤ<rӰQpB]= pVA}>caNoμ]?qA zN~6Aq4E1y1Zki/G$}vHJfwRsUޚ۠nQnr{v eӇ.zޚ ?CDu%I3{gAx{m¡O g7{=1aKH 6+_F`)(wS<Vl.g)FQC# w>JP ^x}.ݪw@zBíҺw!z$b筰]eG=عuG=od+ݐ}P&p¯w3`TUY Zߋ{ #9ue].jA= ЈHo/9 PDZ 6\Y T=V*.
ið{9iƵsMV.4oi1騖LifjD t$n̈C6w[?3m9B%N>>fbn ^ɿ%r:KmR}Dy@/n}< A_h^GaW8KO|kSaH!$ͅHN 1ߨ{4m|M)-'n7X lp@m:}&N>z-O/3'mrݒŊSIw7%1V!/+S4Rþ,'ª/o]ԝYET7A0Iuaz>#^StMUYkۙ#&syRfmz];u.in6YѢ>@:rc`[ean睟uj 5VMP
;9SWgeI0;ї4f ?(Gb 5Nkg_}K#Ru)[RwD OeU$=faB@he6%f 7n 9q)6Z/ˌc92+*z<~e>x|- 2^VUOy=ܰn?NNS3 HN^~R]O/?? i3[MkxVf8;֙$rqY9ipUɔa~ow^bL2+8ܑp#L1KՉ^$cj@5!2K%$'BrfʇQX@/qtJ^fUM#,~hJѡX[ u7{+ШH_`!b#t'$PXһSZ#R_0|~T:IƸҜ?ٸ}gf)?\wͭ 8ľ^>Mg%Zѵ_@*Ay;+)YeQ+aynp~/w{dPq}OƁ;QV(o# K|[yzؒэ\^]I[q ,M:n=Κ~/p:Q>ުNe[LebN/_&E@,K-a0er]>I,kT Jw&#k 3a,#0wj,v~Ģa#tU]
N ~^Iy9Dj2M5ՏЌ oy :&Ҹ"N ljւNy7/ 0(
ܵdL؊y#|>mǘ9F 3JTX;z &t+RD{&q.aCWRBWHM L!niyv))^Ge ;,]'ۑn5!.MY0Ȉ 3D`a,Xnۤ^)YSLAz\Q HI\#"@'`ʩV|
єjH,w~7c_0b>oe[_hZ([E:bO6-
3H-| AB5f HZ~D^呬
>ѻ
x$9W<իc~; {:Mi Ff)1{8E./L-: PgVu[k.Pzu%eK'>0 $5=zp;@rY ŏB`.5>n{"M Hl |-']x_{1.ߘɽz(~6>gE };kpF.Ы^apYwv#8\GnZ 6 5R^꤭qFmtx)YP/O *]ea"E [K-/~\B{6%Jg2돖ڗ
u@eE"N 8ѥZCCpU-l7]]=g8A[ʦa
%q r o- ceƃ60cor [:c*MN߄ ?P}֫> 7ߩ4>[g+Rbq"Gx3.m _`T27r}^Sv zLm
W+C_?tevG\cDNI
f%ЧyKwm=eylZh^ٿkOoK^ЫuK-T_am +L(" vq:| TDlzBNBU$G`^8yNY3}rRR8LHK/֗
T9A(4E?TF<vzo^$Pb`IR/#C5nO1+at &Z"#_"*)diojiU JH0I 2*: dpTɴH4{~Ty? cTDB'̗;jzYHvKCx#.I#uQ"Kӝ5l+HU044T_o垙0%b O}yO#Rc tv.rN-%jئE.;n}V AI>L [)bёʬ k&m EreH.Z'jnCEW2wI{|uIg:_2i
R5efUavb`M: Kqʯ)Hqw:
ZYmre[ٝn}swmtYEw! E|7"|7-5]uQN1_ݲaJ]GҐvAȾtjgqۤB|q16TTZnD. XR h']`zKc0K\M'Z L}֑ nqud/f{73
Ym FA9Gc uhmUaݐv[ƖM"Zg0ѩs}@sn"flS}
'ؼs| wLÀ{ wtXd7 [IIE;W}Rf3,c9* !W:((0+jma;$tVM" QX)Od%9Z
ѭ- gVzA nvj\N<"A?
Nnh\&ބ6v *q5D wc#䂸 M̮n_K6n(0r\cjGՊS/Hn6y>Ҿ4q>7@W^"ĨP
ؤZ[n ?o <[@]HYY0i;f ?
fA%9Yi_uK+}vA }6` ijjF2 DHݛB͔å( ؒ&) ' (l.|,܂Ӛq*| Bkxi{p^ߎ;Ea[XPy7aKs `H )KzJ_ɗj:e9}{_? w%~|Z>ڛ3 2Ob;n> b S o~@
>S>k?hlS㘎l_rNԷiEH}cw |b&ߔvagI.`
< 1 ڒLZڞC=F*JL8_d 0Hi'Z!)a×2cH%HLՆ7<]G|K~;|
L>F0 bI *\^W%o&]ŎUin)5Lk,WD=Δn,?Fi2~-]Yo{
F nmtHܶƪ-VKCz ֧= .慄{Na&;.d:Nf T*On` $/f:},BxeջYbg̣Zϼv%"hk\p)h= 5ARgTAC3-l9bZ{ EsUCh[;sYkt̯6hBMHtpĤG3e5SSxD-jEh!<y3{uI~k=Td2]Hg 84Y,%:d.n-f<?Y\|
.{?˳uD{xi.^.pC#
@Ju|#d\H w H7 !W캺 MK.۞zY>6<NϟS, GVD B5cu 9(*
l,D B1|XF\/,D0C@t)^ EN!SvsQ9@=FuK'nk+ ` LTxWJ~]8JNR X2iUcÆo3?w;X)@ʔeXpM @F"tgla8
Ry 9smWNJ?ѫoqsr $Xu02D!:we]gHS҃?R5K ۤ*IADv1w~v~j#~ O/S7=a?Gg%ܿcF'f\yŐ}pF64N ;Xo]lkgMcSD"KIhqO"3 8 `Ⱦ ~ѳ9 A T9cF
6 -#c7#mK%xvRf6rUf-sȲ6?" *0S3TʞmQz}"]V.PN\"=MR &|C,*I]։nyu
cڽح J(4d[tvȎԌs9]-G uw7h;D~UHcn#lV3ϡ]+G?Ύo%˸;PY1rB4?7+I3@Ь<u 9چvbA25
v
l ML{,".@Lcbc+x[~Wc]Ǻ He7T8dmH pd~stL O*qP&ΡuGp64v?tuP5Nu LAD<HS8 { O'nȏ80B]k|Ar`r]|:C_QayopK_yXvCw\"JzZʼnKG;mߝVd^'xJҙ y|NI廻
/ՌDYuq0"rn도 Gݏ G pyϲ. AU L2i~^cc g2ߤ-ֹKZkCC=%T_߬/RCɞ09˂K (u29.Ѹ_ ZN?x UJʴf2fc_/;-U-xyC٦a2{~`hg#fEhm@-x4|SGIfYF{VWoAyme'[l}M /$! E{x>rzSɅH0RJn p]LwB@U;-2pY*wƉ/ --c~&n}g ͵*[HEv 5ָ_k1RߚwiVK~:-xBnZY
ar Hժ(;=B˹,}cF
2BâDUvPǼp}j,b6t`qghL-gCsW_u>#K6yMu"_wSFH_[/h_&{
yw
w Pusg}2ހ f XA+÷TOE,#y Ov -.l75潧|ģ/" oc5w2bFPV%fb~b/| p/d 雞'W[pD {ckJ"+) 39 vC _FäB nڂҧyV4= 6Egൂ7~#b6x0i.Ngz~S>c9r e ,L<| 1\ z*nSyvΈ vg#)zF1A
\\ǨRHYZq X=\6w$ hj c >\RW@Ol PJtZ2 x~TPGʗ$BxHV na-<>A(%վ3_M\osv K,B>+=0DԱ~7 / {;/{av3
)U}-{'#n}.BvJ!UGJe}D6~~"Y)Yݯ(*Lw j\ARj<ML6Bi?ݝcki$]JDr m_9ss7lb4&=PJ9Ɲ]?BύÔtcu D#.Nf¥:V.
|MJEMLi mLq4%1blKPa4
Jĥ3XM^Z
'<,
( PRQrU( ȼO`j,W[~
.z<?l1S7|Sӽ~>Q+(Gveħf4T`,O#HI#=)z4yc$8wd R)m5òsw?'&`9Nz%2VP ^2ww,\ ýhtKWIZv.a^
ojVȀv
l (D`Ɍ~ШT&2&U d]}fG-! 2>ySE2KqG
V ڄXGޙ#'oċTFL2Ӣcp?-+& G*-JطxP%
0 rs)AR
;\
\Fq
f &mAM&2F^< >_p_ ѺUr:.ϥ >[4X1p۩o:)[c 539
a̧Lf3쥳!sfuϼP2lu=
yIPWt<Yt 5RP|y~N6rzy@(oԴۻV[
F
&`A.C-4PyŊ#l*H5f%ZR7OT1l,Pv +cN-xtuLe] aD<5( |ثM瀗Фv,'87p;Cr}Zo.Fj>ju55Y 0b/ -<7ɨIvtബ!g ջÙKwUubn
Η%ݻ[" S
']b# jŽC$l)sBq`3[sMȆAf} ,ZRs ?G{AVG Xw~/, q̻o~ 7P_mKu
|gv`h_jެMaQg hzDP
Ċ#χS`^}
+6
|"o\ vz-~vVZ|`Vl 8 zhd}= K3N MS"=ݎ lxr_
eO`u(ڸ B.~L$Eq [z(vݴ
Ig#6ٳ]AE;14~G$B -.+D5Au%B >`k1p.RE5"ʼn+u輻3cnŨ Fok_볪oOM5ksr,L`w%)TPI]M$~&A?'Ku[eEbQbN_U"gj6*76.氻zeڮv˯. ia]t4NщgjsB V1,rϜaZVqoU{<_{[ϢPPFQ٭N 4%j`Uԭ603KVXm%ԴW:A{&f 䉽FIOI&N` LYao".a;t5!(Ӽ:SΔr-)$RHpI clF+Ϻ*io5ʒ8.oMQsc\Uf{KSpfX$盩H{QvsmQpoqz BGjv{LQcԏ<ĝH[1POz'=㫒qrR D<6s.ϫ jc 8_ݒل Tզ5m
l*Slaw8euBa<ء3C۰ S0&UMvǕ٬̱%z@x/m/ߚW}6MzёY1vMH<6/?,$A3 4&DE\
* wMWy+c;.Zz }iPsa+azJ͇E39@ 繅b wt@ҩ# qىr
{WFxseZî5*ԟ5|__x}qp>
yJq? yw ~#0@_-hxc^Qtx)];(6Tinݨ,o]wQو;VC rgu/Fj¾l F3O.&\KSXhjhSKWZuP
X.jF/hcbWHg;ȓrsZrW{M:r%IG,I'qŒ/e[ ܩ2~둳saC!}u=d*vh{ ?
8mu~6 ܯ V1 }Xl/TNќ{?/{= aO44k {O9 S?r Rb/oOf/oL
u Jr#~ kR"vσst/w&)|S {>YVџ u~=Oᄊ0U !+ՓG>KHnn |8hr;W9ԏpoԀ&F;E)>ڍ8uTXO1[$/)zV]^8mB' _rɗPp]3!byVgV|^ Qq;t} <?y3.U&kDV;B#,w~ Zb!.]+dԓ:>VTSHWk%s8XIO^&,{O=EG$7 z> lXIk t3GQf1fpCǗk3BcȶFHjCfƱ4>?_ MweFWT?Y՟8'e'J hַP{b әe>[7 URq-).ӥ*\*Pε<L 1AjnG |_=MoDu}yء'C>cW(bY4o *k[
z-LSL8sLz 奷[S<l%9O58V#EMs^ҍ=!
I ގ2T7z}Oep>̾^?bYm*v |6ұ' k dE62ܖM#h<Is^}gy5b+8 ƿOE,]@1 dY5gGE =Q8GRN] 9</N ggu< W
dKUjۼUO&XhK7s]_Ĭ pc%9 Aa.YZ(tp& 6.|%/@~Hϵkz[s{̛%y }oHm Pk_> >{+vI ?_=>Wy4B,d2ceܗl ;ͱ90~qy {T
TS6n> XA$7:H?>;44 @{V)/UIvo ٺgUR۹!٥A:<tMoa"{kYȲ A7 o2MtV ޛ58{19`ƫ8g4 YCzSM.a
Ek:|:IP ^o':_RdM;b;⺌m2Iغ!@R_lx xH:}[7!=ŲfJzo.3sK? YAjE|<f 4l*fqn\- ,y
`ۀk nRC F =ANOp=gm9{pΆp%a2S|Dԃ4J}^kQωξ[Airv8y0gN*8AyGꝻ
'ܤD-{WQ?'}⒤
U kq0dy°Us[0YޯJs? uO_v:c٧j㉶~Aydqìd}/9F (<| i}k
gpqJI
aM"| _ zrJ} Lfg Q_qh)<x[i%lUv)u=^ jU[ =ߟxU%<wCYxkhEx# ryˋ;y3~dO
z>ԣn:~ oLq{*/$sd+1y 綳oǼ\| ٟ֤yq6K
yfj Qq'Wd u_ߌ ٙn0inz2SOI[ڞ,=ga$=iv ( !jŏx,r*g~I詆XC 1 j 37k\!>bRzcYrR
o$R .gk VTi2]sCކSR
gN ,nj1*{z19:9{5l&4TDDqo``s[I~܆ W-]qrٶ̞#g4K%oylם/^
6WpwЄ_sn<wJBܐV,c:qkȹ G"Bcl 2Gc .Mю% ifxP]Be9 SS e_JRʙm\3dx梢715̧y>@T{6͗УWx 9>]iI,zߋF )ƆxAj;1[#<ֆum |l'5< -(z
Ow0yȼ_8:Et"Nj ?vGKN>Oy+djSy%|E JUU- u-yZ՝'j:ڑ;L}Q6G☡^~lᩗÛ~/Fm{@VX[ Ƹ5@:c :Fø_&Du6ȭy 9Ђ
h+,YU&\ӭ$w#Ʃl:xtK`PyLaڙ iOY# 9_>GUŠ`fo
ϒ$rGdpzrG`5ǃ42My1 @YgHWwn#V8xsfkv+=hZ60YAn.UH v 9v9B'mT\
Fy!c"K_C
=+3gV >O<"f dfː1 h_\]-,D*4RQ($''MR *# AqPe/9Ϣ;¤oV^7*'%Ey/4q64G͍e4|5 G'˘Ί= ~u MT'
96PU8aW'9Z
q[ِUȀ`ϻZ4,iwش xtw:LSe6(e֊b X2CIxWFO'j@1YϦ)PM /qɊ@gT>UùN4i=(Bsyz}O1C"yj?L@%m9s^;JWC~@\ٮwi%.M6g ] IҘɡ[h0Nб*nPi\/$.X ;m/_$&<XmG:9,U t Hl
T_kIߗ8Y /-v{Iu7 _ro ;: хy/}w< 1\S4Ijk'5D^zQEw%,#|Tjn"`~ 8
/߳kk|yQϞ?"r#1_٧.5 Ma-yYz$KP&Loglܚ8|GFV$~
F{JwgCJ ](@/H!zo++ k#?f />,.oC -kk>rzJsՠTetAS3i7;|k1"8߄c1bCWqƉoӣP_bgtr]SQO Ҍjۼ3Sxإx_30WUJg賌U9XxSͧ.| <WEOMe^;g(E0_j9Z :nd#bp G1`d!9:zj&sT :/?l) 3Ymw3&~ _iOZ{ E~fΝlT6/yn7 Tjumf*>XR urF%vySis,iQy^F1wzqh+ 'y^[֟Z9U"d ;,#
o/S7]ƚ4 kJ}! ܸRu ђ6=3jf1R&6W6(tWB>u0,˧:4,HzSާi`ɏ`I=o6 :"};VtdBqY-F=P(v Լ8R^e뾝_h ?^ \}ǃbo'Mpಽ0X 8.̋ث&F,ɎKލ$+$G=|[=_)PdfhF2i{j0b #B̵rx?J~DM[#{<@J=1˫+ͷd^ZYu vTѠ-4ԡ4"5̄)c]=1
L, t3'b YEWW n[AvɋsYMNw7S?c +{>mAو
|~%V=.[r5Fq YЛK9M6<)&V{5Rឱ~J^|oFO69+KIalqwadX4po+p$,;dV ݚs> /rvX QK}P|{Q]T1 61h)ٗ-9wќ/S5V\迡`"p*Q`v2Y"din_ ?ø o_Y7u8ٺ4"b_8]*̢qo$0u yŀY\n _%ՍP? peezFf#:J#Rs
vUϤΌS%G ULЄfu]' Uu='%g?ޯr4\I^kϪ&Lwh)7kMzy JÉ_/wDۑBG4:}MWz 2;n 0L/>CE#TAB> 41 ?yyOA;HU.X `wpZKyD)nR;".8}g;!:ss
nB߿n ה˹= kC[N
X[$2B q#۟iy<I#!x )du9HLS+嚡z@ݪcNZ[uCu1V3(
`& .lN⥎G^)HKƠ+i 5ER_ io>;X_? fo08:;
p o_5(*^]vwٴ*Syf:c>ا.N B8^ "9% bBQ 1sԪf ǩ*S,cV uf
y ~.
}(xʗ.iK>|ֿӷ ^qkE\(o>o);^T w:^bkÕ\.DK Q7YսEsaz 9r9ݬ sn ig۞ l{ g}]H1B0#iV'ȟz![r?KN8?k?H.zh7}F4pP?_3 JMoߎ&n6yz ~P#}`uJ{|M ?AMe'FPxqw 45 o!oo#1 I| | ^Q$ 9h;cs3B=>ƬipG pӻbRK'ROۏ5ەa]2/IG*u)sw`ߙgwS_gvyynNe7$$W##hMglXf>R6#h<2nW
ӅwʺƺAG*OI jӹo ܞA"0D<U\\m)VgnYrC0 X)(ϲPω K^1vۋYڦdרr(QahAaEzBI+|-8^_#. S2~s$d-UH# e}?2ߑ~;7yYd S?vY(UI+kk=~RϏH(8. ejUSA )19Dsqf/i&d: '_!`{WLi3D~&1G3Lz? ڿ&v1d }1}jwI%Q2
Zx.!p:Ym5 ڤWa|/^W#I18Yy
;P߁$
Rr^o:>h 1}gUc~]Fu~Di6]'c>ܣg@!(faq~wz"ƜbBҹrA |q Y]k~5w_Q p"0%o5 E >鞌3X` `E |%%0$$)&~?Ok_*W Q^T j@W ?<KSyLF4T;h>Ad_BDȻ?tI]r #H>
՜nXm~{&hVV@tWGZ,tnA%`*(I/hϏ JϜ͝Or/#<>Ӡ]k3 Oj#ӭC(jFR!
GIV @`I ~ݾlc=
SH4 `wA5Pr˗'؝bjN"L^&5H1=i4qS1"Mpf
r՞*.늙<{unYL52 E@ǧ?=U: F!7
51.ZmxW{QXZS5a5ŏ!8/ 5Gxy" NBM|-EaQ R "K6# N OW!rW dxM V8k*sV69'S伅Ѝ9tM i("Տ E[%M@\fEnYnydhObh*XʆoF
5YNH1}1CP$DR,4z [tZY+S3iy0n .S5jN*ѱGv8e5piyd}̶dGkr"e[!pTK8SVDǃoO b߭j Ve ©&sGP](*[pMWvK'cW F@ܴyGqIKfH֫I`+ZKI$Jpdy"4l@`)s%XSr)"P+Fx$$wq|0,G֫$*}wCyy?fJT g5`$rA "?KZD@1Ioef`i ''2
GЭuPܠUqKD Ck/E BZЕ uY_JC4SFKL}H٨_ b>ݢ""uSCEd> !' J(n "3f#|`(iez0Cz. W-S-o6%%h%$ß8dy K
T5*mṬ [EI*-Bs7=-c٘Z. :8^ZJL"Wv7A(啷Ap#7_\Q=ec1`lNt єaߣei
FRFe#T G%=π::?7k7zW* VGE8 9k T ȑFz .0|*ԃ۬P|4čL٘nŊkn+5$4 UB)톆ϴU#m 7t폜Q }}U^TG-\m#; B{ *NF':H }}}.$uc!gc[v;xyg0sD8ꔺN<pNy֘vZ|q5!=Fu1h5rk u9H4|1cib .%-LM=(5>n;>ElDMVCYm*R[IT''Zcmγn^oK YSu*d`c ?dlX1eoI"L,.Q Q.~v[|SiՁ{+/<3YoSh 8¾7|ryV
us8vm#g%L 47ER|h6DBS*("VkmoÌi pknJh
Qli9'%i לa:Z` Va`lp VN8?N[Zy! cvn \Cl/**
dySukJ :d`]fJ=*i[M 4vd)ht)g_> ?oVp/$T V5JI Pbv:Ovc(%sHsXg)ᧄP|06Z%S:D
|Tt^l.oꦍKE!v+%#m'T̥t@ƬRFx($zBݖީd Cn{DqhigJȣcM0,ī,f- t8ixҩ3In
3ˡ)I
scEE;B
PM Dy%ЖX6JSxTdQrA usniẑSG@ޘlTY2<=QȼJQL>U
AMHgNT֬CVa2dD&FL ШۻB[ՃhA5psDl' SȂ6Jg1 &xkγ4G!*f%Bc gҭna^][L]@e#\绊ۦhף 4y;-:M4 WtWX%'4$ʑ=M?+T5B`:Hఝ`wݳ8ɻqԞ2XVl[Jڸ5~m\ X0c@gdF|)L*q3 ձiz?ӷl\ %sm3&*D Ċj3 ԷTNTjHĀ48C`'q w9,OCH-0s@c^ȆK^2;T]+ĝVyӥk6iK"6sg.M_Y;k=)Z;FFv&)::dߞ "ΘjH[zvΔ)ba(sع0Ʒ+Ѽna
i \ck!z٠+>@'K>S+$# ۩#j5I\["P$/lNdUR1 AH oӾtZ6 GRjO5{)ĴAtJ,ҚG^"qۊr;ΟY9qlW$hJͼSD&PeM4&h
a2s:}ߍ6%*}F>rGȷViӎZ0Hrb%)j/g2j/ߓG!P֜EN@xwAk+ΜC uT.[3G|ٹP]nSd|mD+*OAz?bx=^k=;}7ug*<7?Թ[70@_ S͙\foktdTvtPoxbX
M݄1sZդ;W
)X| q\[V=CqWz}z^M8E E ⪛謴F ˡ
G4`FaTu&Rxbr)T B`86VeEٝ э yj2D\&ULs~=(5Q*W#q*ظt=rB">^
y}؍ļ&a&ݾ Pa12fZZjLxrUZ W=k}
~R
ŊU/Ҽ`0GKG)h<|8d)@+
wW=&Tr+4HtzzN
4C^C7-\ ƅ/Gua(5Iε: )dmը[R{"4u[z%XiwB
pZ:U Ll&iȮG\géhtEw~8ezYLyYi"%p^;[#\K .V1<-{Fbgd<{Ih ubR y#=` ig:_XCl{t:4m:[N sCXl}^hKdѲh6n-M(Gg^oؠIuh2.&ެeό3]6%psj;@ʨaJPbƳ[9q]P;k9=,|O/;Ck:4Wm&Gs*ɲ}Sv!:.=#iXGI:a %%I?ԪJMZ{}e< >x֭K6)A92]}kAG-طgrY p~HN&CxO
2̤lBVRLS5q@V>z2#gs(lD斣AQݐ ZbF'uM _Euҝ0!q\m1('aHq,еQ\o%<^9}:N-7i{{CC@u.(i)@Pn4q LK7gȓpiZMD;[=2 5dnMf~ i \zW6!> ̔vn䮧ɚ$rǩT]8v odzwV;jЬa5eE."jlfʩO
ʭ1k&XTO:rP
֝%@cDFS\#b- oY dF
̮ t-sZO(
řސ)+`m5Ĩrlŗ`AQ:D8KF6 2QVh}\@wtR62?HcnH Ѱ%z PZ@ !XWIYB@{
e-_}__b6[!ר)ۂƧ<Ŋ2ޒA?,?E}nSx ? kF0vTvs`E{-.U@&(GF*V.Օ0 / 1η&6*rFLj0)_ \b2¦)8nøRlʶ ^GMakc)f:kK 1BU O/ |Gπ#
8YwsF5̣jhUU&nSm-е[0b1d \5/{ I
/(ivŹ> q\P68|
Fir`uO8bp 1LX ʵsPҌΪ p vg_{$ 3:{:T\s}Pw5xeJyup
OoPoZ{H: Q}
ghbSg_
M;A Hib*D>Sxsu֜<t6^)?́ACiT=Է
LURݗROk|9!b`gӥ *Ezb}/ܗ)βLQzfoR[CdO^F>-Fi` \f?bhE3L3DJ_Wd7B嫋 ,/щ#ZPcݥC<nG&2ͷF=&tlRc^ 潜|~V+(Kr dkc+x3~WtyL)7VwuoN=ŭ!藭9U`Tt֘KqzHZYe$7 ++21<w0Pct}D[b0˒}ï Ư6tf,8e.XB,xMb sQILFp|Eb >6HŅNn+Rf9fm%@lV덀>#a};;"ig`GvplR?FÛa-j3\Sg&biD
ESBDݚmvA"ꖆ]3R^cF+8Y㚠]T*6z9'DQr1fqx"y+\ hMZ=>ư闈[
+CY` ĽlF ɊjCI<
gޣJR]3^|4,
n5ٓ<\ӝ8B1Gcb V9 +-:d>1~D~r S.Oj̇3۠=(7d0VKX4pv{ǂs+;㺻.% ~dN%J
rX3awٓ])Ap}Ic&]j9.uB#cSێ`Lq ^yլr<
12peJWecφUz}4A8dҫA3#T"#y:YW ߃u" =#Ȳp7)plҖ
BA!J, J ̎VQN#},@iEnJKdB%n%@_|A61-: -`ƢS*X ι Q :Q]D$ YE`ُT$~~@Mɔ>YCjF =
SC4^AcDˋ 'D´ފC^[:XbOBADQKJ:,WL~=fIa%F*= c=pү桇^M ]j$(=їiGv7%#*1£ cT nF%Z2.Y"9Pӱ$-:JAh^ǵN+oC
#S BR-eL i-K"7Q: 6%V&v% 8!AGMRPS\ŲL !*&0xiN +e!0ZOdž'p{xH oF?@"0v,Y1wGX*q'*
d7q<)tRlk{2K [FZY%KN"ja>R
Sdy0X%4~ݦav@$$k5%yA[
۸aWuXH kb*pxM<ΦR&Ȋ6SjŤǰn(L|30чLF_"j9l]恣Tk K?o;NaX"f *5BL1:R;bk|,hWʊ(}=8ZѬzBx*ؤuБJ89
6Y4:W *ɥ~hHU$ X# px=pg8 "-f} >oެ#j. IޕeSN|8>*ʙ5+ڊ>Y[P+'K1 ÐrL)~td?WO/4&i(qlxJ1}JNA얐)P
ϖ cK6E˘{xp H%
ā`>0զju@nM R#juf5 Mڝ^ 6/(Z(Y\9# 2dRTT)ȒaQg3t*D8!̔XwF]U8dfDGJg\:MU(SW(Zbbx0ah_1T-9) H ,>=OHx,j&Ь[BUd7j72Ѷ y|PM2M3')<ۤK P6n\E˔qZV^ Ai'**ps!kxd$#؊Vc qx Wc ) *Aʈ&sKx2DjuVVG4N Du8L\zKl0^+L*R[XYUԃD8owR1aq+gR&
)B#D(b n>Ks`HbyO^W`M )" I($^nB
1L5|fZ,IwuØaD} # T.DS[S"Pb>|k"QqĨuezPZZ[s+1D$KnIs[ԏK_HJ9[jk T z1ǞkN(>ZLZd@̬?L])'!D'ǡTbnNBV KUSZ _wM;1 Pj }q6ڬ %\o)f?KZ 66p-}M BCz^t6X c 'd*NѩatA#O bD1Dnv0g {3͍R !3($ybj5䩐%rPKUǓq f!B[r]
b:i-
1 $Zd5Hm1r9ԥ@9% gk^X%IߡΈ7QEd"%W{N88xr[0h m^ LhɄK)_ҿoЦyP
:
fRZ( h'UДp#zp^eCFGIf$.Ba|*5D Bb!>B.NoFyQf[ ۤWjz[^! @UYӗ`1y)LPl;S#tWR,
Q=!)0_bnKsoEW|_11 ^"\(3]tћTx"3䶄mLb]C)#4' u{$A Q2.ImpGrdYL@qt·]nBR$<s}褐'# #QyA$ C26Lohw@wᲇ1 6)rrԙ o]g vA]å7 D>`]1ƱTL%˼WϝV G]D[=5h죮ۧru$t ĺf?(^x MM#:zo@KL`\Ўa%0g S!̎P1֬4 p &,\vή[`UB@E-76p_m rM~bPmPUwxל>ȈeS'z+
?NW ݡvm;W?0<K\sNr5`{'t !{p'\/, E"cȱ=b9?OkADpNV0]N S6"g¸EA'FY;̮WSl'w -v2b7v]qm SZD Z9vWjV)6R4xQgt=5~vb~՞
f>Q(aU@/ љ°%n[{0Ȭ: 4.[7.
V WzLL9Woq%Rޣ-XX|ޒaATu*w k/!!7؏DnZ-' M7MM:}7**Kx{rww$WI<o$#Rژ?h'TG%9l嚤
# +O~ V" Q,NHĔwm;[HD ͚HS $"TTϜnU TGTFϤI<+g--<Ax3XL\/t Rs O +yoaJe1łb5DHx;$lNDx5E9NRZqB)hf${1W9uFB\$У{ˢ?m8dWID1߲)ȱ!QEVl_e 8&ǽJ ŽLKܽv> B<ʥFGč5ތZ^VUJM^`-ܘZb仺D&y~ RD=GZF!.)۾S"u26qp!M,Yו&[ xq`fjXa@-)myq M @ń3K FG*"6n{KuſƗgQi( #r7!&X푖;T@ٹ69[ڪw^l r#kAޡB&HR:)8vpy
MGNʕ$pu{JNb !%;=~iZ ^Z.D?̫r&tˣ
Z<lyU)a $ =E?1@pLRYjя~q"!kwȿIQZz:=ڨھ*PG٪F7Ye,)
dHHa#̶(Rycг62QHCw_hs-G `!g 9 c
_;@tTh7*kS G[`( f¾]odkvVXxb"ytDj65{ZW9it>,OݣVfTba7u ٫I؝"R3 Q 026;Ne ?C0n+o>Āy`W#b56{Rq/eUgj1+vی6L J~eDZY̹cl*wOJzH|Tƍ,O^NHV|sCg-L XK %B[&wk
E&6
{ ֲz:m~Օ\bRt]Fe<
qO8 ŪHj!f#fNdN@)bf%/q+)=pk" Jv%|;%t о< Aڤ:I) 7J+KjpjIhLÔmBKGL?2 "Q'd"!4S r;[c*Wpzy{/"[dd{ݩJl$u<y0<|QZj6ڮf^p
M,{{K9N(8&/ӕ(Жp@LC Zi 2ӡ.y#7 ^r}
Kݓ N~AE$RTQTʊ/0u(zQ l]0FV;JLQT1H^aSΘ>ZNov~e&)iҩd־,w*2H!4D;ԌSqljU5 =>O"
ׂ}V
Nn#btI4k:\hJ}5,ʖk8cD{al@ 0wJ8OհܣIdf*;15[QO%pT_t+ 2w*GT|pE:L77h~,-HI0ith+Tl5]rԄM 7Q"F8,*^uHdG%Rs r*s7`>cMXܛ"i҂mDik_ vZPpݟqQa%ߧ jҒ`dXf5< vmg.`ˌMԃF\;
Qgg$j8цP!ʬȃdYE\rIA>(9ƨ,S
.u \J</rP¸$6^ʂt#s;Aǩ˪^[;GN[ƔFWd<CP!d &#/-bvf'[CF"%
&2u#cO#5jiP/+-,-Jlf\mllV1fɀ$z[*9Hh1oKmj%kq
Pa^˯SD2*- Zf[t_:yx5{YKc1Pڅ}.0s6Ԇ6RHi;{*c:LL1cL,Z)g+ IIIXԀX~E*RWE'I:BU}8>7 .t@qP\K[3kO5]'jT,7(k?4 scƠU Iy]j2]Eai_ae agSOv:2|}Ef]
Y+ gK;iJDF+in*[> 瞉S2Y\mə]}b27n]S!',ytm H-_YRkĹ4M`peu ywj$%^19'ZRBV2^)]Y6#!T 78 :NxH0E 'VvGK wRFC$سѫj Ǐpmpk9,imnj(AT催w3C v-F%]w{%lKT7&|
m / A)P(.{ȷS+,J>[oMiJ8s{L'KX0,RY=H HV?$ #hGCKMӺW{4pIKcn22>6;^U-]6x;SvbX=&k5MYWYh٫:W8*=^^AǫrWE .@*ͽn5#;`*]!~k^BP^abl= ~<(R2efQ*,(+a h0./!Z>TjM`32"kDۡNڐڏSSk&khRrNR_\Z9rnS3!F{0Ŷٚ۳pFl$7v0!K[`^͌KK.jcvQ¤22
ɔk*)kYҙC
6Cue!<*tоѬ>}'ٝA6meyy5inFxz\U'=IhjQm zQFV>nՇ&&h>1 RFJ:9AhhhUXaq\hT.8Y#QHc3YTYPbCm 7Jz'6+>[<;oeskv\OqiJ#
qhHF%N
XEK:l
na_ "EŨh:fMJ4lSK(bڴ9f=xQK%p#/7 M\"vkOT<\ cKcћ-y
mVtG ab3L3GgM Pncfp 2c4+)dw9FTTmh^{f.՛b.E*m`KjEQ17P)mQn 6'-~ kz) XԨeGJ6;)g.E
QX[0P5Q_$V. e%h<$c-!R1 I1#"U*jҊzb@CGNPd'&GBUl
W; +* c%`|榙@r砌H}E}$)wlk lИ.Ε ͊(olrU*AS`:
w %٢^#rӯ
S WKWhSo&73&{$;>uhU)W+diW1s /pr^IXKA1q(L]> \" =-_ɤ]VPߪ& ^ˤkzCnqMնr{
[
31!cp\_;oDC;܈t Mޟs%k,P :$ZLK J"}ݢ V@Jy.2Es<f
Á:yi!*2p BO2Sb2A %f-}-utd hq=Κܜn NU.̎
fedH6)8NR/9FevZp jH2pl 2wGG|b>Tύj`ڶ9#ZS V\YZ6m]Qo>uyz¼ӓ L]hrZ2`J_rC b0v{?<ؙsRӨ*?yޛ$M4NB;y}6p,yiǽWmxz3p,V9~Rvw:(ܣsmX)#8uAI|\Y_1ӿ7c))SEOgĵyE킭[|SGK\ѫ"Yl` 8\iw8yYv Van-6]~罁Q k-5I|IbWa *RNM =~Y6N>any~='k+p*(2щKb^P@ubge)&j]d(dI'a
}ҤE `jje 8M/T3Yy*u=m ݼ#1JJ%Y;h<g#f8fj+S{(ע@A\=*6~O<m +j[s8[
R|6ŗZT@: QT.KϧӏE_nqkLjj}i)}<tuMe߽9/-s C7Y$
5R5%bL*Ѥ hҞFvA(m/1#?NJ'*G'07R hө*(R2ą
ʁE;' :ʦ0KuJ!:eH00u%. '-#t ùNfRӗęI1RΣčNO?-jg]%('24TNc-+Fiܐb^Pڃź{(֘`26݇µfO7SaTICf>5#;Bp|[9N9~;pqv UI q uL-Qޟ,gڽs˂"?-Ff*OCea=>ie: TpI7l#t G7صybAH<8.#äx ߜ/5^0!!ػ!$&̏8Ҋ lH'SIA:?L-ظn-wϒwށ\~' .Re 4) t k!/:=6WfvuE &`єR&9. \dTԷCTU!lh nLjdwND
LM)~̛(w11_]P0KNڃfL^,=?0'C-D\"/'n:t㜄Aj(e?#(P5cR-ni*bUu\7Gθ>ib!Tm|y괴:Yv%`Gvp(>8AdO__nJ k*
Fw~Vo =:*Ѳ MB-I~4nBp/gݭiZt\DpeQ .{+SְzSFd )\*, V
ϑ7
RL=t @nYr{H9
|ئD%$iUn2CWG4}-ߧ 8m*tfrEW友uҧmeN@7RjERKQ fL~SAU_@XQun7z;*Dc ;I@Sa:T ^h5t1j˲1Q6Yh!!Y1OoԁJ3RZ*bꚥbrM7ˇg;4H4nA"0L9r,(" v$ r8I`cUY_ip{h
H|96.j3l\ㄜ0Cӹ3N4Z"teV'I%,g +Z*X*Lu"5z%u-,MioqLEژ
1j$-dq.жe$(`ݪjp9
#fQ6ܱkk\I
]9HIhqy}\DRs*NtV:NLtRxT[ sb@n 2G#b XVEJ8$y
2U]@׳S[yGJ<}#mmjVoif~Q,J1 H:^Cջs8Kt܀f⤜vvk#Zs izX' L@M'fNY30EXJPO.\kZ1@Z9M! Ic=*X&Iz@&.fxn9N" fۈ7鮆]E
ND a{1= Ϻ^됄ջV-w!(pj=w/^3TjP.4n2 ` \dl qw/jav:e}3МkSk+e
n۩R-" r"TZ
+5bd[p00\Q:z<C}ݽ{[PM$DBݹ
)DZeCҥc{^? ALX@Џ
/%^_:u22| ұf=k>̀&7:&'Isf oRJ r6Krdmqd .Z#QvqryOr npHݖ7R,;T-C,),!W ZLhҶCcC3zI58,Y5PL\RA膃n1L
(
8 tVqrM%ԷI-'B_lsF@{vZ7wuZM]@m[ kj\d?fq5n #^xt&CZ?Pa
8Ҫ7GKfV 2$p+cm -GlWAP
A&uG*m ) j5D.u%bTF S qAx瘋a\%w ZBi
(>e_K&>"~^B
Y `bS) ZSU!Yӝ߂:k$\Aò{yT"eâ@03ORֺ2seԘ\Thxq }z Ŏi]M҂yN]2bcYKБ
->8
-{K6M -tH܇,YHb}Lp $MX^Ǽ\o0^5,:?9C,$g7&V ab,< 'ӇNًyu5 )'=D Av['Vs=uÞ5g
gAHeyΆSjED@ZZf։ԟJZi@"NA|m!V=0]rI 9bYPtkvۂ!ac&-y`cRG}.-#iOq5̋2J+ f5nZJoz,XŤ&)(k!Ǻ,iٟbM~zKyRim ,> AT;0hAܻ^9Q -t# 9x`!R[ r2琌mtbՓgd%\182@yS%3v dȹRMZ; A,Pzpc ebTUR3D -rPqwCDEK*@ L
D)uyқh
KW+C9Q #0 jC0CVDDE9,Wޜ mH%1L'BVo<%bȨk[0O%P
+uÿOc ;+|X?|e0O4~>6XAӱ8=Bn-uܞŸpuLX V.^!L>0NOr i\ͺ"
4uFM
BRjSK AtLM&<0v"KzGr]i/:
W8ZbTY;$Bg-k{ tgkJW*ŤfӬ&Jw~oOp)&tD;[ f{e"
6U[GKd栈vf.9TczqAD6J
ZNcTU<B@vb 2VmϳQrJȪ.O e'W,*$h 0L+5 -!skw@OhOfL$"
Tb^BZrJuYĒ@ i9 9V`336.0;| >vzP{ 1oTi45Eٷ|Ynr'֪
4gtPASȺw"PaH4)ؒ8] Sp(Ei?yD^@jqrPLV;AꓦS:G;l[" Ew :_v$R
I^ pnjYp6o/y i
DVo0vsK*HWd`2x IX2':0*u/a72Jd!X/] X0[uYSk$G $Wlol{l ?%]=]g &Gٞr kQ8.t1;S 2|iu;)t]mv`Mu$>\;>5" =O"D}m3"9d)!)?t~@"AqՄyˤJ(!
DT@l1:POP|~J,G ߕFF"q6z.b݂߭> @FW'}DoqtQꘕ;y(DX9jJ6ɨ Y;yJ>i0E!0ND./t
Q]xf 0LO 59=,"m[S8nf,4=2 5^,.o9)GȦOѵqF>ڽ Dc_ J<G%Kwq4g5.ozCcP렳Bod!xwOoED
UbR ^>FRt$e\} ˖$#ك'9&ĦAL8wMVT(Tvk Lrv+ Ϥov|1˙|l1 nofM/W6MnW1cNvK*%0s1u >NVGqN(-=(&O[7'Wsޢꈴ 5
T-%ZSyÇ嶋XZ)jQ'vRq Vwob{`$LHpN%h*Fwi+Qn+rP4<T QE)jMVJ 2Qɱ tJm9]vKg06?\OG?lPC\Jޠb1BbXB jiGUY&sy Kr%o:B7/5KQ`ogM;w6 M&źis dB8L=խ%bl G A%\br K?Ԫjr:[-TWo3ZJ!
*bE Tb\(g|rV¬nC ^H;D柘*AaNjE/] mXVnޚI$/O9dfe](;lFS0;]3xRVABV z 푃1!-oaVEdkC*2ӫ'*Uy l. i}P˄Ź>9e7qDt}pڊ.yOXhxj G*E3P 7L=ˢL1*R&]M E٣H=Fq+U"Q4%. AQIl OIyX.\5#Jxg/Ka DGVʕ=<ي#-~^JZ+z N/P`ZP^X|.i!/\_ނ6(
w$ 1LwS\ NV]P/Tc"Ydכ
>UP%<!O/d%HK P X7KDVӯm>y)(,(O-~FJ{xWcM^ntS}pP@foaϜ
F!
f\H+B! AB?
(7>E3)Ri!0+/1iR7Gm1C $p1E3r$[D<*4oEgA2_C
$fcP%y{{K= VNs&{* Hz`víP YLJJ! h#́)wn\& ~u4jD!ƄWnK' !2\ՀrfԱ AQ AY-D2f)1@S=jiE mZ(nNA `@lY!@
_-I8fR҂v҃3{~C}-/Ӛ=3) )剥8 X*:鱓F68t,ﱃU&EVORRK0
u{ H!jQf[PS/%^ԵWN(#%˱j^T0 TsnUo:q6 N ޜL9Zz \0ҟ ȔBeG!L;!)!9C07^ǔ17z60J]0M; /:^5.K Uq]YVTԬFb4?Rxd1nb~*b?0LCXo/|T:H "ղb 8 _yZ Q.\Z5?pw0PUs"5o*2eE驴J8za̡۪(8O%ۛ^+-rSY98$@ɗMib/#b =q-dM& FtYBٝ4TEE^B @ $7Q
x }9Y*uʥաP o×aflpɛ"))p 3eAL8= K)Q }XEo5cKBy
b*sg%jTg5' ôy`Qi<1L'8cpLl(`(%bޖE&φD =0@"^ w #O> ωb j8 PD ?4AݑK.TRaa(CeARy 5 Ė٣ }lO8b:E! PŤ@Uxwϵ,@ S-?VHz L07bRǀ8ti Ow3Ҵˈ䤦YIV
XvYI.PJ/d k;PB hJS$y0
>z4AhK0oŧ{VE bIW%K 28khɘb X|07Q~,=kRdzJmeH9Z,.A[ɓ
3}N<jүL*f1< 9d9iR@J{(yTZ))= .Hjg HNHN5^*=O*7x4UAW,'@V )M0pWSqңAV 0, XY2N5x2S!SpG Z~N@<+v*^p[|&CK01n2wJZ!!>A S#%A )[ԢpwPV%wZocF52hJ= *GQ{8`2j)|H8nv26) N~T~%$LQ|gw%*Vhs[Ĺ@b3 * È^\0@|#`kXUB<O@ GO${ DJ"~t89 sJI#cHB <
4r..ݩH
iUPPIR:$'8- ԛ#'ÿ@ ,HŁ; $9j_Rp OSJ*xј~,ʼnW$hJ1wm@NiԁI .1q)1IɅw)
LhIJuD@)SZ1(#Hߪ5?
!P+l
)Yb@ `JE# %z%М A K|s,Wi~ާʞ,(3dRJVRa͜) 5K¦w@a%Tb eȃ#ѭ\{r4.pAuB u*s#q In=@at,w-q"58 {x.)ﳀűFAB (Q'C#Om`; S0<EjY.@ v߾ E#
pE XekiT@
CG>J0b*_=6JD1c JB=&v4E)M8c`dS
Zdz CHi _% ] 69y dЏ-hĽ.2 xbY@3V-2ѻT"M#i>XbMC>y%|n6bbL`l8DoٵijWbؽ M8t{0CEêieaVA#'%~UGTNIeUk6۔-Ϙ\ ,
kb`J"dǃQ e
Xc8^χG֑{)5$h% 'cM}*jR)V˺ z%Ys;{LX&kɦ
P_¸ ˸Gϲn
CrEݥގ Z(e>kWSgGՄ/V\+WjDoVdOulig+Kz2=`g D[ȍmE#S}5kn,Jb qYawΚh%v/\CTOJ"
/+Tm(N]ri9Uy,̌79xq9Ò]g9z}ދe,dzl47= ,G؝ wTYjRXJST
]z"
W|Eۊa_v6٭p<| )h θjG
LsvD/SSt6eWo,\Ϸԝ2{ۣ&!^& ٺK^݈;xrx=|kF#jU˹sb2vrHld}L99+f:|_W~fLu8նoYt_ڿ?MRtbUjyKPU,]n>p!4O] 5JlO`Ld/2\ɏ5h T65/y{܈ c҄.:-DюVo L0NI~A*VexYCb6ˢ4SYa#/W25면x)8fBƨ 8T` u,-/_@Rb i 1Zuf ,ӏ XDcc) h3Z;[ôj*TXcPb{&c@Ŧ+)ܨ
ZG~fOUӝ] P#!-f.aI[LY~)-|&!%TކMI*! lOQUڟ W *-b21^3,G 9z6[Ų3ЯH$oMk,2]3cLĽ~kL+)l(IJBSU/ a
<Hpfդ-)+mRD6x PRϒɥஏ;-)1ֲ=CB5 hTj9`cKn|udde6L,sZfWCZX~ٜ\oX3I.p"zKex Ytґ@ 'HPFD26S~r4ö `,<#? #&dcJQ[vM=51z%Ćlcp ? +Yfa+#.JϢ^$ kɮ7n ƨyqOW8*.+"5"KTڞy@Ij7C1CN?H%ԢG%=C_^Y[tH0Gj
[oņ@~<U-C0-rA||51xy֭Q&r[ ,S+79dB Y: Iq`M _]@nXVAUC$hogbW-)&`
b՛B\KtT %zlVB}%mMX 1\+iS9{|qVц `[a}<UJ5hM8cd Dw-FDdA Y̞*C'ĥT% & &,y\fxXNW !ѨU*gD̊0_#ITs , B\V Nk'n)fy*yI !2R2}ʋYZi#дQЕoCBF d}83pWQԄ3#7-
~Y0@m㬡G>Afiڗ&0I( aY`Ðd <{G*ͧm$JU lle"4K8>|!`L] 0&|;zjGܳkR XqH vcKHv_UnV @kkwbOpYm9vzBĕa;E( V4l_CJ7(QWT6>BAl+y>jڍGvE`ΗCZ~h $-BH#Zy9YN/UE "Օ~.R1RJh 7TTMk |B2 ˣ>,BM}}BVasC@W jL8ɩ>' `JcT\iѠƔ#Uu+70|3sQL+m| iZsvΰU+&O-dOSی 9 Y {{*&BLKv$,8
t; aLw{ܐ+xk=}h{ r%>v&ޭ>d<kLxXc\-T=ӁA?H9]ޑgG sP.>}sѵ]YYU6ȨGˡ$ҧ:VQz,+Dc Ӎl|Z ,e=xGn]Cg!Cl#&۔:IZq([ XXo]0~{fkW>Bx8Ur'a:#9
.ws
GQnkj8κrJ
n-'1cxx&6N D u wXbEqi릴9WtSRl\T 4TJ `2:5&Je+-KMKՄm.&[Ĥ͘T0}>feJy͂Q< ²ʶ%D]}gڜvZɨa jy.Cf%@bczMqi]Yj\v1M.'im|FE)ϟƉtlՇp5qSGf]EuyqhZ[oQHDڞEDXBU)5,sIB;AJ6ύ_uMNuOl% AjMã:{+i820H*l%>}ɣ|$T]Y+V*_t~0|.)s8}RhWagZj) U{8p.*[YCWEv 1G´eV_e?d ID%?!0 v!9 f$蓡
B,<w[^aGzo]S2I"y:1.]r+rUjH>Q >冃ƄFRf =nVӵC fR)}СU /lё2gޭ;bon Sbq4,f o9;OqJ}G̺ࣳFMsopKd,OX=c !%A/X1(`*RBc:t¼M_tQDckh ȬE|*ә}u>%
Lufm2+dgVZr+"\)Xt%{1sVˏjаa=1`pgf) !$K3Ak8j>R6P"b tu d)jUkѴAɩ&Rt
/BY`5lnPm\
35R)-^NQ.jjXeêb#cУxi4u HZ~:p"]2#vpS5ܤ
sjs]Q 1DTyt%F4- 2 &\o:T qRǍΦ=fC-2UZs+Rptd]BFspʡ(x ^BM-ģI,N圹-b#sXtU_ﲜ[ݧ5ĝTJ؋ WhQw&A& 3<TXtq cOkM`|L7
/#2I> WcĪl! 9VX"NK=qz9HQ=$(/ j@ 5͔_F ǂu,SC<Nr^.tGS1^[K@ш$Ya篴hGdY78xaI'q-'dOHP* *4/ C^!`AQ./hPƃ rVM K$/qjquYԫc6h SâzK h7 w-jfIG%8۴lvm)ƼBkN@U`qg`//,B]wKf 0jP- D"1[+yًRcenaFƽH9ZkPCSōU {xT Fcy'27% 8&N@ǴbY6O28 j J> g5@T p p%60ѡ=,OlgFM GAl3YGLe&su@UɅ4 ~I?Vd8@0^86 &Z>v9iD|X"MU5ԓvbOkNJ$
^~z J}d % q2%YLq X#>0* dyYh)vveYgto' K_4NIlj:Z`^\C%eXBa_5+Ġl )Tw*t=ʱyssR=IZ["S\+ε*\ %K| 8IfR]N U)%JLl QmCb,%ּ*v\
Nmb^Qoes{Td6+(Rnyګ=912i:íMHLk(Iw#Z1ӞEILLB@xj[֔Gv<eHk`y[eF<!\>lB[zԦxeګ6 g}h
0&6vy.l9@u/ iDvn0Rv嵲 "v
"~7l~!,_jW9}eJP DiR'aJJ/Q3&W٧DbKC?Ζ euw0}5 k(#Our$NC?K u&/FU)W4 3_$I2ѶWs&B`WF}_!8 x&l佇wԣJ pK1s3
M<a$oV Q9I8VVHZ%ț\ Z< )[}蚫_ч7Qê#K`ӞfN
; ώOMt^bEltS,)NEI6%cxSv+w x=GDoXf0% l3.V]0b03 O F}lpH&\ajP% X%^M%^v5+N܌DDDEIDDd"y$'7h h{`e)I~W%"_Խ)"a':?2~V;$
S^r%CJe# ?Jk_1sݮ^XGߙ?WKGԼ'k
=xa}}z M7֠>ߚ͉t_;d
t F0{NVk@z(T1 )7Bd9=7z_LpcBxosi0_*8YT@ҹNxA<}m zP& S5Jx?Ooڙ$__ ?!tBJ(Tψ۽}u,tF'kSm6ʀx -m&zhW 5z"xJ)&~|2Mg*/5MCf/9.ā_E_ z#VԈxeDG~ *Ś~+jU1է/ g#oR'zQ6s@- WF+MxN<E_oW@ﴭ ]*5Qx tRC<z5K}-9<;$UqCM7>j\g?ղ6 }4[B!&-y~q_u Y
N}4X "qq NFs֞dgl>کyޛn_f+>jzQ ?.π߅'2*(v?may/uc 52
Q [~sޟi:vKFj>|d2|_O p/Y D~4̯%ўNH;<*$e QYIƋitVO R?e_ V/H?g/O/NH w맻zLHhկ̲GcZYNZ+^CdV/T<3zmѧ/G~xz#Oe(BGX|=[kx{
SیJj=~_?OOӿf܌gBl1:~'c=?XpPcD/ݟEIeYSY]T*U* Tט[y ^y^@%^W/o~q Y
4"_&>3Gd2EP9ddx 0" K$$ A /-x `- ] ]B ժByPdJ"=#0q 2;I]w:f&3ٻ/F̪ fWu]Xxi]̙O3O L`ytG<<^c{v۪.,$$Ÿ*=uK[,:})ߥűǬY%$+D ƦD;qm>~1Ta?$"BvȬFVEDVcH=
,L@O0*jm?Cګ
;ʎhQ #PjDqQŚ0fV^p
`5)qW^"Bz&ƀ\ )j<#lQ7*!RS0KHTbߢ [
y$ǗV9IۀճȆJ=$ƒS \;e<%"é]QxG; dWiv3j'*nIk>[?}70-;^\q88yܩI}6%\ GŌrS1ܩsgV+죁VgȪL\KP{lmmZ n=ݺ$ǡțF&PՙgՂ!8y&*a:>&pf0Ksі[ߘR
Qzq28P>\bFߐ e1^dSbbԙ\Q#I'S p*S+SRid iZ !ѱwt;uTD_.Kɣ=A "z6P&QM2pa͵x6&gj3j5[i['5~ ܩ& <p6$2`TO1Wsd4#ib5K{6w`vpcDbSTp4ylD*BlפS5zR@ ߥŇW4gsV+bـ)f(sQ,e+!7 _wx(9zS* eH;-܆
1ׇÙx*Lu{D9%e y5gԶK$1a=y 4PP 8 Hȇas\BI7Y=3pDWAu䍟urδ1?e5Ǧc%ﳍƉ_U;ab4+Hf9ztC̦đl#[s]N2JU՟Mr:,NV]cf!95bFN l." $BlL<ܶ%%BYM5NeZo,?Q6U|h z<Lh ReYw\j`Eb#(^FWWhDROG~FTRyVnNupCK'g)]muNSƭ:):0B\=' 2[ SϝИ
yv橝f\=EIuFv$/ځA ՙ$hƭˠCvmbNf*:]*@C!e*oȺԌJTvyrI$کg c ?V~쬫l>nQQ$Ge9: `0 0` `0 0 TOlt AC픈' d[D8
Nx
u@ ԧn`vCDZbSpeu4<a&D8<ٳjTwk$)]6%c#KZb˖ύᏘ:=`/ގddA툘b38}֬. ;B1\M=-ߛE>`.&)<'9$VK
@I;,x@Vxؤr8 })tPp3E;,hdϭm Шz
!PfHI^cRȄT 6$dZ=w( F!qlT H
i2y4Q yֵRPB| AUY]Q`@\A}pl:+xUzi+CNE TH5hOR8 C2[pҡ *ltI'YMlq!ҧ4;/ފ+g=ɂ{g"| 9i(?a pN;,'#ֻ =}$UAh}!+To A804{,*D|pՅ=G Zl96-?:*7z1d`"zAU"*J: ՠ9Z[+x" D
; ÇK8 ;}>xxe A'M|ArMv,%L
Nȣ4IOh <qfZgɎ
9y̅Fw
'd
CI?ݍ ZjŪ_f )!H *_ʞ:e{"} 9b8j? Z<
Q9! [W Kɗ 6`wa^y`xJ2 2LW^.,g5HiD7)@7S;Z/J(
>>.I[enf~T3nx IW*l\=e_c3[1B3u}LXEz
Qi$44!&N4fsaTQ
H=DWwcŞk2~@s̔_*i^A)&sFJT}&iY7loϭU oN"KGn~5;d9YtB=^xݺ\ff ҞO}T՜yL\3w/{w"6 sNMUMCk,$nѾQIT\x)*n r%# F(]G/;V<ԄTo⹝*R'eĸ|~ƣU Dc78Y.ElԟLto(`*Uć8v5q2 d<} Ƨ ? Sܳh]MN)S4n!w?픙uEI
{$`(])?HK rIMX,Ƞ^`gOcmV
nw=? QX˥s?ۍ;~%_=U/}}x<fh}$X[v1wFN?+#BS,ǽnE__h2A0k|oD `ەzf > ͇JQ8_X Kv83}8LQ:O>EPKᤗբ,8F<f'_٬sX =\GtS糴|: ec>,#t5Iiq pDuWpѴE @lF K"[g;U$w; 3Xڑ_*E9zgkYVDi M .[F]jG >xN(K&_yۘ@b h+ܽܗKqEEtl|d=^OtЂ&\9?Rf:v[,Gt 4]-L@2^ +d;.}how7zȧWݴW;x!w'3#rtn} 3S\ C\>Su1xx<;[>xUnw]m¥Zvݖஸ*Ikcw *O Һ">F{Ɛ ^(9=[/L]'Ww
R!dYn}m[%MV<['E`Q똙NlMez~ܵs.!~ZZNgXPxJς2IUlu7q֚Uo[d||%O^eḆ;+=rںy@ s+h9H=^َ][Μ9q ;e} XnWGuL5^{tZCֳ;[%KՖ%8Wϙzre
_K;ZժMuRꤽ?Τkm6 >
Vg
*j<>;WtW*#>x̉!ɶ/OѴܭ1q ]M{WM}ke5+n%Q뛙'T'/cJ;Jx!.7L_0}b
qޕ[eo<uo`QΛ''XW11& yyu +K 0` `0 0` (:O݆kQoa-hݳw鍢
!v5 <> x ?u5wl:/Hy'MNրưQD.#Ko@]r:44&1@i Pߤ "
̘- @[$|!B>%ذ , j[$z;I梨w 7UOFJïi E
Ge]@sR+` OBN^<Ik80uDj "\_" $TDP>M&#T[ `!h
4I.[\u !kByoQbnn _bQQ xY%Uš\ǔXRx,E<."ԣRZ%o(r[NPO 1(Ud81Fcu(uDs]CU̮=J1 al4J5P[*q$lx<
&]wWQyY
8ӓ$D E#RZW u'"ɧ /iLG0Vʩ.B: *
I4U`"`: ;.怤Ȉ
}P:;P_]/9RuMB鏲 4 ҫG N-u"̗_IH~Z MC=u~ɚ1D%R 8=ai 2mXt+LBjLC7 *4]fBXiiV7>6]j-$+aNVEƲ c݄UT+
G9_q|s Za +j :F} )!$Q(5$iR uNj<=x8N
ڭSnM{XK6xԊ[?&Lrj ~N%AS@kZ/k[ - d0l} $`J0 $^ʂH A`{^S}/r%mm@UL5_[-`T
R _)1܂c/nA<{_炬 AJ %P`݂DxyV*定0㽭`.㷖Ɛ "VӬ |YX5jÂ]Mr $}I5yg %k,|W Ծ ԡF|O/ >z= x4U> $A A`HW <XI<
*З_mAf{Z.ުX2ێr .} fѹ{#qAqo֠O T MAd &zj&b j' &jR'Џ+rUk0= Z!['_ZA`HEHl+
n.\A`HE+
v /ر&;,&ԙ62K^3+$Do%:{?+?A4"U0ȯ(uo^&(7 .A*0\+`{H_BQ
(0VgX$"_DBQ
k0VgX$ᢱ_6BQ
0VgY$"_VBQ
0VgY$_dvBQ
4߫37WPTE,-Q*8\E*j hou&^7 .4 mA #e3 Wf ?!=U$K4V aYR"Ƶ
Ewj[ )M44M~?M4 ! 0 gkHpyJ"s, qYm,n7Q|,,wvT勲 iz;Nٶe]M:5J'9Ǒo 8ުms㻭P!k0ks%[qG]&S&Io￢ e
QnVU5{%=n*d'jKX: C~X[] n~Vcv/! I Y⮦۴V,-p +f2_
nx,hLB "5D ꁼI
3{EiF"sĕTV n+*哤TQԓV{if"/Xlq (l] ;ړ| *qa½6,MWG$?RB!}>uEX%)8-̽/+vΡ^[ b ;J^]Rަ"pIuk4Oq +|yU]`m5U f9|Z 5 u900z0o!C_n>
x
\Rj壱%i} y%;/PC`
sU R[yЊ!^`lL!אRSnCxD4ۯ`E/K[<c=Z3DQC,V<Z=
GvR2oO7C%Oi16pt0YEkw-kB
E/T&-uLi]uVs^u
ˀO7C&ITۅ
?$GV < DO7Cl%+N[.`*BESu§&~Ӣ %!v
Mn!":BF}AAߡeBH}[fAЭh@`6Py`DRX+_ٻj'YJACK} [% .BDʁ3`E˷bLܨQZKWUzO'ZxZt$umI[} !aYn"1bDS|i8 0 "ojl0 H;wq\KYc (ҲL<g]J-v C%0(!# 0䭙8bCY$3 -x)CU5rXK&ݚ} ј
=-&9,~Lr_X`pD:FҶRA _yɇ0٢ ,5Z{ˠ,=%]e"N i XEm,,h
Q-Ma0>AAO|
$x$Mnx+ Bm,Be2NSMEY0Q1Uv9m%ܰny9ڢ Gbm(OZ4sw-<v l"s ̎xN].\ʽRtxM,E]$IL76RQylk
Eg/& F c} 'Oi ^&ag1 |/`Dʨ
D,U!ztD 6^y>
Qx,->ý&D+q%z}el( xJW&3ӡl,(" R`v`D( ,fuD2}[1K)LRM!fgƈ"/ c6\|#6&WY;DHw/-Ӱc4'wŢ:)\-2ic(e=3|F+ΞJC gGRބRAQs?B%O7AL|gq˦α'+ɁU(]rqe~ !YϲbՈdV4J40>ͤS2د~ !aYFȵS da(Ogqe-eٲM"b◀!99;(}LeO ښX?E}Ue(4w-2B/7AHכI= IWsX<cSSx s? Qx.zeiy;
n,pZ 'O7AO|
&F6'~^=^ KqEY3֏SԤbK˝$y`D:/[ WzTu˵fgn(<KK:~יc ((9">弱\e`
= U82/d͊W{RlM*ṡf Qz0r;evUZN/2 "sXRE҄DMp,P%4p:DW 19P r%ۜ犀 $x]| <A="KLR6khCDz9M*<˥4vYV]}8m~ !bY9',]u-/I WZME~Xy>j<
v f2X8D(ۚ|-'[$Ϝ8hY6&.0E&7<$*E}) ^Yםg0 ݐ/)aa.31-m$9&ت"/P͞P3 ~=s#]FYК~ ,sԁio*^%Q^^4vAM|~Q֪!f.d7WҾ?`Q }U .>mƑu
Ù^eZ~(xlJ ^]|xS9sS.DԀhBWJ~ 9(0OsH2Oy`N=3>+mE_S3[쟸_~/hq;2o{`D`'vquAk}5e8oA̹cXQC˯c%jxIi1ed7-ؕ8%Մ95g.7{ngPd?M|Qxp2ň 3f/;%su t SuL1ײյAO jvWNޓkM?kݕ ؖ!鋊'=27Y=4Fr
bZ#Î }l} wO [MMzYG[mf;rtOUrˏ m!Ψ3{hw7.]=kYMOGhGӳ} u$}nn w{p IG0 4nze7pesυZ%*h#Gs2.ʲGm'6Y U WKgk;ਜ਼u
N8k
6 Wێjq +{6e۱[1Cdȶ zCoFzb P&ׅݏ=8n^K3g۵.ۋ<r/϶Vs 8=K weyg mz־zV
5
CTðrXѨ\37p.{/gڢ!43ϥ #6>: *N%ܥ&=wpN`g}X1Z+GzK5:}ƭrZgW}{.tAd] uvp15U9/Qym=q:nXrAE&njP3рNK
B뉽P{GWGZ["0f7 N6dhX<]qIeTfu.En5y>;w2N wl5E1ĵ?0 EK [h(g9i<mzeu`>ˎvusg1ѬE7HB`XDv
n> 4=}zXh-[WٴYp|0Qǿ!;t%瞱=&g¤ Xjcr L\[W-x kxļ,25Cn+݃uwc(ZlDKΦ^9U|o. =LעziγB^*4Xð>Ų6kz˨Bݺk66Z4@1j=Ȳ %l\ڢ5:qL3usFUzopnMki8o7b مp 4yd2i "Stw= z w N<+'# C|RBeޅcAEN;$ |L,W*>qa'|+Wമϙ{l~<81 uŽGaZ&5a `Ǔ2d EQ0uϝz!싃tb8.|qzpAX{m쇁x6]໎ x
` ڰMu YNN`]o P[N
;7F']:A~:2Ʃ΄Y}g=2
MػmFNPN`7}?v l&B;^ PqO
y\.
ַ! -|ze:? zG=w3Z7,7 |!B Ǹ&7A Ǜv , 7}m'_;A%hXC o `>gCSvPt{C@FnƊv,h3F;A 4
}!6@OzcN $ / ` hp8Ьķzsw{9t9gs7C{GLW'PZV<DP3(CBA! FyẊ AdV?2(וvC°ˍ
\BU
3Jq>!5&g J ՁK˃BvoɟB>BNv6" ˆ\rnC kbx9W C|+y++߹%ZK-3)[Mg'5N. YCVL !B5
C8!?pDŽGB$=NoCMg>Kb;ŬzCq!r_{`p݅Ca!cAd2r
.0D"ʡCH\^}}zL@ҟ /Ci|\`GRc8>Mkqק& ~pO\ʐg3#O?YMP<? iJ{NY??Y q 8$i9?8Oʐgfu Y~;?~O\$O=24<{ts9I ݠE'BzR/j5LublU~p*d\MEukujÚ5҃｜5<#(=p=:һNmM&hm`] eU$VtV7eY{=s5`YWz ݫv
zP@+#*pp+;LەcA?(k osYVӕ LS*6zBb>C@fCz]
=]v%
ڻ @ЮD18S vT;{ºÖNg}iYZj
,K6S,b_8fǒ36s{ v&i;t'wIzC6ڣu$hX鍀FdȌuRdבrCM4/=5 ck_\ t,=-ET5Mt7Kx*œ>
ycҽ3!+.fHNwZ~x erUAz{滤7 Eսe-ټXI8aסx 9KF =(㚠$f݂p
rtF GQzl"'m $bxR)*e - iKf6b1,tt*U\9#W}_CKlɠdVƊW+ eE/"궘e IuXTV6_b ߪ9RWQ S+<*Up;rCs}3b $DAReϘ3jd/4G!Q* XaR:&C͠yrĸ*;GI3h_'tSX`p"3<6uqF?m,e: j
FIc 1B[Zm5ff۾b~Ae+
#0Ua
ׁAv6*睉EMzp#Bj}GD289R*%3,/̰y B? SШnBRgd$q
,;n#OppHV8Jx8-:3pT#Bl8C}i#Kl5;Hˆux$ GJ)#eO11r Sl5thLr+$V50Y 0 ) Taé`ES|"YA( &xRgJ$je`ZohOFCNč"&R#1pQDT*$bF8M;#c8$@EКPDK1"D^(!QCېhJH4wi FQOC"1Qbf F\ QCT*bDTĨ-F4 D*T(F QMFM 5F'1FȄDQHB*cDAFQ4$0FŐh
_H4-$
F&$R8:B' :
b X*rJᠣVX(
ٴP
G@jB QL@*JQ/t b$_ tBK/抗%BK/:R}T=Vo0S'8G'PFEy\DD8F h ~e<[n=wfyI0O7'q
!PJ)PBP
(JERI$8̍s|o7oUIUYP@1 bՊN 5h n >
[^aIA;¾YG8p3EZx.O]Sf8(wyUftg1MH@wjFU\[ 3$4>!a2* "vql3IΙ] ~:\h`ıUC4{(4]YA}4GWbv0xW9.`@Lpn2kh B @>jCY
A'
{)0
J'wU<h&ڄư9?TÈT p1vDzp)fKe%$ z+K)@5f% `@;쥅iɆܷ ֑ Yqϟ3ZM=^ .atjF w୵[> _%BqA)VpGN \9U@;S!
ޮM"ॆu% SE°Z d: MӰQ , QS- # k0It4T0L)(<6{<3t(#c]jIVӪIZV=AԜ/!z& 0hlHNY 1ge
6LM?B`+ - ZoZ.+tc-h #*]E-3jhnw
LS5.
160 F ,w ;{)X҆l(骪# e} &F+$#@VNS'
`I0#ߚD׀ṮN6?!w:\Ih>cᗥ{qedž!L kkV?^rGy=zV *&_~pQY @=ۡ9? `պ̶fxR'[eXrƽal o," .'!pl~^ ˆ'аUld0J+* ݣcqݘ'
ARCX@4TOd}yT070b
u ֏iWzx41ʂ{F*03ltmSZLԄ~qLOna[DwT|P
Q?Bp@˂KL̐b{dJjޚQ@EbT 1s
WڕݔJŻހ0tz0PNulƃ~X@% ;Sl${-,ѽRX ܇uol4P~n};:2fgUlrO*%'7A)r( 'a0ԴBǪ|/MjJ
p; t|-,ER
8cm7omwGGyS!1CMO6|zS`카aHK ]1ק{}BWG .XV
?e#%,-|[wҜ
*+%' mVtFPBs 0{{<͆#ڋ.Eh%۠/~ #)00hN6 tllA=ønJn\{cKSFg
?
י5 Rv6`a{P4-+TfFR6E[ N܅\iV U|) T =(gJ?\ȱu9hOـr C urҾ{Ofiءߜ;y36Kw{#= /ِ -ChX`%,l٥%Z-<ilcЎ
1%Zi
uO61 T%
c/wK
Tp3S[Cp{UC76bAC 'r{<&΄^O Vr0l{*ͤi]*8SB4pOP6n{6F '0@ɒ
FSKRLj
NmW}C 5gs YյT?..nROX)}Tk^# 6gUfj*Wk[ YykBw˅/+"):]i`t\xHC$n<h1[@\L~%c+JL
%Ȅ'I1 O\l#Dm[_k)W]2> R0ϋ]b1)Z Z1_`p+&L%ו滴f2>a$;blvS|E~"+%"}u/I_H<ɮ,e|}[$~%%b?OZ)9;1͛'K츛| &ȗJMjr,Pr[.kEZV6U!HDkh-zϙk(z%kv.XŷHpQjew %ڐ^+&c0iKƌi[]ec?J{, ",I\WFJ%@J."/S.roNuUpǜm3VXG0 "e]z̋m720NAG<+q|v/+4s_sr<Ͱ!:hᡣlНoU 4/~_nsQa?:226KVƹ0XgWӍ<خR)$<eY<ٝNM]ޝNtff h5Z' kd0-%I+3dVݮ%ݩћYhػydk>鍜UgdUR9wS¨zsKJ{&-Aݬ5Y]/nΔn`p%f1{| ݄L>Us; t!,z3|fb-VJ4#,z)Eq`QBy}Zx;o5^T:fN#pu%̈oZb@%3qLM}+c뢹Y"qîZ
"CՐK_%+ͮG[[5(^k{JF Y Y^EiLń+ \抔MlWlv~O:Bwi{G2wݻe3|שLg\[jӶw{rb3LyL- _SSC H,Dsȋ.w"5H2*<{c;q=+~aMSѧ%"s<y+_9Q}ǴRw'/udj?Ĺ o3E>×1լWwݹ<W/i{%X&7.cup!U# J\$+Zo_,AN۞ ux[]=j9EG [h~ sKkdnv<uf6\%2\t6zҬ$,뚵ᗐnh|TO;|>C}*5|OOCOuT,n˰E,Lu#(}զn6>@, EAг=ދP{_wzla|np-T--^^xeZnxQR'[l^ucY ۂn[|/Mλk .V'(^iɲE65 Sk/HWm]z.-`r+" :[ZY ƓcHb+ B2.q|-HzNf<mcθF)6 hp7;K^CkXEpW"?OeDR:_V>Nܐ2% Z=htW,WT~\ac `sA$j 9K٣J!T%JD7#\\F51E-Z(JEev"e%QcQbhLHS:e ]RK=Pg $ğ9*E u D9PH;n
`K|:=H=I=`$ ۯ1
F$mNy"ĵ"C""KGGVryDT8|mD,ZHLDDؙcDrMH@I'W:h'IL-E/C(H)QJv}E%dw "PLNiiIJ/M%w4KiJR"4[f*":W%
9$mVQ`fTO"|6xlU9+i TԴhH&PS3ۡN-5'X{xW݇<2I6Eԇ&y"dRdF $C59
tV_5/Y:p=<Et* V6#٘}xdbK!
xh2=8<+K<JPX _īm+JFHbDW띟j.ƬJC<3^;
5#
] F H).y(-YBGm::X|tع -y
\XXNY ʢ7$
I 㯌S5t$O$[aRUy_]F 㕌Z_e<t|>E/i' ;b8Kb1+E*bW 'oJIY3mϖi}E{F{om3.ݠ( }q zq!$DAU^]Z
u/ty x vsW9 >yqdAtR?~a=/i<7}Up|O+7_]xQLPn of+^J^Q}k7`1YOn1E|up?twca $^\ BJ`wy =TؔCT 5u;um|s'vY @ ( \ > v$ c P k v 0 j