DNS Server

This page's changes and edits · All guidance changes

Microsoft's edit · 15 May 2025 11:26 UTC

Freshness and editorial pass of dns-overview.md

Microsoft's commit message in MicrosoftDocs/windowsserverdocs · commit ec59e7b · +28 −8 lines · also on GitHub

11 ---

22 title: Domain Name System (DNS) in Windows and Windows Server

3 −description: Learn about the DNS protocol, essential for Windows networks and Active Directory operations for mapping computer names to IP addresses.

3 +description: Discover the role of DNS in Windows Server, from Active Directory integration to hosting public lookup zones, ensuring efficient name resolution.

44 ms.topic: overview

55 ms.author: roharwoo

66 author: robinharwood

7 −ms.date: 01/23/2025

7 +ms.date: 05/15/2025

8 +ai-usage: ai-assisted

89 #customer intent: As a network administrator, I want to learn about how DNS is used in Windows networks and Active Directory operations, so that I can understand how to configure and manage DNS in my organization.

910 ---

1011

1112 # What is Domain Name System (DNS)?

1213

13 −DNS is an industry-standard protocol providing computer name-to-IP address mapping and name resolution services to computers and users. DNS is the default name resolution service used in Windows networks. DNS is part of the TCP/IP protocol suite and all TCP/IP network connections are by default configured with the IP address of at least one DNS server in order to perform name resolution on the network.

14 +DNS is an industry-standard protocol that maps computer names to IP addresses, enabling name resolution for computers and users. In Windows networks, DNS is the default name resolution service. As part of the TCP/IP protocol suite, all network connections are configured with the IP address of at least one DNS server to ensure seamless name resolution.

1415

1516 ## Using DNS in Windows and Windows Server

1617

17 −In Windows Server, DNS is a server role that you can install by using Server Manager or Windows PowerShell commands. If you are installing a new Active Directory forest and domain, DNS is automatically installed with Active Directory as the Global Catalogue server for the forest and domain.

18 +In Windows Server, DNS is a server role that can be installed using Server Manager or PowerShell commands. When setting up a new Active Directory forest and domain, DNS is automatically installed with Active Directory.

1819

19 −Typically, Windows Server DNS is deployed in support of Active Directory Domain Services (AD DS). Active Directory Domain Services (AD DS) uses DNS as its domain controller location mechanism. When any of the principal Active Directory operations is performed, such as authentication, updating, or searching, computers use DNS to locate Active Directory domain controllers. In addition, domain controllers use DNS to locate each other.

20 +DNS is essential for Active Directory Domain Services (AD DS), serving as the domain controller location mechanism for operations like authentication, updates, and searches. Domain controllers also use DNS to locate each other. Domain Controllers also use DNS to locate each other. The DNS server is responsible for storing and replicating the DNS zones that contain the names and IP addresses of all computers in the domain. This allows clients to resolve names to IP addresses and find domain controllers.

2021

21 −Windows Server DNS is also commonly deployed without Active Directory as a standard DNS solution. Using Windows Server DNS to host an organization's public lookup zones is one example of this usage.

22 +Windows Server DNS can function as a standalone DNS solution without Active Directory, such as hosting public lookup zones for an organization.

2223

23 −The DNS Client service is included in all client and server versions of the Windows operating system, and is running by default upon operating system installation. When you configure a TCP/IP network connection with the IP address of a DNS server, the DNS Client queries the DNS server to discover domain controllers, and to resolve computer names to IP addresses. For example, when a network user with an Active Directory user account logs in to an Active Directory domain, the DNS Client service queries the DNS server to locate a domain controller for the Active Directory domain. When the DNS server responds to the query and provides the domain controller's IP address to the client, the client contacts the domain controller and the authentication process can begin.

24 +The DNS Client service is included in all client and server versions of the Windows operating system. The service runs by default after the operating system is installed. When you configure a TCP/IP network connection with the IP address of a DNS server, the DNS Client queries the DNS server to perform two key tasks:

2425

26 +- It discovers domain controllers.

27 +

28 +- It resolves computer names to IP addresses.

29 +

30 +For example, when a network user with an Active Directory user account logs in to an Active Directory domain, the DNS Client service queries the DNS server to locate a domain controller for the domain. Once the DNS server responds with the domain controller's IP address, the client contacts the domain controller to begin the authentication process.

31 +

2532 The Windows Server DNS Server and DNS Client services use the DNS protocol that is included in the TCP/IP protocol suite. DNS is part of the application layer of the TCP/IP reference model, as shown in the following illustration.

2633

2734 :::image type="content" source="../media/dns-overview/dns_in_tcpip.jpg" alt-text="Diagram illustrating DNS within the TCP/IP model, showing how DNS fits into different layers and protocols of TCP/IP.":::

2835

36 +## DNS Server features

37 +

38 +Windows Server DNS offers features that enhance functionality and performance in Windows environments. Some of the key features include:

39 +

40 +- **Active Directory integration**: Secure updates and replication of DNS data.

41 +- **Dynamic updates**: Automatic registration and updates of client DNS records.

42 +- **DNSSEC**: Ensures data integrity and authenticity, preventing attacks like cache poisoning.

43 +- **Forwarding and conditional forwarding**: Efficiently resolves names outside the local network by forwarding queries.

44 +- **Caching**: Improves performance and reduces network traffic by storing query results.

45 +- **Monitoring and logging**: Tracks DNS activity and aids in troubleshooting.

46 +- **DNS policies**: Configures DNS behavior based on criteria like client IP or time of day.

47 +- **Anycast**: Provides redundancy and load balancing by sharing the same IP across multiple DNS servers.

48 +

2949 ## Get started

3050

31 −Get started with DNS in Windows Server using the [Quickstart: Install and configure DNS Server on Windows Server](quickstart-install-configure-dns-server.md).

51 +Ready to dive in? Follow the [Quickstart: Install and configure DNS Server on Windows Server](quickstart-install-configure-dns-server.md) to set up DNS in your environment.

Microsoft's Markdown source from MicrosoftDocs/windowsserverdocs, © Microsoft Corporation, under CC BY 4.0. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 09:39 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.