[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

244625

 
 

909

 
 

193379

 
 

277

Paid content will be excluded from the download.


Download | Alert*
OVAL

Update Top Level Domain Zones

ID: oval:org.secpod.oval:def:19157Date: (C)2014-05-29   (M)2023-07-04
Class: COMPLIANCEFamily: windows




The Update Top Level Domain Zones machine setting should be configured correctly. Specifies whether the computers to which this setting is applied may send dynamic updates to the zones named with a single label name, also known as top-level domain zones, for example, "com". By default, a DNS client configured to perform dynamic DNS update sends dynamic updates to the DNS zone that is authoritative for its DNS resource records, unless the authoritative zone is a top-level domain and root zone. If this setting is enabled, computers to which this policy is applied send dynamic updates to any zone that is authoritative for the resource records that the computer needs to update, except the root zone. If this setting is disabled, computers to which this policy is applied do not send dynamic updates to the root and/or top-level domain zones that are authoritative for the resource records that the computer needs to update. If this setting is not configured, it is not applied to any computers, and computers use their local configuration. Fix: (1) GPO: Computer Configuration\Administrative Templates\Network\DNS Client\Update Top Level Domain Zones (2) KEY: HKLM\Software\Policies\Microsoft\Windows NT\DNSClient\UpdateTopLevelDomainZones

Platform:
Microsoft Windows Server 2008 R2
Reference:
CCE-11244-1
CPE    1
cpe:/o:microsoft:windows_server_2008:r2
CCE    1
CCE-11244-1
XCCDF    1
xccdf_org.secpod_benchmark_general_Windows_Server_2008_R2

© SecPod Technologies