Protocol Examples Global Policy Configuration Messages The following is an example of Name Resolution Policy global options to query for both IPv4 and IPv6, always allow fallback to LLMNR and NetBIOS, and to enable Name Resolution Policy behavior only when not physically connected to the corporate network. Key: SOFTWARE\Policies\Microsoft\Windows NT\DNSClient Value: "DirectAccessQueryOrder" Type: REG_DWORD Size: 32 bits. Data: 00000001 Value: "DnsSecureNameQueryFallback" Type: REG_DWORD Size: 32 bits. Data: 00000001 Value: "EnableDAForAllNetworks" Type: REG_DWORD Size: 32 bits. Data: 00000000 Name Resolution Policy Messages The following are examples of individual Name Resolution Policy entries specifying DNSSEC, DirectAccess, and both. DirectAccess The following is an example of a Name Resolution Policy entry to apply DirectAccess for names under the directaccess.example.com domain. The policy specifies the DNS servers to query and requires IPsec with medium encryption but no CA restriction or proxy. Key: SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DnsPolicyConfig\{Rule GUID} Value: "Version" Type: REG_DWORD Size: 32 bits. Data: 00000001 Value: "Name" Type: REG_MULTI_SZ.
Protocol Examples Global Policy Configuration Messages The following is an example of Name Resolution Policy global options to query for both IPv4 and IPv6, always allow fallback to LLMNR and NetBIOS, and to enable Name Resolution Policy behavior only when not physically connected to the corporate network. Key: SOFTWARE\Policies\Microsoft\Windows NT\DNSClient Value: "DirectAccessQueryOrder" Type: REG_DWORD Size: 32 bits. Data: 00000001 Value: "DnsSecureNameQueryFallback" Type: REG_DWORD Size: 32 bits. Data: 00000001 Value: "EnableDAForAllNetworks" Type: REG_DWORD Size: 32 bits. Data: 00000000 Name Resolution Policy Messages The following are examples of individual Name Resolution Policy entries specifying DNSSEC, DirectAccess, and both. DirectAccess The following is an example of a Name Resolution Policy entry to apply DirectAccess for names under the directaccess.example.com domain. The policy specifies the DNS servers to query and requires IPsec with medium encryption but no CA restriction or proxy. Key: SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\DnsPolicyConfig\{Rule GUID} Value: "Version" Type: REG_DWORD Size: 32 bits. Data: 00000001 Value: "Name" Type: REG_MULTI_SZ.
%5BMS-GPNRPT%5D-150630.docx