Checklist Summary:

This Microsoft Windows 2008 Domain Name System (DNS) STIG is published as a tool to secure Microsoft Windows 2008 DNS implementations. This STIG will be used for all Windows 2008/2008 R2 DNS servers, whether Active Directory integrated, authoritative file-backed DNS zones, a hybrid of both, or as a recursive caching server. This STIG should also be used for Windows 2008 DNS servers being used as a secondary name server for zones whose master authoritative server is non-Windows.

Checklist Role:

• Server Operating System

Known Issues:

Not Provided

Target Audience:

This document is a requirement for all DoD-administered systems and all systems connected to DoD networks. These requirements are designed to assist Security Managers (SMs), Information Assurance Managers (IAMs), IAOs, and System Administrators (SAs) with configuring and maintaining security controls. This guidance supports DoD system design, development, implementation, and certification and accreditation (C&A) efforts.

Target Operational Environment:

• Managed
• Specialized Security-Limited Functionality (SSLF)

Testing Information:

Not Provided

Regulatory Compliance:

DoD Directive (DoDD) 8500.1 DoD Directive (DoDD) 8500.2

Comments/Warnings/Miscellaneous:

Comments or proposed revisions to this document should be sent via e-mail to the following address: disa.letterkenny.FSO.mbx.stig-customer-support-mailbox@mail.mil. DISA Field Security Operations (FSO) will coordinate all change requests with the relevant DoD organizations before inclusion in this document.

Disclaimer:

Not Provided

Product Support:

Comments or proposed revisions to this document should be sent via e-mail to the following address: disa.letterkenny.FSO.mbx.stig-customer-support-mailbox@mail.mil. DISA Field Security Operations (FSO) will coordinate all change requests with the relevant DoD organizations before inclusion in this document.

Point of Contact:

disa.letterkenny.FSO.mbx.stig-customer-support-mailbox@mail.mil

Sponsor:

Not Provided

Licensing:

Not Provided

Change History:

moved to FINAL - 9/21/16
Updated to Version 1, Release 2 - 01/27/2017
corrected error
Updated to FINAL - 03/20/2017
corrected authority 5/18/2017

Dependency/Requirements:

URL	Description

References:

Reference URL	Description

NIST checklist record last modified on 05/18/2017