Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

When compared to more traditional DNS name servers, what are the benefits / drawbacks of using a Windows 2008 R2 as a public ns record for a company.

What limitations, or security issues would I encounter?

Does the answer change if the in-house skillset is limited only to Windows based products?

share|improve this question
up vote 2 down vote accepted

I think you summed up the benefit pretty well. You have to play in the ball-field that you are comfortable with. Windows 2008 R2 can support DNSSEC and it is a relatively good server platform.

I'm not sure if I would go that direction, but I cannot say personally that it would be a bad direction to go. The bigger question is does your in-house staff have the expertise to deploy this solution and keep it secure and available. I would think you are going to stage this before you go production, why not put this side by side against some of the other options you are weighing? What other platforms are you thinking about serving DNS?

DNSSEC Deployment Guide

EDIT : Added URL for Windows DNSSEC Deployments

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.