Windows DNS

The Windows DNS (V4 R1) has 29 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

29STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V4 · R1

CurrentPublished Fri Jan 22 2016

WINS lookups is not prohibited on a Windows 2000 DNS server.

Windows DNS

Assessment Title

Rule Text

WINS lookups is not prohibited on a Windows 2000 DNS server.

Description

Discussion Text

Integration of WINS and Windows 2000 DNS leaves Windows 2000 DNS open to all the vulnerabilities of WINS, including the ability to update records without authentication.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-4505

Rule

SV-4505r1_rule

Severity

high

Rule Version

DNS0825

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

The reviewer will validate the "Use WINS forward lookup" is not checked on the "WINS" tab on the properties dialog of each zone.

If WINS is integrated on a Windows 2000 DNS server, then this is a finding.

Implementation Procedure

Fix Text

The SA should disable any integration between DNS and WINS as soon as it feasible to do so.  If WINS is required for legacy applications, then DNS clients will need to be reconfigured to use WINS rather than DNS for NetBIOS name resolution.  The SA should uncheck Use WINS forward lookup on the WINS tab on the properties dialog of each zone.

STIG check 29 of 29 in the Windows DNS STIG checklist

← Previous · V-4503Forwarders on an authoritative Windows 2000/2003 DNS server are not disabled.