1. Home
  2. Server Administration
  3. Securing Windows Server 2003

11.4 Summary

This chapter is an overview of the security features found in DHCP and DNS on Windows Server 2003. It is not a reference for the operations and technologies behind either DHCP or DNS. You should now be familiar with the basic lack of security in DHCP. Although there are ways to help buttress the security of a DHCP network, the protocol itself simply isn't secure. If this presents an issue that must be addressed, you must address it by finding another IP addressing solution.

DNS, as we've seen, is a name resolution scheme that was designed without security. Unlike with DHCP, there have been significant inroads in appending security to this scheme. There are many ways to help provide additional security on the DNS database. Although some of them are configured by default, all require planning before implementation. And DNS does require periodic manual auditing to ensure that the configuration is correct and that no cache pollution is occurring.



    		Securing Windows Server 2003
    		Preface
    		Chapter 1. Introduction to Windows Server 2003 Security
    		Chapter 2. Basics of Computer Security
    		Chapter 3. Physical Security
    		Chapter 4. File System Security
    		Chapter 5. Group Policy and Security Templates
    		Chapter 6. Running Secure Code
    		Chapter 7. Authentication
    		Chapter 8. IP Security
    		Chapter 9. Certificates and Public Key Infrastructure
    		Chapter 10. Smart Card Technology
    		Chapter 11. DHCP and DNS Security
    		11.1 DHCP
    		11.2 DNS
    		11.3 DNS and DHCP Together
    		11.4 Summary
    		Chapter 12. Internet Information Services Security
    		Chapter 13. Active Directory Security
    		Chapter 14. Remote Access Security
    		Chapter 15. Auditing and Ongoing Security
    		Appendix A. Sending Secure Email
    		Colophon