ServerLevelPluginDll

Location:

HKLM\SYSTEM\CurrentControlSet\Services\DNS\Parameters

Classification:

Criteria	Value
Permissions	Admin1
Security context	System
Persistence type	Registry
Code type	DLL
Launch type	Automatic
Impact	Non-destructive
OS Version	Windows Server
Dependencies	Additional components required2
Toolset	Scriptable

Description:

ServerLevelPluginDll: An absolute pathname of a dynamic link library that the DNS server can use to resolve unknown names, or an empty string to remove or disable the previously selected DLL.

References:

• https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-dnsp/c9d38538-8827-44e6-aa5e-022a016ed723
• https://adsecurity.org/?p=4064
• Sample open-source code

Credits:

See also:

Remarks:

1. DNSAdmins membership required ↩

2. DNS Server role must be installed ↩