persistence-info.github.io

View on GitHub

ServerLevelPluginDll

Location:

HKLM\SYSTEM\CurrentControlSet\Services\DNS\Parameters

Classification:

Criteria Value
Permissions Admin1
Security context System
Persistence type Registry
Code type DLL
Launch type Automatic
Impact Non-destructive
OS Version Windows Server
Dependencies Additional components required2
Toolset Scriptable

Description:

ServerLevelPluginDll: An absolute pathname of a dynamic link library that the DNS server can use to resolve unknown names, or an empty string to remove or disable the previously selected DLL.

References:

Credits:

See also:

Remarks:

  1. DNSAdmins membership required 

  2. DNS Server role must be installed