Networking Dns Windows Dns 2022

Continued Support

• All DNS Policies features from Server 2016 remain fully supported
• All zone types, scavenging, and PowerShell management unchanged

Version Boundaries

Features NOT in Server 2022 (introduced in 2025):

• Server-side DoH -- DNS Server role does not serve DNS over HTTPS
• The DNS Server still only listens on UDP/TCP port 53

Features available in 2022:

• DNS Policies and Zone Scopes (from 2016)
• DNSSEC signing
• Full PowerShell DnsServer module
• AD-integrated zones with all replication scopes

Common Pitfalls

1. Confusing client DoH with server DoH -- Server 2022 DNS Server does NOT serve DoH. Only the Windows DNS Client can USE DoH resolvers. Server-side DoH requires Server 2025.
2. Azure Arc DNS assumes connectivity -- Azure Arc integration requires outbound HTTPS connectivity to Azure. Verify firewall rules for Arc management endpoints.

Reference Files

• ../references/architecture.md -- AD-integrated zones, DNS policies, DNSSEC
• ../references/best-practices.md -- Scavenging, forwarders, split-brain, hardening