6 Appendix A: Product Behavior

  • Article

The information in this specification is applicable to the following Microsoft products or supplemental software. References to product versions include updates to those products.

  • Windows 7 operating system

  • Windows Server 2008 R2 operating system

  • Windows 8 operating system

  • Windows Server 2012 operating system

  • Windows 8.1 operating system

  • Windows Server 2012 R2 operating system

  • Windows 10 operating system

  • Windows Server 2016 operating system

  • Windows Server operating system

  • Windows Server 2019 operating system

  • Windows Server 2022 operating system

  • Windows 11 operating system

  • Windows Server 2025 operating system

Exceptions, if any, are noted in this section. If an update version, service pack or Knowledge Base (KB) number appears with a product name, the behavior changed in that update. The new behavior also applies to subsequent updates unless otherwise specified. If a product edition appears with the product version, behavior is different in that product edition.

Unless otherwise specified, any statement of optional behavior in this specification that is prescribed using the terms "SHOULD" or "SHOULD NOT" implies product behavior in accordance with the SHOULD or SHOULD NOT prescription. Unless otherwise specified, the term "MAY" implies that the product does not follow the prescription.

<1> Section 2.2.1.1: In the presence of both keys, the System\CurrentControlSet\services\Dnscache\Parameters key is ignored.

<2> Section 2.2.1.2: In the presence of both keys, the System\CurrentControlSet\services\Dnscache\Parameters key is ignored.

<3> Section 2.2.1.3: In the presence of both keys, the System\CurrentControlSet\services\Dnscache\Parameters key is ignored.

<4> Section 2.2.2.1: The Name key specification is Software\Policies\Microsoft\Windows NT\DNSClient\DnsPolicyConfig\{Name}. In the presence of both specified keys, Windows ignores the System\CurrentControlSet\services\Dnscache\Parameters key.

<5> Section 2.2.2.2: The Config Options key specification is Software\Policies\Microsoft\Windows NT\DNSClient\DnsPolicyConfig\{Name}. Note that in the presence of both specified keys, Windows ignores the System\CurrentControlSet\services\Dnscache\Parameters key.

<6> Section 2.2.2.3: The Version key specification is Software\Policies\Microsoft\Windows NT\DNSClient\DnsPolicyConfig\{Name}. Note that in the presence of both specified keys, Windows ignores the System\CurrentControlSet\services\Dnscache\Parameters key.

<7> Section 2.2.2.4: The DNSSEC Query IPsec Encryption key specification is Software\Policies\Microsoft\Windows NT\DNSClient\DnsPolicyConfig\{Name}. Note that in the presence of both specified keys, Windows ignores the System\CurrentControlSet\services\Dnscache\Parameters key.

<8> Section 2.2.2.5: The DNSSEC Query IPsec Required key specification is Software\Policies\Microsoft\Windows NT\DNSClient\DnsPolicyConfig\{Name}. Note that in the presence of both specified keys, Windows ignores the System\CurrentControlSet\services\Dnscache\Parameters key.

<9> Section 2.2.2.6: The DNSSEC Validation Required key specification is Software\Policies\Microsoft\Windows NT\DNSClient\DnsPolicyConfig\{Name}. Note that in the presence of both specified keys, Windows ignores the System\CurrentControlSet\services\Dnscache\Parameters key.

<10> Section 2.2.2.7: The IPsec CA Restriction key specification is Software\Policies\Microsoft\Windows NT\DNSClient\DnsPolicyConfig\{Name}. Note that in the presence of both specified keys, Windows ignores the System\CurrentControlSet\services\Dnscache\Parameters key.

<11> Section 2.2.2.8: The DirectAccess DNS Servers key specification is Software\Policies\Microsoft\Windows NT\DNSClient\DnsPolicyConfig\{Name}. Note that in the presence of both specified keys, Windows ignores the System\CurrentControlSet\services\Dnscache\Parameters key.

<12> Section 2.2.2.9: The DirectAccess Proxy Name key specification is Software\Policies\Microsoft\Windows NT\DNSClient\DnsPolicyConfig\{Name}. Note that in the presence of both specified keys, Windows ignores the System\CurrentControlSet\services\Dnscache\Parameters key.

<13> Section 2.2.2.10: The DirectAccess Proxy Type key specification is Software\Policies\Microsoft\Windows NT\DNSClient\DnsPolicyConfig\{Name}. Note that in the presence of both specified keys, Windows ignores the System\CurrentControlSet\services\Dnscache\Parameters key.

<14> Section 2.2.2.11: The DirectAccess Query IPsec Encryption key specification is Software\Policies\Microsoft\Windows NT\DNSClient\DnsPolicyConfig\{Name}. Note that in the presence of both specified keys, Windows ignores the System\CurrentControlSet\services\Dnscache\Parameters key.

<15> Section 2.2.2.12: The DirectAccess Query IPsec Required key specification is Software\Policies\Microsoft\Windows NT\DNSClient\DnsPolicyConfig\{Name}. Note that in the presence of both specified keys, Windows ignores the System\CurrentControlSet\services\Dnscache\Parameters key.

<16> Section 2.2.2.13: In the presence of both specified keys, Windows ignores the System\CurrentControlSet\services\Dnscache\Parameters key.

<17> Section 2.2.2.13: This property is ignored on Windows 7 and Windows Server 2008 R2.

<18> Section 2.2.2.14: In the presence of both specified keys, Windows ignores the System\CurrentControlSet\services\Dnscache\Parameters key.

<19> Section 2.2.2.14: This property is ignored on Windows 7 and Windows Server 2008 R2.

<20> Section 2.2.2.15: This property is ignored on Windows 7, Windows Server 2008 R2, Windows 8, and Windows Server 2012.

<21> Section 2.2.2.16: This property is ignored on Windows 7, Windows Server 2008 R2, Windows 8, and Windows Server 2012.

<22> Section 2.2.2.17: This property is ignored on Windows 7, Windows Server 2008 R2, Windows 8, and Windows Server 2012.

<23> Section 3.1.4: Windows administrative tools verify the validity of the objects as defined in section 2.2 before writing them to the remote store through Group Policy: Registry Extension Encoding.