4.10.5. DNS server

Windows DNS server (dns.exe process) runs one RPC service, listening on the following endpoints:

Y:\>ifids -p ncalrpc -e DNSSERVERLPC serveur
Interfaces: 1
  50abc2a4-574d-40b3-9d66-ee4fd5fba076 v5.0

Y:\>ifids -p ncacn_np -e \pipe\dnsserver \\.
Interfaces: 1
  50abc2a4-574d-40b3-9d66-ee4fd5fba076 v5.0

Y:\>ifids -p ncacn_ip_tcp -e 3009 127.0.0.1
Interfaces: 1
  50abc2a4-574d-40b3-9d66-ee4fd5fba076 v5.0

It is possible to configure the RPC transports of the RPC service run by the DNS Server, using the RpcProtocol registry value, documented in Microsoft DNS Server Registry Parameters, Part 1 of 3:

Key: HKLM\SYSTEM\CCS\Services\DNS\Parameters\
Value: RpcProtocol (REG_DWORD)
Default value: 0xFFFFFFFF (all protocols enabled)

Table 4.34. DnsServer operations

InterfaceOperation numberOperation name
50abc2a4-574d-40b3-9d66-ee4fd5fba076 v5.0: DnsServer  
 0x00DnssrvOperation
 0x01DnssrvQuery
 0x02DnssrvComplexOperation
 0x03DnssrvEnumRecords
 0x04DnssrvUpdateRecord
> Windows XP and Windows Server 20030x05DnssrvOperation2
-0x06DnssrvQuery2
-0x07DnssrvComplexOperation2
-0x08DnssrvEnumRecords2
-0x09DnssrvUpdateRecord2