Windows DNS Server 2016 and 1709+ Server Level Query Resolution Policy

Summary

A Policy determines the resolution of queries based on criteria that you specify in the Policy. You can create Policies for query resolution at either the Server Level or the Zone Level. Server Level Policies apply on every query that comes to the DNS Server. Zone Level Policies apply only on the queries that can be resolved from a Zone hosted on the DNS Server. Server Level Policies apply either on the incoming queries or on the recursive outgoing queries. On the incoming queries, Server Level Policies can only DENY or IGNORE. The most common use for Server Level Policies is to implement blocked or safe lists.