| DisplayName | Description | ID | Context | Target | Type | Property | Value | Category | Enforced |
| Override to enabled Windows DNS Server Signed Zone discovery for Windows Server 2016 and 1709+ | This override enabled this discovery for all Windows Server 2016 and 1709+ | Microsoft.Windows.Server.DNS.10.0.Discovery.Enable.Override | Microsoft.Windows.Server.DNS.Server.10.0.Group | Microsoft.Windows.Server.DNS.Zone.IsSignedProperty.Discovery | DiscoveryPropertyOverride | Enabled | true | | False |
| Override to enabled DNS Trust Point discovery for all Signed Zones Group Members for Windows Server 2016 and 1709+ | This override enabled this discovery for all Signed Zones Group Members for Windows Server 2016 and 1709+ | Microsoft.Windows.Server.DNS.10.0.Discovery.TrustPoint.Enable.Override | Microsoft.Windows.Server.DNS.Server.10.0.Group | Microsoft.Windows.Server.DNS.TrustPoint.Discovery | DiscoveryPropertyOverride | Enabled | true | | False |
| Override to enabled Windows DNS Server Signed Zone discovery for Windows Server 2012 R2 | This override enabled this discovery for all Windows Server 2012 R2 | Microsoft.Windows.Server.DNS.2012R2.Discovery.Enable.Override | Microsoft.Windows.Server.DNS.Server.2012R2.Group | Microsoft.Windows.Server.DNS.Zone.IsSignedProperty.Discovery | DiscoveryPropertyOverride | Enabled | true | | False |
| Override to enabled DNS Trust Point discovery for all Signed Zones Group Members | This override enabled this discovery for all Signed Zones Group Members | Microsoft.Windows.Server.DNS.2012R2.Discovery.TrustPoint.Enable.Override | Microsoft.Windows.Server.DNS.Server.2012R2.Group | Microsoft.Windows.Server.DNS.TrustPoint.Discovery | DiscoveryPropertyOverride | Enabled | true | | False |