Windows DNS Server: Security Settings

Do a DNS test at:
DNS Stuff


You will get warnings of various kinds.  A couple of important fixes are:

Disable Version Query

dnscmd /config /EnableVersionQuery  0




Disable Recursion

dnscmd  /Config /NoRecursion 1