Move the GlobalBlocklist to the ADS
Everytime you set up a new DC with DNS (integrated DNS Zones) you have to remember to clear the GlobalBlocklist in the Registry (when using wpad and isatap). If you set up new DC everytime a new OS is live, you have to remember for this every ~ 3 years. Please move the GlobalBlocklist to a Paramter in the integrated zones, so that every DNS Server with this zone get a real "Global" Blocklist. Or, at least, make the Blocklist visible in the mmc. Would make the search for the misconfiguration a lot faster.