Your comment: "Stopping this service will result in the inability for the computer to resolve names to IP addresses." is true, however, why would I want my computer to do the resolving? Then, I am subject to cache-poisoning attacks and the like. I consistently disable this service (in my NON-Active Directory environment, I might add) so that my clients let the DNS server do its job and resolve the addresses. My workstation doesn't have to do the resolving. Let the DNS server do it instead. It's probably better at it and more secure than my workstation. I think that Microsoft's description is a little misleading, because it leads you do believe that DNS addresses will not be able to be resolved, which is not true.