When you scan a Microsoft DNS server, you see the following error

Error executing the command 'Get-DnsServerTrustPoint'. Failed to enumerate the trust points from the input server servername.


This can occur when the EnableDnsSec setting has been changed using the Set-DnsServerSetting PowerShell cmdlet, but the DNS server service has not been restarted after making the change.


Restart the DNS server service.