if you know all you can do with a default AD install, you won't even bother with dns poisoning.