Cache locking is a new security feature available with Windows Server® 2008
R2 that allows you to control whether or not information in the DNS cache can be
overwritten. You can protect the cache from cache poisoning attacks with it.
More info:
http://technet.microsoft.com/de-de/library/ee683892(v=ws.10).aspx
See how to change it in this video: