You need to include the asterisk (*) to get complete pattern matching, or else you are not disallowing anything but domain root plus query string [example.com?utm...). I'd probably go with just this much:
With regard to the redirect, it's going to to depend on whether your site uses any query strings at all that you DO want indexed. But even more it's going to depend on your server. The question is better to ask in either our Apache [webmasterworld.com] or Windows IIS [webmasterworld.com] forums.