deny dynamic DNS

techman1 · External Since: Oct 13, 2004 Posts: 1

Is there a way to deny a specific device from dynaically registering in DNS.
We have dhcp registering machines on behalf of the client but a VPN server we
don't manage is registering in DNS also. Can we stop that regisration in DNS
without touching the RAS box ? Is a windows 2003 ras box.

Herb Martin · External Since: Nov 03, 2003 Posts: 1951

"techman" <techman.RemoveThis@discussions.microsoft.com> wrote in message
news:175490BF-5E90-49DD-8E2F-6F80D8741253@microsoft.com...
> Is there a way to deny a specific device from dynaically registering in
DNS.
> We have dhcp registering machines on behalf of the client but a VPN server
we
> don't manage is registering in DNS also. Can we stop that regisration in
DNS
> without touching the RAS box ? Is a windows 2003 ras box.

If you implement "secure dynamic updates only" you can probably
arrange this -- perhaps trivially.

"Secure dynamic updates only" require that you use a DC as an
AD Integrated primary.

This will prevent all non-domain/forest machines from registering
since authentication is required for that (technically it defeats it
for all domains machines not trusted by the DC-DNS server domain,
and for for all non-domain machines.)

If the VPN server is actually a Windows VPN server IN the domain
you will have to work harder -- perhaps putting in a dummy record
OR a "proper record" for the device in question and using a specific
account (perhaps one of the AD editors or a program to do this.)

--
Herb Martin

"techman" <techman.RemoveThis@discussions.microsoft.com> wrote in message
news:175490BF-5E90-49DD-8E2F-6F80D8741253@microsoft.com...
> Is there a way to deny a specific device from dynaically registering in
DNS.
> We have dhcp registering machines on behalf of the client but a VPN server
we
> don't manage is registering in DNS also. Can we stop that regisration in
DNS
> without touching the RAS box ? Is a windows 2003 ras box.

Ace Fekay MVP · External Since: Apr 13, 2004 Posts: 1226

In news:175490BF-5E90-49DD-8E2F-6F80D8741253@microsoft.com,
techman <techman.DeleteThis@discussions.microsoft.com> made a post then I commented
below
> Is there a way to deny a specific device from dynaically registering
> in DNS. We have dhcp registering machines on behalf of the client but
> a VPN server we don't manage is registering in DNS also. Can we stop
> that regisration in DNS without touching the RAS box ? Is a windows
> 2003 ras box.

One way is to use a 3rd party tool, such as QIP or MetaIP.

--
Regards,
Ace

Please direct all replies ONLY to the Microsoft public newsgroups
so all can benefit.

This posting is provided "AS-IS" with no warranties or guarantees
and confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
Microsoft Windows MVP - Windows Server - Directory Services

Security Is Like An Onion, It Has Layers
HAM AND EGGS: A day's work for a chicken;
A lifetime commitment for a pig.
--
=================================