Re: XP clients not updating DNS via DHCP

Kevin,
It was a DC with DNS, when I demoted it to a member server, I stopped the
DNS server service and changed DNS server settings on all my dhcp servers to
only point to the one dns server I have left running which is (MS-SVR - a
win2k (dc) it is ad integrated). I hope this helps. I noticed something
interesting. I setup a pc on the same subnet with the DNS server. I get an ip
address with all the right settings. when I do a nslookup -da ipaddress of
pc, I got a list of three reverse entries, only one of which was the correct
pc name. if I do a nslookup -da pcname of pc, I get an IP address of some
other pc. I guess I am really confused as to how removing one dns server (I
had two, now have 1) would make it so my dhcp servers stop updating dns
correctly.

Really beginning to worry, (should I panic yet?)
Robert

"Kevin D. Goodknecht Sr. [MVP]" wrote:

Robert-Avon-Schools wrote:
Kevin,
I should have mentioned that each of these server is in it's own
subnet, providing DHCP services for thier respective subnet. To
answer your question, the forward zone and the reverse zones are not
being updated. on my HS_SVR1 box (Win2k and previous DC that was
demoted), there is no security option. I have added it to the
authorized dhcp list. any other suggestions?

Could you clear up some confusion for me?
Is HS_SVR1 a DNS server?
If it is a demoted DC, it cannot have AD integrated zones and therefore no
security tab and no security on its zones. If it has the zone, is it a
secondary zone?
If it is a secondary zone it can only send updates to the master using the
MNAME record and it does not have permission to make the update.
If it is a DHCP server, even if it is Authorized as a DHCP server. DHCP
Authorization only authorizes it to assign addresses in the domain, and does
not give it permission to update DNS.

This is why Win2k3 added the feature for DHCP to authenticate its
permissions to update DNS. Win2k used the DNSUpdateProxy group for this.

I would still recommend DHCP be moved to Win2k3 so it can be configured to
authenticate with DNS.


--
Best regards,
Kevin D. Goodknecht Sr. [MVP]
Hope This Helps
===================================
When responding to posts, please "Reply to Group"
via your newsreader so that others may learn and
benefit from your issue, to respond directly to
me remove the nospam. from my email address.
===================================
http://www.lonestaramerica.com/
http://support.wftx.us/
https://secure.lsaol.com/
===================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
===================================
Keep a back up of your OE settings and folders
with OEBackup:
http://www.oehelp.com/OEBackup/Default.aspx
===================================



.

Relevant Pages
Loading