Re: DNS zone for Domain on Server in another Domain.

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Sezgin Rafed (anonymous_at_anonymous.com)
Date: 01/14/05 

Date: Fri, 14 Jan 2005 11:13:14 +0200

I have another question:

Where are the settings, which determine the Computers allowed to
register/update their DNS Records ?
I want to check the permissions related to Computers belonging to the
trusted Domain.

Regards.

"Ulf B. Simon-Weidner [MVP]" <nospam2-ulf@usw-consulting.com> wrote in
message news:eQXH6dY9EHA.2568@TK2MSFTNGP10.phx.gbl...
> "Sezgin Rafed" <anonymous@anonymous.com> wrote in message
> news:anonymous@anonymous.com:
> > Hi everyone,
> >
> > The primary zone for a Windows 2000 domain(DOM1) resides on a DNS
> > Server(DNS1) which is a member of another domain(DOM2). There is a
> > two-way
> > external trust between DOM1 and DOM2.
> > The DC's and most workstations in DOM1 have trouble dynamically
> > registering
> > their IP addresses(I suspect it is a security issue - may be due to
> > inadequate settings.)
> >
> > Which settings should I check out ?
> > What should I do to solve the problem ?
> >
>
> Hello Sezgin,
>
> The permissions which should be enough are mentioned in the following
> message:
>
http://groups-beta.google.com/group/microsoft.public.windows.server.dns/msg/a3e3dbd24722b280
>
> You could create your own group which includes the DHCP-Server, the
> servers and all clients and allow set that group in the DNS-Zones
> security.
> I haven't tested that, but it should work. So if you are going do go
> that way I'd apprechiate feedback.
>
> --
> Gruesse - Sincerely,
>
> Ulf B. Simon-Weidner
>
> MVP-Book "Windows XP - Die Expertentipps": http://tinyurl.com/44zcz
> Weblog: http://msmvps.org/UlfBSimonWeidner
> WebSite: http://www.windowsserverfaq.org

Relevant Pages

  • Re: Elevated Privileges
    ... > had installed these computers. ... > set the power options back to Always On with his account, ... >>> Administrator account and changed the settings, ...
    (microsoft.public.windows.group_policy)
  • Re: cant override screen saver policy
    ... Yes, I figured out that using loopback processing was the answer (Ok, I ... > Settings in the User Configuration part of a GPO always apply to User ... > users log on to specific computers, then enable Loopback processing in a GPO ...
    (microsoft.public.win2000.group_policy)
  • Re: cant override screen saver policy
    ... > Settings in the User Configuration part of a GPO always apply to User ... > users log on to specific computers, then enable Loopback processing in a GPO ... >> don't get this policy setting. ...
    (microsoft.public.win2000.group_policy)
  • Re: Computer vs. User configuration
    ... It is not that you can not configure a Group Policy with settings enabled ... configuration settings have no computers to apply them to and they will not ...
    (microsoft.public.windows.group_policy)
  • Re: cant override screen saver policy
    ... Settings in the User Configuration part of a GPO always apply to User ... Accounts, not Computer Accounts, so any User Configuration settings you want ... but only when a user logs on at the computers that GPO ...
    (microsoft.public.win2000.group_policy)