This is default and expected behavior, but if there are any DCs that have any problems, and the client resolved the SOA to that DC, it may not accept the update.ġ0. Keep in mind with AD integrated zones the SOA rotates among the DCs because of the multimaster feature. If the SOA is not available or resolvable, it won't register. The client will "look" for the SOA of the zone when it attempts registration.
If the zone is single label name, such as 'domain' instead of the proper minimal format of ',' ',' etc, it will NOT update.ĩ. If the DNS server is multihomed and not configured properly to work with multihoming, it may cause problems with Dynamic Updates.Ĩ. For any non-Windows statically configured machine, it must support the DNS Dynamic Updates feature and the zone configured to allow Secure and Unsecure updates.ħ. For non-joined domain DHCP clients, you can configure DHCP to update in lieu of the client updating into a Secure Only zone.Ħ. If statically configured and not joined to the domain, the client can't update if the zone is set to Secure Only.Ĭ. It must be joined to the domain in order to authenticate using Kerberos to update.ī. If the machine's DNS is statically configured: For AD Integrated Zones and Secure Only Updates:Ī. The Zone must be configured to allow updates.ĥ. If using DHCP Option 015 (Connection Specific Suffix), it must match the zone name.Ĥ. For non-joined machines, it must be manually configured or scripted.ģ. The Primary DNS Suffix on the machine MUST match the zone name in DNS.ī. DHCP Option 006 MUST only be the internal DNS server(s) you want to use, otherwise if using an ISP's DNS or your router, expect undesired results.Ģ. The machine's DNS entries in the NIC, must be ONLY configured to use the internal DNS servers that host the zone. For workgroups, it's a little different and requires additional work, as indicated below. Keep in mind, for the most part it automatically works "out of the box" without much administrative overhead. I know I'mchiming in a little late, but I just thought to offer some info about how all this works.ĪD & Dynamic DNS Registration Rules of engagement.
0 kommentar(er)
