| Author |
Message |
Marlon Brown
Guest
|
 Posted:
Sun Jan 02, 2005 11:20 am Post subject:
Question on DNS "Allow only Secure Updates" |
|
|
Can I use Secure Updates if:
a) I have Macintosh clients from various versions (v7.1 to OSX)
b) I have some WinXP/Win2000 clients that are *not* joined to the domain;
Do machines unjoined to domain are able to update records on DNS when
"secure updates" is configured ?
Win2003 AD, AD Integrated, |
|
| Back to top |
|
 |
Kevin D. Goodknecht Sr. [
Guest
|
| Posted:
Sun Jan 02, 2005 12:59 pm Post subject:
Re: Question on DNS "Allow only Secure Updates" |
|
|
In news:OjrWMrI8EHA.1396@tk2msftngp13.phx.gbl,
Marlon Brown <marlon_brownj@hotmail.com> commented
Then Kevin replied below:
| Quote: | Can I use Secure Updates if:
a) I have Macintosh clients from various versions (v7.1
to OSX)
b) I have some WinXP/Win2000 clients that are *not*
joined to the domain; Do machines unjoined to domain are
able to update records on DNS when "secure updates" is
configured ?
Win2003 AD, AD Integrated,
|
Not if you expect these machines to update DNS, in fact I'm not sure if the
Macs can update DNS anyway. You can use secure updates if a Win2k member
server DHCP is updating DNS. Although the "Secure" update is somewhat of a
misnomer and is not so secure since any client getting an address from the
DHCP server will be updating DNS. For example my son's Xbox gets an address
from my DHCP and is being registered in DNS in a "Secure" zone.
--
Best regards,
Kevin D4 Dad Goodknecht Sr. [MVP]
Hope This Helps
===================================
When responding to posts, please "Reply to Group"
via your newsreader so that others may learn and
benefit from your issue, to respond directly to
me remove the nospam. from my email address.
===================================
http://www.lonestaramerica.com/
===================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
===================================
Keep a back up of your OE settings and folders
with OEBackup:
http://www.oehelp.com/OEBackup/Default.aspx
=================================== |
|
| Back to top |
|
|
Herb Martin
Guest
|
| Posted:
Sun Jan 02, 2005 3:13 pm Post subject:
Re: Question on DNS "Allow only Secure Updates" |
|
|
"Marlon Brown" <marlon_brownj@hotmail.com> wrote in message
news:OjrWMrI8EHA.1396@tk2msftngp13.phx.gbl...
| Quote: | Can I use Secure Updates if:
a) I have Macintosh clients from various versions (v7.1 to OSX)
|
Probably not. (Maybe...depends....)
Certainly the Macintosh machines are NOT going
to be domain computer and will therefore not be
able to update themselves.
IF you can give out their IP addresses (even reserved
addresses), then you (domain) DHCP server can
register for them.
OR if you can do without those machines being registered
or registered manually (with permanent addresses) then
you are fine.
Recognize that people used Macintoshes with non-dynamic
DNS for years.
| Quote: | b) I have some WinXP/Win2000 clients that are *not* joined to the domain;
Do machines unjoined to domain are able to update records on DNS when
"secure updates" is configured ?
|
No, of course not. Join them to the domain or
create another domain (in the forest or with
explicit trust) to trust them for registration.
Or, follow the DHCP or manual advice above.
| Quote: | Win2003 AD, AD Integrated,
|
It is the answer for Win2000 and if you didn't
have AD-integrated DNS there would be no
provision for restricting Secure Updates only.
--
Herb Martin
|
|
| Back to top |
|
|
|
|
|
|
FAQ
Memberlist
Register
Profile
Log in to check your private messages
Log in