[Last Call] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 338
  • Last Modified:

Only secure update DNS

in DNS (Active Directory Integrated zone) I can setup the Only secure Update. what does this mean?
I can also not set it up as secure update. what is going to be different?

thanks
0
jskfan
Asked:
jskfan
  • 3
2 Solutions
 
Mad_JasperCommented:
Secure Only updates will only allow clients that are domain members register their names in DNS.

Legacy clients, i.e., Windows 98, NT, will require DHCP to register the names for the clients.

0
 
Mad_JasperCommented:
I should have read your question thoroughly. Is this the only option in the drop-down menu or do you receive an error when you attempt to select something else? Do you have any errors in the event logs?
0
 
jskfanAuthor Commented:
<<<<Legacy clients, i.e., Windows 98, NT, will require DHCP to register the names for the clients.>>>>>

legacy clients can't be joined to the domain if DNS is setup to only secure update???
0
 
Mad_JasperCommented:
Legacy clients cannot not join a Windows 2000/2003 domain (more specifically, have a computer account in AD). The use NTLM authentification to authenticate to the domain. When only only secure updates is chosen, DHCP will register the clients in DNS on behalf of the legacy client. This setting is on the DNS tab in the DHCP server's properties.

This article briefly touches on this situation:
http://support.microsoft.com/default.aspx?scid=kb;[LN];555038

0

Featured Post

 The Evil-ution of Network Security Threats

What are the hacks that forever changed the security industry? To answer that question, we created an exciting new eBook that takes you on a trip through hacking history. It explores the top hacks from the 80s to 2010s, why they mattered, and how the security industry responded.

  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now