Clients do not register with DNS server
Hello,
i just took over a network (3 W2k3 Server, 50 Windows XP clients) for some reson when i rename the clients they do not register with the DNS server.
I dont see any GP that would prefent the clients from registering. when i do a ping -a I can get a forward anf a reverse lookup. When i do an nslookup it dosn't find anything.
I hope i provided enough informations, any help is apriciated.
i just took over a network (3 W2k3 Server, 50 Windows XP clients) for some reson when i rename the clients they do not register with the DNS server.
I dont see any GP that would prefent the clients from registering. when i do a ping -a I can get a forward anf a reverse lookup. When i do an nslookup it dosn't find anything.
I hope i provided enough informations, any help is apriciated.
jorlando66
when you type ipconfig /registerdns does it register?
ASKER
No it does not
Very that the DNS zone is set to allow Dynamic Updates.
I assume you site using DHCP for assignment, but if it doesn't for whatever reason, verify that the DHCP Client service is started on the desktops. This is the service responsible for registering the names with DNS.
ASKER
DHCP is enabled, i am able to get an IP and the correct DNS server, Zone allows secure dynamic updates.
ASKER
The strange thing is why does a ping -a vs. nslookup work? Where is it getting the information from? I always thought its pulling the IP / Name from the DNS database?
Secure dynamic updates
For Windows Server 2003, DNS update security is available only for zones that are integrated into Active Directory. After you integrate a zone, you can use the access control list (ACL) editing features that are available in the DNS snap-in to add or to remove users or groups from the ACL for a specific zone or for a resource record.
For Windows Server 2003, DNS update security is available only for zones that are integrated into Active Directory. After you integrate a zone, you can use the access control list (ACL) editing features that are available in the DNS snap-in to add or to remove users or groups from the ACL for a specific zone or for a resource record.
check your access control lists
Depending upon your dhcp/dns configuration you may need to provide credentials to allow the updates, see the following: http://technet.microsoft.com/en-us/library/cc775839(WS.10).aspx
This also provides a pretty good explanation of the registration process:
http://technet.microsoft.com/en-us/library/cc787034(WS.10).aspx
This also provides a pretty good explanation of the registration process:
http://technet.microsoft.com/en-us/library/cc787034(WS.10).aspx
sample
Capture.JPG
Capture.JPG
ASKER
jorlando66:
What permission do i need to set? I have domain admin right and i am not able to register my machine.
Ronin_1:
I am reding through your TechNet document now
What permission do i need to set? I have domain admin right and i am not able to register my machine.
Ronin_1:
I am reding through your TechNet document now
unselect secure only and see if you can register. Just as a test
ASKER
I changed the settings to Nonesecure and Secure and i am able to register now. So now the question why?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Yes, My DHCP and DNS server are running on the same two W2k3 servers
Would it be possible to screen print the settings you have within properties of the DNS tab within DHCP? Also do the leases in DHCP have a different symbol (i.e. have an icon with a pen symbol)? Just as a matter of interest what process are you using for renaming the computer accounts?
ASKER
Did you read over the article?
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Yes i have the same problem when i delete the computer object in AD. I am still not able to set DNS to Secure only, if i do DNS is not updating.
Did you read through the acrticle to make sure all is setup properly?
ASKER
Yes i did, all setting seem to be the way they are supposed to
Doesn't make sense all you should work under secure if you have everything setup properly.