Important Notice: Our web hosting provider recently started charging us for additional visits, which was unexpected. In response, we're seeking donations. Depending on the situation, we may explore different monetization options for our Community and Expert Contributors. It's crucial to provide more returns for their expertise and offer more Expert Validated Answers or AI Validated Answers. Learn more about our hosting issue here.

Is it possible to do secure dynamic updates to a Microsoft DNS Server (Windows 2000/2003 or later) instead of a dynamic DNS service?

April 26, 2017DNS Dynamic dynamic dns later Microsoft possible Secure server updates Windows

0

Posted

Is it possible to do secure dynamic updates to a Microsoft DNS Server (Windows 2000/2003 or later) instead of a dynamic DNS service?

1 Answer

0

Posted

Yes, when using the Account Assistant or the Setup, configure your server under the DNS Servers branch instead of Dynamic DNS Services. If you are using a version of DynSite older than build 1.11.757.4 please upgrade (previous versions were broken). You must specify the DNS server hostname (or IP address) and the domain name (@) in the DNS Server field in the DNS Account Properties e.g.: 192.168.0.2@MYBUSINESS. There must be a SRV (Service Location) record for _ldap._tcp. in the Forward Lookup Zones section of the DNS server. It is usually created by default. The zone to update must be Active-Directory integrated and the zone configured to only support secure updates. The Domain Controller / DNS server must be trusted for delegation in Active Directory User and Computers > Domain Controllers > computer name > Properties > Delegation tab. The account from which you send the update must not be configured as Account is sensitive and cannot be delegated in Active Di