Unauthenticated DNS clients

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

I'm setting up a new DNS server in Windows Server 2003. How do I configure
the service to allow clients that are NOT logging into the domain (or any
domain) to register their addresses and read from the service?
 
In
[email protected] said:
I'm setting up a new DNS server in Windows Server 2003.
How do I configure the service to allow clients that are
NOT logging into the domain (or any domain) to register
their addresses and read from the service?
Click to expand...

In TCP/IP properties on the DNS tab, set the Primary DNS suffix or
Connection DNS suffix to the domain name of the zone you want them
registered in, then set the zone to allow non-secure updates.
 
In
[email protected] said:
I'm setting up a new DNS server in Windows Server 2003.
How do I configure the service to allow clients that are
NOT logging into the domain (or any domain) to register
their addresses and read from the service?
Click to expand...

In addition you have to point the client to the address of the DNS server it
is registering in.
 
None of the clients are members of the domain. Right now all clients are
authenticating through Netware.

I have pointed a few test machines (winxp pro) to the two servers I have set
up for dns, neither can do lookups or register their IP addresses.

Jeff
 
Also, both DNS servers are set to secure and unsecure updates.

Is there a way that I can set access for the "Everyone" group (rather than
authenticated users group) so that they have access to dynamically update
DNS?
 
In
[email protected] said:
None of the clients are members of the domain. Right now
all clients are authenticating through Netware.

I have pointed a few test machines (winxp pro) to the two
servers I have set up for dns, neither can do lookups or
register their IP addresses.
Click to expand...

They don't have to be a member of the domain to make a non-secure update.
But, Registers this connection's addresses in DNS must be selected and
either the Primary or Connection suffix must match the name of the zone you
want them registered in.
You might try running netdiag on those clients to check for DNS
registration. Netdiag is a command line tool in the server support tools on
the server CD or you can download an updated version from
http://download.microsoft.com.
 
Hi Jeff,

Thank you for posting!

Personally, I agree with Kevin. If you want to accept the request from the
client which is not a domain member or is not authenticated by the Domain
Controller, you must make the DNS server to accept both Secure and
Non-secure update.

The below are some resouces about DNS and dynamic update in DNS. I hope
that they will be helpful for you.

816592 HOW TO: Configure DNS Dynamic Update in Windows 2003
http://support.microsoft.com/?id=816592

305553 How to configure TCP/IP to use DNS in Windows XP
http://support.microsoft.com/?id=305553

262188 DNS Dynamic Updates May Not Work
http://support.microsoft.com/?id=262188

228803 DHCP Dynamic Updates with DNS
http://support.microsoft.com/?id=228803

814331 Cannot Perform a Secure Dynamic Update
http://support.microsoft.com/?id=814331

How DNS Works
http://www.microsoft.com/resources/documentation/WindowsServ/2003/all/techre
f/en-us/
Default.asp?url=/resources/documentation/windowsServ/2003/all/techref/en-us/
w2k3tr_d
ns_how.asp

Changes to DNS in Windows Server 2003
http://www.microsoft.com/windows2000/technologies/communications/dns/dns2003
.asp

Have a nice day!

Thanks & Regards,

Feng Mao [MSFT], MCSE
Microsoft Online Partner Support

Get Secure! - www.microsoft.com/security

=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.



--------------------
| From: <[email protected]>
| Subject: Unauthenticated DNS clients
| Date: Tue, 3 Aug 2004 13:58:36 -0500
| Lines: 5
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.2800.1437
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1441
| Message-ID: <[email protected]>
| Newsgroups: microsoft.public.win2000.dns
| NNTP-Posting-Host: 169.207.57.36
| Path:
cpmsftngxa10.phx.gbl!TK2MSFTFEED01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP09
.phx.gbl
| Xref: cpmsftngxa10.phx.gbl microsoft.public.win2000.dns:42721
| X-Tomcat-NG: microsoft.public.win2000.dns
|
| I'm setting up a new DNS server in Windows Server 2003. How do I
configure
| the service to allow clients that are NOT logging into the domain (or any
| domain) to register their addresses and read from the service?
|
|
|
 
I could have sworn that I had the zone set to Secure and Unsecure
updates...it was set to none.

Everything works just like it supposed to now.

Jeff
 
Hi Jeff,

I am glad that everything works fine now.

Feel free to post your questions in the newsgroup in the future.

Have a nice day!

Thanks & Regards,

Feng Mao [MSFT], MCSE
Microsoft Online Partner Support

Get Secure! - www.microsoft.com/security

=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.



--------------------
| From: <[email protected]>
| References: <[email protected]>
| Subject: Re: Unauthenticated DNS clients
| Date: Thu, 5 Aug 2004 15:21:11 -0500
| Lines: 18
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Outlook Express 6.00.2800.1437
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1441
| Message-ID: <[email protected]>
| Newsgroups: microsoft.public.win2000.dns
| NNTP-Posting-Host: 169.207.57.36
| Path: cpmsftngxa06.phx.gbl!TK2MSFTNGP08.phx.gbl!tk2msftngp13.phx.gbl
| Xref: cpmsftngxa06.phx.gbl microsoft.public.win2000.dns:42461
| X-Tomcat-NG: microsoft.public.win2000.dns
|
| I could have sworn that I had the zone set to Secure and Unsecure
| updates...it was set to none.
|
| Everything works just like it supposed to now.
|
| Jeff
|
|
| | > I'm setting up a new DNS server in Windows Server 2003. How do I
| configure
| > the service to allow clients that are NOT logging into the domain (or
any
| > domain) to register their addresses and read from the service?
| >
| >
|
|
|
 
Back
Top