DNS
41 TopicsExternal private IP addresses registering with DNS server
Hello all, I've been trying to fine-tune our NIDS configuration (which predates my employment here) and more specifically trying to figure out why certain IP addresses/ranges that we don't use, keep appearing in reports/logs. I think I've figured out the root cause, but I'm not sure of the best way to fix it: We have a number of remote users who connect to our network by VPN. As best I can tell, when their laptops connect to the network, they're sending updates to the DNS server running on the DC with both the IP address of their VPN interface (routable on our network) and their private IP address on their home LAN (obviously not routable) - if I do an nslookup on a domain machine, the DC returns two A records, one for each address. This has a slight ripple effect through the network - which manifests mostly with Windows Update Delivery Optimization, where the peer discovery process frequently gets the non-routable private IP somehow and then tries to download Windows updates from it. Long story short: what is the best way to prevent VPN'ed machines from registering external private IP addresses with the DNS server running on the DC?14KViews2likes9CommentsBPA Errors: DNS can't resolve GC, Kerberos, PDC Resource Record, etc.
Hello, I've been poking around this for hours now and could use another set of eyes. This server has been the PDC for quite some time but I discovered the last people that managed this place, didn't demote the old 2008R2 server (thankfully it still existed virtualized). So I was able to do a graceful demotion of that and removed it from the domain. I'm now trying to resolve some other errors in that come up in the BPA scan... All reference DNS and I just can't figure this out. I've been beating head against the wall trying to understand what's happening, This is MS Server Standard 2022 only 1 DC and DNS. (yeah I know, don't get me started, but it's a really small office)... Would love some suggestions. Thanks!178Views1like16CommentsDNS Query Policy to make DNS server authoritative for a single host in Domain
I wish to do the following with my Windows 2016 DNS server: Forward all queries for test.fwd to another DNS server except for a handful of records to which I wish to be authoritative i.e. host1.test.fwd Would this be possible with a DNS Query Policy?3.1KViews1like6CommentsUpgrading 2012 R2 to 2019 Domain Controller / DFRS / DNS / DHCP
Hi All, Looking for some advice been a while since I have had to do an upgrade of the domain controllers but I just want to get people advice on the plan I have put in place to do this: Current setup is as follows: Domain Controller Operating System Functional Level FRS / DFRS Other Functions ROLE DC1 Microsoft Windows Server 2012 (64-bit) Windows Server 2012 R2 FRS DNS / DHCP PDC / RID POOL MANAGER DC2 Microsoft Windows Server 2012 (64-bit) Windows Server 2012 R2 FRS DNS / DHCP DC3 Microsoft Windows Server 2012 (64-bit) Windows Server 2012 R2 FRS DNS / DHCP SCHEMA MASTER / DOMAIN NAMING MASTER DC4 Microsoft Windows Server 2012 (64-bit) Windows Server 2012 R2 FRS DNS / DHCP INFRASTRUCTURE MASTER The aim is to upgrade all servers to 2019 and upgrade their functional level to 2016R2 and also if possible or easier keep the existing IP's and Names. Things I need to try and avoid if possible: - No downtime (or minimal) - No impact on live services if possible i.e clients etc - In place upgrading So In terms of the high level plan it was as follows: - Upgrade/Migrate to DFRS on all existing DC's - Create 4 new servers running 2019 i.e DCNEW1, DCNEW2, DCNEW3, DCNEW4 install Active directory and add as a DC Member - Migrate the FSMO Roles to the corresponding new server i.e DC1 > DCNEW1 DC2 > DCNEW2 etc etc - Migrate DHCP / DNS to an other server - Demote the old DC's from AD - Rename / Re-IP the new DC's to the old DC's name and IP address. (I believe I will need to demote the new DCs i.e DCNEW1 and move the FSMO Roles to another server, rename and re-ip the DC to DC1 give it the same ip address, add it as a DC member and then move the FSMO roles back onto it and then repeat this process for each other DC) Some questions i have: Do I really need to upgrade to DFRS 1st ?? or can this be avoided? In a very high level plan, does this sound about right? or am I overthinking or missing anything. Is there a much slicker way to achieve my goal? In order to move a DHCP server I recall just exporting the DHCP scopes exporting/importing using "netsh dhcp server export C:\dhcp.txt all" If I want to move DNS is there anything else i need to consider other than installing the DNS Role? How would anyone else approach this? Help appreciated! ThanksSolved11KViews1like4CommentsWindows Server 2022 as Domain and DHCP Server
Hi, Windows Server 2022 announced. There are many IT Executives or Organizations who use Windows Server only for DNS Server, DHCP Server, managing network resources and implementing group policies. For this purpose, if we compare Windows Server 2012R2, Windows Server 2016, Windows Server 2019 and Windows Server 2022; can we find any differences? Moreover, for those executives or organizations, does it matter Windows Server 2022 announced? Please let us know differences in Windows Server from above perspectives. With Regards NndnG2.9KViews1like1Comment