question

GloriaGu-MSFT avatar image
0 Votes"
GloriaGu-MSFT asked CandyLuo-MSFT answered

DHCP Dynamic Updates Proxy Account

Greetings,

I have a question about some behavior I am seeing in my DHCP scopes. This relates to the option to have DHCP "Always dynamically update DNS records".

I have done a lot of work to have all our DHCP distributed addresses registered solely by the DHCP server using a Service Account. What I have found is that when I have this configured, the DHCP server will use the service account to register the DNS record, and the service account shows as the owner of the record. However, almost immediately the lease will get deleted by the client and then recreated by the client itself.

For example my DHCP server is 10.0.0.74, the client gets assigned 10.0.0.201. I can see in the logs that the DHCP server creates the DNS record (created by 10.0.0.74) , then it is immediately deleted and replaced by the client machine (10.0.0.201).

I did have an image to put here to make it clearer, but I get a message stating that I can't post an image until my account is verified.

The only way I have been able to stop this happening is to create a group policy which turns off DNS Dynamic update on the client.
In all the reading about setting up DHCP and a proxy account I have never come across the requirement to apply a group policy setting to stop the client from registering itself.

Is this expected behavior? Have I configured something wrong?

I sort of expected that the DHCP setting I mentioned above would not only register the DNS record for the client, but would make it so the client never registers its own address, but that is clearly not what is happening.

Thanks for any feedback.

Thread source link: https://social.technet.microsoft.com/Forums/zh-CN/b5b78cc1-68dc-4201-86c1-d046663e8935/dhcp-dynamic-updates-proxy-account?forum=winserveripamdhcpdns

windows-dhcp-dns
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

CandyLuo-MSFT avatar image
0 Votes"
CandyLuo-MSFT answered

Hi ,

Welcome to our new Microsoft Q&A Platform.

Please refer to the following steps:

Go to DHCP client,set the following Registry value on the DHCP client to force the DHCP client to honor the DHCP Server configuration in regards to Dynamic DNS updates.

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Dnscache\Parameters
Name: RegistrationOverwrite
Type: REG_DWORD
Value: 2 (DHCP Server overwrites DNS client)

Valid Values: 0 (No overwrite), 1 (DNS client overwrites DHCP server, default) or 2 (DHCP server overwrites DNS client)

A restart of the client is required for the change to take affect.

Depending on environmental circumstances, it may be necessary to delete Host A and/or Pointer ( PTR ) records whose ownership resides with the DHCP client and not the DHCP to allow the DHCP Server to successfully update Client DNS records.

Note: Make sure that you back up the registry before you modify it. Make sure that you know how to restore the registry if a problem occurs.

Best Regards,

Candy






5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.