DNS Help - probably easy - mental block heh

Bluerinse · Jan 24, 2007

Oh man! Ad-blocking software has been detected! :'(

This website is run by the community, for the community... and it needs advertisements in order to keep running. Blocking our ads means your killing our stats!
Please disable your ad-block, or become a premium member to hide all advertisements and this notice.

passmeplz said:

thanks zimbo , so i was right in thinking the only way you can have a zone with secure updates is if it is an active directory integrated zone ?
Click to expand...

That is the case.

If DNS is AD integrated the zone info is stored in Active Directory and is replicated to other DC.s (in the same site) which are also DNS servers using RPC/LDAP and Kerberos v5 for authentication and encryption.

Linky

More..

Secure dynamic update

DNS update security is available only for zones that are integrated into Active Directory. Once you directory-integrate a zone, access control list (ACL) editing features are available in the DNS console so you can add or remove users or groups from the ACL for a specified zone or resource record. For more information, see Modify security for a resource record or Modify security for a directory-integrated zone.

By default, dynamic update security for DNS servers and clients can be handled as follows:•
DNS clients attempt to use unsecured dynamic update first. If an unsecured update is refused, clients try to use secure update.

Also, clients use a default update policy that permits them to attempt to overwrite a previously registered resource record, unless they are specifically blocked by update security.
•
Once a zone becomes Active Directory-integrated, DNS servers running Windows Server 2003 default to allowing only secure dynamic updates.

When using standard zone storage, the default for the DNS Server service is to not allow dynamic updates on its zones. For zones that are either directory-integrated or use standard file-based storage, you can change the zone to allow all dynamic updates which permits all updates to be accepted.
Click to expand...

Source

BosonMichael · Jan 24, 2007

Oh man! Ad-blocking software has been detected! :'(

This website is run by the community, for the community... and it needs advertisements in order to keep running. Blocking our ads means your killing our stats!
Please disable your ad-block, or become a premium member to hide all advertisements and this notice.

passmeplz said:

Downloaded them from some free test engine website , has like 10 questions and you get 25 mins to do them. You have to pay for the full version but im low on money hehe , think its from freedownloadscenter.com.
Click to expand...

Watch out... sites like that often contain braindumps... many of those demos look legit, but some look a little shady.

I'd recommend downloading practice exams directly from the Web site of each trusted vendor... never know what is getting bundled with the software you download from third-party sites, ya know?

Log in or Sign up

DNS Help - probably easy - mental block heh

Bluerinse Exabyte Poster

BosonMichael Yottabyte Poster

Share This Page

Navigation

Popular Forums

Useful Links

Log in or Sign up

DNS Help - probably easy - mental block heh

Bluerinse Exabyte Poster

BosonMichael Yottabyte Poster

Share This Page

Useful Searches