Windows 2003 DHCP server 'DNS dynaaamic update credential' issue

[Rob G]

I'm trying to do some clean up on a Windows 2003 AD domain that I
inherited, and have one question about the AD-integrated DHCP/DNS that
serves this domain.

It's is a single DHCP server on the network, and it's set to do dynamic
DNS updates. However, I am getting the following warning message:

Description:
The DHCP service has detected that it is running on a DC and has no
credentials configured for use with Dynamic DNS registrations initiated
by the DHCP service. This is not a recommended security configuration.
Credentials for Dynamic DNS registrations may be configured using the
command line "netsh dhcp server set dnscredentials" or via the DHCP
Administrative tool.


Is there a specific built-in AD account that I should be using for the
DNS dynamic update credentials on the DHCP server, or should I be
defining on manually and add it via the DHCP admin snap-in?

 

[Meinolf Weber [MVP-DS]]

Hello Rob,

See here about:
http://technet.microsoft.com/en-us/library...034(WS.10).aspx

In short create a dedicated user account and use it only for the DHCP update.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> I'm trying to do some clean up on a Windows 2003 AD domain that I
> inherited, and have one question about the AD-integrated DHCP/DNS that
> serves this domain.
>
> It's is a single DHCP server on the network, and it's set to do
> dynamic DNS updates. However, I am getting the following warning
> message:
>
> Description:
> The DHCP service has detected that it is running on a DC and has no
> credentials configured for use with Dynamic DNS registrations
> initiated
> by the DHCP service. This is not a recommended security
> configuration.
> Credentials for Dynamic DNS registrations may be configured using
> the
> command line "netsh dhcp server set dnscredentials" or via the DHCP
> Administrative tool.
>
> Is there a specific built-in AD account that I should be using for the
> DNS dynamic update credentials on the DHCP server, or should I be
> defining on manually and add it via the DHCP admin snap-in?
>

 

[Ace Fekay [MCT]]

"Meinolf Weber [MVP-DS]" wrote in message
news:6cb2911d57ec8cc03265aef402b@msnews.microsoft.com...
> Hello Rob,
>
> See here about:
> http://technet.microsoft.com/en-us/library...034(WS.10).aspx
>
> In short create a dedicated user account and use it only for the DHCP
> update.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and
> confers no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

In addition, take a look at the following, which hopefully will help.

DHCP, Dynamic DNS Updates , Scavenging, static entries & timestamps, and the
DnsProxyUpdate Group
http://msmvps.com/blogs/acefekay/archive/2...date-group.aspx


--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Please reply back to the newsgroup or forum for collaboration benefit among
responding engineers, and to help others benefit from your resolution.

Ace Fekay, MCT, MCTS Exchange, MCSE, MCSA 2003 & 2000, MCSA Messaging
Microsoft Certified Trainer

For urgent issues, please contact Microsoft PSS directly. Please check
http://support.microsoft.com for regional support phone numbers.