Dynamic Updates (DNS and DHCP) 2

[Stevehewitt]

Hi guys,

Got a Windows 2003 domain with a mix of 2003 and 2008 DC's and DNS Servers. Clients are XP and Vista.

For some reason it appears that dynamic updates are not working in our DNS Servers. We are using a single AD-Integrated zone with Windows DHCP and DNS using secure dynamic updates only.
The DHCP log file shows that it's failing to update DNS - but gives no other clue. This rules out the client (as the DHCP server is trying but failing so it's getting the request from the client) but we're getting a bit stuck.

I'm thinking this could be security related, but I'm not very clued up on how dynamic updates work. I assume the client computer account requires access to create objects in the zone and that CREATOR OWNER needs fully access - however the current security is not setup like this at all.

Any suggestions before I start breaking the security on the zone?!

Cheers,


Steve.

"They have the internet on computers now!" - Homer Simpson

 

[Roadki11]

http://technet.microsoft.com/en-us/library/cc775839(WS.10).aspx

RoadKi11

"This apparent fear reaction is typical, rather than try to solve technical problems technically, policy solutions are often chosen." - Fred Cohen

 

[Stevehewitt]

Cheers RoadKi11 - Been reading up on the troubleshooting sections on TechNet for DHCP and DNS and neither sections pointed to this!!!

Not 100% sure but done a test remotely for a machine that's never been in DNS (!) and it's now in there with the DHCP log showing it as 31 (DNS Update Complete) which is a first too.

Thanks again.


Steve.

"They have the internet on computers now!" - Homer Simpson

 

[Roadki11]

You are welcome.


RoadKi11

"This apparent fear reaction is typical, rather than try to solve technical problems technically, policy solutions are often chosen." - Fred Cohen