GPO Question

[djtech2k]

I have a weird situation. I have a GPO in place that forces all clients to dynamically register with DNS. This applies to all adapters as per the policy.

Now the issue I have is that I have MANY VPN users that come into the intranet. They all get a private IP inside of their VPN concentrator, which is not guaranteed to be unique, and then they sign onto my intranet and get a real IP. The real IP is assigned to the Cisco vpn client's virtual adapter and the private IP is assigned to the hardware NIC.

My issue is that these private IP's and being registered in my AD DNS so I have MANY instances of private IP's being attached to dozens of names.

I am looking for a solution. My thought is to have some kind of policy that would force dynamic registration ONLY if the IP fit a certain format or something. I need to find a way to force the good IP to register and the private IP to NOT register. I think I can do some or most of this in vbscript, but I do not know how I can do this via policy. I guess maybe a startup script would work, but I would rather not do that if I do not have to.

Any ideas?

 

[djtech2k]

I am a bit stumped on this one myself.

 

[djtech2k]

Is it possible to do any WMI-like filtering in a custom mmc template to import into GPO?