Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 37 guests online
 
Free Business and Tech Magazines and eBooks

You are here: Home arrow Ethical Hacking Discussions and Related Certificationsarrow Otherarrow DNS Infrastructure Question
EH-Net
May 24, 2013, 08:24:36 AM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Go back to The Ethical Hacker Network Online Magazine Home Page
 
   Home   Help Calendar Login Register  
Pages: [1]   Go Down
  Print  
Author Topic: DNS Infrastructure Question  (Read 2613 times)
0 Members and 1 Guest are viewing this topic.
doodleface
Newbie
*
Offline Offline

Posts: 34



View Profile WWW
« on: February 11, 2009, 01:37:03 PM »

How do you keep DNS up to date in a more automated fashion in a Microsoft Environment  where the workstation names are changing constantly?

Active Directory Integrated DNS is not used because of the security practice of separate boxes for separate services and ADI requires DNS to be on a DC.

Is there a good solution to keep your DNS up to date without having to constantly check manually and add DNS records manually for workstations?

Thanks for your ideas and time
Logged

CISSP, OSCP, C|EH, E|CSA, C|HFI, GXPN, GWAPT, GCIH, GISP, GSEC, MCITP:EA, CCNA, FCT, FCNSP, JNCIA, JNCIA-FWV, MCSE Security, A+, Net+, Server+, Security+
ciscostu
Newbie
*
Offline Offline

Posts: 11


View Profile WWW
« Reply #1 on: February 11, 2009, 03:09:24 PM »

Dynamic updates are available without AD integrated zones, as long as you don't need 'dynamic update security'-

http://technet.microsoft.com/en-us/library/cc784052.aspx

Quote
Secure dynamic update

DNS update security is available only for zones that are integrated into Active Directory.

Hope this helps,
Charlie
Logged

PacketProtector- OpenWrt + FreeRADIUS + OpenVPN + Snort + DansGuardian + ClamAV
doodleface
Newbie
*
Offline Offline

Posts: 34



View Profile WWW
« Reply #2 on: February 11, 2009, 05:37:07 PM »

Thank you for the response. I had a brain fart in regards to having the ability to setup the dynamic DNS  without needing to place DNS on the DC.

Here is a tidbit for anybody else that might need it later. Basic settings to get dynamic DNS updates rolling.

- In the General tab of each zone (including all your reverse lookup zones), you can enable Dynamic updates. There are 3 choices:
    - None, which disables dynamic updates
    - Non-secure and secure, which isn't recommended since anyone can make any DNS change they want, even if it's to a different IP address. In some instances (usually migrations/integrations) this is necessary, though.
    - Secure, which uses traditional windows authentication mechanisms to make sure the box is valid first, then allows the update after successful authentication.
Logged

CISSP, OSCP, C|EH, E|CSA, C|HFI, GXPN, GWAPT, GCIH, GISP, GSEC, MCITP:EA, CCNA, FCT, FCNSP, JNCIA, JNCIA-FWV, MCSE Security, A+, Net+, Server+, Security+
Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.067 seconds with 23 queries.
 
Exclusive Deal

sansfire13_245x90_cw90.jpg
SANSFIRE 2013
June 15 - 22

5% Off w/ Code: EHN_5

SANS Deals 4 EH-Netters
5% OFF Any SANS Course in Any Format!
Coupon Code: EHN_5 Including SANS Rocky Mountain 2013 & SANS Boston 2013
Polls
Compared to this year, 2013 will be:
 
Recent Forum Topics
EH-Net News Feeds
Latest Additions
 
         
Free Business and Tech Magazines and eBooks

© 2013 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.