======Microsoft - DNS====== =====Blogposts/Articles===== [[http://blogs.technet.com/b/networking/archive/2008/03/19/don-t-be-afraid-of-dns-scavenging-just-be-patient.aspx|TechNet Blogs > Microsoft Enterprise Networking Team > Don't be afraid of DNS Scavenging. Just be patient.]] \\ =====Notes===== ====Limit DNS registration of A-records to specific IPs==== If a Windows Server is running the DNS Server service it will register all the IP addresses bound to the DNS Server service in it's DNS zone(s). If this is undesired, a registry entry must be added with the IP addresses that should be registered in DNS. After setting this key a restart of the DNS Server service is required to make the change take effect. Query the registry key: "%SYSTEMROOT%\system32\reg.exe" QUERY "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DNS\Parameters" /v PublishAddresses Set the registry key: "%SYSTEMROOT%\system32\reg.exe" ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DNS\Parameters" /v PublishAddresses /t REG_SZ /d "10.0.1.10" /f Source: [[https://support.microsoft.com/en-us/kb/246804|How to enable or disable DNS updates in Windows 2000 and in Windows Server 2003 (KB246804)]] See also: \\ [[http://www.binarywar.com/2010/01/prevent-registration-of-multiple-ip-addresses-in-dns/|Binary War - Prevent registration of multiple IP addresses in DNS]] \\ [[http://it-hint.blogspot.nl/2011/10/prevent-registration-of-certain-domain.html|IT - Hint - Prevent Registration of Certain Domain Controller DNS Records]] \\ [[https://technet.microsoft.com/en-us/library/cc978020.aspx|TechNet - Windows 2000 Server - Domain Controller Name Registration]] \\ [[https://social.technet.microsoft.com/Forums/windowsserver/en-US/10af6f98-4328-487e-a018-61a004dbbc12/domain-controller-dns-registration?forum=winserverDS|Windows Server Forum - Domain controller DNS registration]] \\