Joe.

What additional permissions are required for disjointed names spaces? 
You mention more permissions are required on the computer object?

Care to expand?  OR point to where they are documented?  

Cheers


On Tue, 29 Mar 2005 12:43:10 -0800, Isenhour, Joseph
<[EMAIL PROTECTED]> wrote:
> If you're also talking about servers don't forget that by default computers
> register their SPN using the AD domain name.  So if you have a server that
> registers HOST/someserver.myadname.net and the server actually resolves to
> someserver.mydnszone.net Kerberos will not work for the clients that try to
> connect using the DNS name.
> ________________________________
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of Brent Westmoreland
> Sent: Tuesday, March 29, 2005 7:06 AM
> To: [email protected]
> Subject: [ActiveDir] Compelling arguments?
> 
> 
> Are there compelling arguments to use the DNS Domain name of your AD Domain
> as the primary DNS Suffix versus a different DNS extension from a client
> functionality perspective?
> 
> Clients are still able to resolve the AD DNS Domain but most do not use it
> as their primary suffix.
> 
> Any thoughts welcome.
List info   : http://www.activedir.org/List.aspx
List FAQ    : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

Reply via email to