And additional to what Guido said...
you can create your own custom ADM and import it into a GPO (don't forget to
disable the filtering, otherwise you will not see it) and attach that to the OU
if contains Windows 2000 clients/servers (otherwise you can use group filtering)
The contents of the ADM would be:
CLASS MACHINE
CATEGORY "System"
CATEGORY "Custom Settings DNS"
KEYNAME "System\CurrentControlSet\Services\TCPIP\Parameters"
POLICY "DNS Suffix Search List"
EXPLAIN "EXPLANATION: Determines the DNS suffixes to attach to an
unqualified single-label name before submission of a DNS query for that
name.\n\nAn unqualified single-label name contains no dots, such as "example".
This is different from a fully qualified domain name, such as
"example.microsoft.com.".\n\nWith this setting enabled, when a user submits a
query for a single-label name, such as "example", a local DNS client attaches a
suffix, such as "microsoft.com", resulting in the query
"example.microsoft.com", before sending the query to a DNS server.\n\nIf you
enable this setting, you can specify the DNS suffixes to attach before
submission of a query for an unqualified single-label name. The values of the
DNS suffixes in this setting may be set using comma-separated strings, such as
"microsoft.com,serverua.microsoft.com,office.microsoft.com". One DNS suffix is
attached for each submission of a query. If a query is unsuccessful, a new DNS
suffix is added in place of the failed suffix, and this new query is submitted.
The values are used in the order they appear in the string, starting with the
leftmost value and preceding to the right.\n\nIf you enable this setting, you
must specify at least one suffix.\n\nIf you disable this setting, the primary
DNS suffix and network connection-specific DNS suffixes are appended to the
unqualified queries.\n\nIf this setting is not configured, it is not applied to
any computers, and computers use their local configuration."
PART "DNS Suffixes:" EDITTEXT REQUIRED
VALUENAME "SearchList"
END PART
END POLICY
END CATEGORY
END CATEGORY
Cheers
Jorge
________________________________
From: [EMAIL PROTECTED] on behalf of Grillenmeier, Guido
Sent: Thu 9/22/2005 8:31 PM
To: [email protected]
Subject: RE: [ActiveDir] dns suffix search list
the article is correct for Win2000 clients/servers - but for XP clients and Win
2003 servers you can change the DNS suffix search list via GPO.
Other option is to use a startup-script for your clients/servers setting the
"HKLM\System\CurrentControlSet\Services\TCPIP\Parameters\SearchList" RegKey via
the script - the script could even query a text-file to set the suffix as
appropriate for the respective machine.
/Guido
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kern, Tom
Sent: Donnerstag, 22. September 2005 20:06
To: [email protected]
Subject: [ActiveDir] dns suffix search list
I know this was discussed on the list earlier(can't seem to find it), but is
this article correct and are these the only ways to programmatically alter the
dns suffix search list?
http://support.microsoft.com/kb/q275553/
Is there an easy way to do this for many computers, say from a text file?
Thanks
[EMAIL PROTECTED] Vry&-4ibb
.BövrzÊryi
This e-mail and any attachment is for authorised use by the intended
recipient(s) only. It may contain proprietary material, confidential
information and/or be subject to legal privilege. It should not be copied,
disclosed to, retained or used by, any other party. If you are not an intended
recipient then please promptly delete this e-mail and any attachment and all
copies and inform the sender. Thank you.
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
