I’m hoping someone here will know. We have a test domain, let’s say “myschool.edu” which is a problem.
We can’t use the default dns settings. We would like our workstations to consistently resolve with the dns suffix “ad.myschool.edu”. They don’t now use their own machine name. We want to be able to make a policy for computers in the test domain to register in the subdomain in DNS and retain their domain bind. We have a policy that changes the dns name to mycomputer.ad.myschool.edu and that immediately breaks the bind. Anyone know what policy and permissions would be required? So far, we found an old Windows 2000 article that had the below instructions. Not sure if this is the way to go. Our sysadmin says this adds 74 ACLs to each computer object, and is unhappy to proceed. 1. Right-click the domain you want to modify, and then click Properties . 2. Click the Security tab. 3. Click Add , click SELF , click ADD , and then click OK . This adds the SELF group to the ACL. 4. Click the Advanced button. 5. Click SELF and then click View/Edit . 6. Click the Properties tab. 7. In the Apply onto box, click Computer objects . 8. In the Permissions box, check Allow next to Write dNSHostName , and then click OK until you have closed the Active Directory Users and Computers dialog box. Best Regards, Mike Murray Desktop Engineer/IT Consultant - IT Support Services California State University, Chico 530.898.4357 <mailto:mmur...@csuchico.edu> mmur...@csuchico.edu Remember, Chico State will NEVER ask you for your password via email! For more information about recognizing phishing scam emails go to: http://www.csuchico.edu/isec/basics/spam-and-phishing.shtml
smime.p7s
Description: S/MIME cryptographic signature
