| Author | Messages | |
rmscheck
Posts:66
 | | 04/29/2008 11:43 AM |
| I've been messing with the GPO for DNS Servers... I want it to set DNS servers for (select) clients despite what they receive via DHCP.
Well, for these clients, I have confirmed the policy is being applied (via rsop, gpresult), however, ipconfig tells me otherwise. Ipconfig still shows the DHCP assigned DNS servers.
The value I specified in the GPO is also in the registry entry under DNSClient..
What gives?
---------------------------------
Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try it now.
| | | |
| deji
Posts:140
| | 04/29/2008 12:04 PM |
| I'd take a sample machine, delete ALL instances of the non-GPO-assigned servers from the registry, reboot and re-test. Do you notice any difference?
Sincerely,
_____
(, / | /) /) /)
/---| (/_ ______ ___// _ // _
) / |_/(__(_) // (_(_)(/_(_(_/(__(/_
(_/ /)
(/
Microsoft MVP - Directory Services
www.akomolafe.name<http://www.akomolafe.name/> - we know IT
-5.75, -3.23
Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon
________________________________
From: ActiveDir-owner@mail.activedir.org [ActiveDir-owner@mail.activedir.org] On Behalf Of Rand Salazar [rmscheck@yahoo.com]
Sent: Tuesday, April 29, 2008 8:40 AM
To: Active Dir
Subject: [ActiveDir] GPO to Control Client DNS Servers
I've been messing with the GPO for DNS Servers... I want it to set DNS servers for (select) clients despite what they receive via DHCP.
Well, for these clients, I have confirmed the policy is being applied (via rsop, gpresult), however, ipconfig tells me otherwise. Ipconfig still shows the DHCP assigned DNS servers.
The value I specified in the GPO is also in the registry entry under DNSClient..
What gives?
________________________________
Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try it now.<http://us.rd.yahoo.com/evt=51733/*http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ>
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ma/default.aspx
| | | |
| rmscheck
Posts:66
| | 04/29/2008 12:24 PM |
| Thanks! Same thing occurred. I took a fresh machine with no trace of the GPO/registry values, and the same symptoms showed. It added the DNSClient entry (aka GPO applied), and the ipconfig still showed DHCP assigned.
Hmmm.. weird.
"Akomolafe, Deji" <deji@readymaids.com> wrote: I'd take a sample machine, delete ALL instances of the non-GPO-assigned servers from the registry, reboot and re-test. Do you notice any difference?
Sincerely,
_____
(, / | /) /) /)
/---| (/_ ______ ___// _ // _
) / |_/(__(_) // (_(_)(/_(_(_/(__(/_
(_/ /)
(/
Microsoft MVP - Directory Services
www.akomolafe.name - we know IT
-5.75, -3.23
Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon
________________________________
From: ActiveDir-owner@mail.activedir.org [ActiveDir-owner@mail.activedir.org] On Behalf Of Rand Salazar [rmscheck@yahoo.com]
Sent: Tuesday, April 29, 2008 8:40 AM
To: Active Dir
Subject: [ActiveDir] GPO to Control Client DNS Servers
I've been messing with the GPO for DNS Servers... I want it to set DNS servers for (select) clients despite what they receive via DHCP.
Well, for these clients, I have confirmed the policy is being applied (via rsop, gpresult), however, ipconfig tells me otherwise. Ipconfig still shows the DHCP assigned DNS servers.
The value I specified in the GPO is also in the registry entry under DNSClient..
What gives?
---------------------------------
Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try it now.
| | | |
| deji
Posts:140
| | 04/29/2008 1:24 PM |
| Is the client XP? If it's pre-XP, then this won't work. I haven't tested with Vista, but I know for sure that I use scripts to get these settings into pre-XP machines.
Sincerely,
_____
(, / | /) /) /)
/---| (/_ ______ ___// _ // _
) / |_/(__(_) // (_(_)(/_(_(_/(__(/_
(_/ /)
(/
Microsoft MVP - Directory Services
www.akomolafe.name<http://www.akomolafe.name/> - we know IT
-5.75, -3.23
Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon
________________________________
From: ActiveDir-owner@mail.activedir.org [ActiveDir-owner@mail.activedir.org] On Behalf Of Rand Salazar [rmscheck@yahoo.com]
Sent: Tuesday, April 29, 2008 9:21 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] GPO to Control Client DNS Servers
Thanks! Same thing occurred. I took a fresh machine with no trace of the GPO/registry values, and the same symptoms showed. It added the DNSClient entry (aka GPO applied), and the ipconfig still showed DHCP assigned.
Hmmm.. weird.
"Akomolafe, Deji" <deji@readymaids.com> wrote:
I'd take a sample machine, delete ALL instances of the non-GPO-assigned servers from the registry, reboot and re-test. Do you notice any difference?
Sincerely,
_____
(, / | /) /) /)
/---| (/_ ______ ___// _ // _
) / |_/(__(_) // (_(_)(/_(_(_/(__(/_
(_/ /)
(/
Microsoft MVP - Directory Services
www.akomolafe.name - we know IT
-5.75, -3.23
Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon
________________________________
From: ActiveDir-owner@mail.activedir.org [ActiveDir-owner@mail.activedir.org] On Behalf Of Rand Salazar [rmscheck@yahoo.com]
Sent: Tuesday, April 29, 2008 8:40 AM
To: Active Dir
Subject: [ActiveDir] GPO to Control Client DNS Servers
I've been messing with the GPO for DNS Servers... I want it to set DNS servers for (select) clients despite what they receive via DHCP.
Well, for these clients, I have confirmed the policy is being applied (via rsop, gpresult), however, ipconfig tells me otherwise. Ipconfig still shows the DHCP assigned DNS servers.
The value I specified in the GPO is also in the registry entry under DNSClient..
What gives?
________________________________
Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try it now.<http://us.rd.yahoo.com/evt=51733/*http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ>
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ma/default.aspx
| | | |
| rmscheck
Posts:66
| | 04/29/2008 1:29 PM |
| I have XP clients and 2003 that I want this to effect.
"Akomolafe, Deji" <deji@readymaids.com> wrote: Is the client XP? If it's pre-XP, then this won't work. I haven't tested with Vista, but I know for sure that I use scripts to get these settings into pre-XP machines.
Sincerely,
_____
(, / | /) /) /)
/---| (/_ ______ ___// _ // _
) / |_/(__(_) // (_(_)(/_(_(_/(__(/_
(_/ /)
(/
Microsoft MVP - Directory Services
www.akomolafe.name - we know IT
-5.75, -3.23
Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon
________________________________
From: ActiveDir-owner@mail.activedir.org [ActiveDir-owner@mail.activedir.org] On Behalf Of Rand Salazar [rmscheck@yahoo.com]
Sent: Tuesday, April 29, 2008 9:21 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] GPO to Control Client DNS Servers
Thanks! Same thing occurred. I took a fresh machine with no trace of the GPO/registry values, and the same symptoms showed. It added the DNSClient entry (aka GPO applied), and the ipconfig still showed DHCP assigned.
Hmmm.. weird.
"Akomolafe, Deji" wrote:
I'd take a sample machine, delete ALL instances of the non-GPO-assigned servers from the registry, reboot and re-test. Do you notice any difference?
Sincerely,
_____
(, / | /) /) /)
/---| (/_ ______ ___// _ // _
) / |_/(__(_) // (_(_)(/_(_(_/(__(/_
(_/ /)
(/
Microsoft MVP - Directory Services
www.akomolafe.name - we know IT
-5.75, -3.23
Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon
________________________________
From: ActiveDir-owner@mail.activedir.org [ActiveDir-owner@mail.activedir.org] On Behalf Of Rand Salazar [rmscheck@yahoo.com]
Sent: Tuesday, April 29, 2008 8:40 AM
To: Active Dir
Subject: [ActiveDir] GPO to Control Client DNS Servers
I've been messing with the GPO for DNS Servers... I want it to set DNS servers for (select) clients despite what they receive via DHCP.
Well, for these clients, I have confirmed the policy is being applied (via rsop, gpresult), however, ipconfig tells me otherwise. Ipconfig still shows the DHCP assigned DNS servers.
The value I specified in the GPO is also in the registry entry under DNSClient..
What gives?
________________________________
Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try it now.
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ma/default.aspx
---------------------------------
Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try it now.
| | | |
| guyt1799190425
Posts:36
| | 04/29/2008 1:34 PM |
| If you type "nslookup" + Enter, what DNS server are you pointed to ? The
one from DHCP or the one from the GPO ?
I could be wrong, but I can almost bet there were some issues with
ipconfig.exe incorrectly reporting IP settings that were applied via
GPO, while the resolver was actually doing the right thing.
Guy
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Rand Salazar
Sent: Tuesday, April 29, 2008 7:22 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] GPO to Control Client DNS Servers
Thanks! Same thing occurred. I took a fresh machine with no trace of
the GPO/registry values, and the same symptoms showed. It added the
DNSClient entry (aka GPO applied), and the ipconfig still showed DHCP
assigned.
Hmmm.. weird.
"Akomolafe, Deji" <deji@readymaids.com> wrote:
I'd take a sample machine, delete ALL instances of the non-GPO-assigned
servers from the registry, reboot and re-test. Do you notice any
difference?
Sincerely,
_____
(, / | /) /) /)
/---| (/_ ______ ___// _ // _
) / |_/(__(_) // (_(_)(/_(_(_/(__(/_
(_/ /)
(/
Microsoft MVP - Directory Services
www.akomolafe.name - we know IT
-5.75, -3.23
Do you now realize that Today is the Tomorrow you were worried about
Yesterday? -anon
________________________________
From: ActiveDir-owner@mail.activedir.org
[ActiveDir-owner@mail.activedir.org] On Behalf Of Rand Salazar
[rmscheck@yahoo.com]
Sent: Tuesday, April 29, 2008 8:40 AM
To: Active Dir
Subject: [ActiveDir] GPO to Control Client DNS Servers
I've been messing with the GPO for DNS Servers... I want it to set DNS
servers for (select) clients despite what they receive via DHCP.
Well, for t hese clients, I have confirmed the policy is being applied
(via rsop, gpresult), however, ipconfig tells me otherwise. Ipconfig
still shows the DHCP assigned DNS servers.
The value I specified in the GPO is also in the registry entry under
DNSClient..
What gives?
________________________________
Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try
it now.
<http://us.rd.yahoo.com/evt=51733/*http:/mobile.yahoo.com/;_ylt=Ahu06i62
sR8HDtDypao8Wcj9tAcJ%20>
| | | |
| deji
Posts:140
| | 04/29/2008 1:44 PM |
| first thing first - does it work on the XP machine?
Sincerely,
_____
(, / | /) /) /)
/---| (/_ ______ ___// _ // _
) / |_/(__(_) // (_(_)(/_(_(_/(__(/_
(_/ /)
(/
Microsoft MVP - Directory Services
www.akomolafe.name<http://www.akomolafe.name/> - we know IT
-5.75, -3.23
Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon
________________________________
From: ActiveDir-owner@mail.activedir.org [ActiveDir-owner@mail.activedir.org] On Behalf Of Rand Salazar [rmscheck@yahoo.com]
Sent: Tuesday, April 29, 2008 10:27 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] GPO to Control Client DNS Servers
I have XP clients and 2003 that I want this to effect.
"Akomolafe, Deji" <deji@readymaids.com> wrote:
Is the client XP? If it's pre-XP, then this won't work. I haven't tested with Vista, but I know for sure that I use scripts to get these settings into pre-XP machines.
Sincerely,
_____
(, / | /) /) /)
/---| (/_ ______ ___// _ // _
) / |_/(__(_) // (_(_)(/_(_(_/(__(/_
(_/ /)
(/
Microsoft MVP - Directory Services
www.akomolafe.name - we know IT
-5.75, -3.23
Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon
________________________________
From: ActiveDir-owner@mail.activedir.org [ActiveDir-owner@mail.activedir.org] On Behalf Of Rand Salazar [rmscheck@yahoo.com]
Sent: Tuesday, April 29, 2008 9:21 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] GPO to Control Client DNS Servers
Thanks! Same thing occurred. I took a fresh machine with no trace of the GPO/registry values, and the same symptoms showed. It added the DNSClient entry (aka GPO applied), and the ipconfig still showed DHCP assigned.
Hmmm.. weird.
"Akomolafe, Deji" wrote:
I'd take a sample machine, delete ALL instances of the non-GPO-assigned servers from the registry, reboot and re-test. Do you notice any difference?
Sincerely,
_____
(, / | /) /) /)
/---| (/_ ______ ___// _ // _
) / |_/(__(_) // (_(_)(/_(_(_/(__(/_
(_/ /)
(/
Microsoft MVP - Directory Services
www.akomolafe.name - we know IT
-5.75, -3.23
Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon
________________________________
From: ActiveDir-owner@mail.activedir.org [ActiveDir-owner@mail.activedir.org] On Behalf Of Rand Salazar [rmscheck@yahoo.com]
Sent: Tuesday, April 29, 2008 8:40 AM
To: Active Dir
Subject: [ActiveDir] GPO to Control Client DNS Servers
I've been messing with the GPO for DNS Servers... I want it to set DNS servers for (select) clients despite what they receive via DHCP.
Well, for these clients, I have confirmed the policy is being applied (via rsop, gpresult), however, ipconfig tells me otherwise. Ipconfig still shows the DHCP assigned DNS servers.
The value I specified in the GPO is also in the registry entry under DNSClient..
What gives?
________________________________
Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try it now.
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ma/default.aspx
________________________________
Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try it now.<http://us.rd.yahoo.com/evt=51733/*http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ>
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ma/default.aspx
| | | |
| rmscheck
Posts:66
| | 04/29/2008 1:49 PM |
| Ah ha.. On WinXP, nslookup pulls up the GPO assigned setting. Interesting! Perhaps the network configuration display only shows the actual interface setting?
The weird thing is the 2003 Server client, nslookup still shows the DHCP assigned setting.
So is it safe to assume the XP client is using the GPO set DNS servers despite what ipconfig and the control panels say?
Guy Teverovsky <guyt@smartx.co.il> wrote: v\:* {behavior:url(#default#VML);} o\:* {behavior:url(#default#VML);} w\:* {behavior:url(#default#VML);} .shape {behavior:url(#default#VML);} If you type nslookup + Enter, what DNS server are you pointed to ? The one from DHCP or the one from the GPO ?
I could be wrong, but I can almost bet there were some issues with ipconfig.exe incorrectly reporting IP settings that were applied via GPO, while the resolver was actually doing the right thing.
Guy
From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Rand Salazar
Sent: Tuesday, April 29, 2008 7:22 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] GPO to Control Client DNS Servers
Thanks! Same thing occurred. I took a fresh machine with no trace of the GPO/registry values, and the same symptoms showed. It added the DNSClient entry (aka GPO applied), and the ipconfig still showed DHCP assigned.
Hmmm.. weird.
"Akomolafe, Deji" <deji@readymaids.com> wrote:
I'd take a sample machine, delete ALL instances of the non-GPO-assigned servers from the registry, reboot and re-test. Do you notice any difference?
Sincerely,
_____
(, / | /) /) /)
/---| (/_ ______ ___// _ // _
) / |_/(__(_) // (_(_)(/_(_(_/(__(/_
(_/ /)
(/
Microsoft MVP - Directory Services
www.akomolafe.name - we know IT
-5.75, -3.23
Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon
________________________________
From: ActiveDir-owner@mail.activedir.org [ActiveDir-owner@mail.activedir.org] On Behalf Of Rand Salazar [rmscheck@yahoo.com]
Sent: Tuesday, April 29, 2008 8:40 AM
To: Active Dir
Subject: [ActiveDir] GPO to Control Client DNS Servers
I've been messing with the GPO for DNS Servers... I want it to set DNS servers for (select) clients despite what they receive via DHCP.
Well, for t hese clients, I have confirmed the policy is being applied (via rsop, gpresult), however, ipconfig tells me otherwise. Ipconfig still shows the DHCP assigned DNS servers.
The value I specified in the GPO is also in the registry entry under DNSClient..
What gives?
---------------------------------
Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try it now.
---------------------------------
Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try it now.
| | | |
| deji
Posts:140
| | 04/29/2008 2:05 PM |
| Like I said, this settings is only for XP machines. Anything other than XP will not use it. I haven't tested Vista, so I am not sure of the behavior here. When I had to do similar things for W2K and W2K3 machines, I had used scripting. See http://www.activexperts.com/activmonitor/windowsmanagement/adminscripts/networking/client/#ConfigDnsServer.htm
Sincerely,
_____
(, / | /) /) /)
/---| (/_ ______ ___// _ // _
) / |_/(__(_) // (_(_)(/_(_(_/(__(/_
(_/ /)
(/
Microsoft MVP - Directory Services
www.akomolafe.name<http://www.akomolafe.name/> - we know IT
-5.75, -3.23
Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon
________________________________
From: ActiveDir-owner@mail.activedir.org [ActiveDir-owner@mail.activedir.org] On Behalf Of Rand Salazar [rmscheck@yahoo.com]
Sent: Tuesday, April 29, 2008 10:36 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] GPO to Control Client DNS Servers
Ah ha.. On WinXP, nslookup pulls up the GPO assigned setting. Interesting! Perhaps the network configuration display only shows the actual interface setting?
The weird thing is the 2003 Server client, nslookup still shows the DHCP assigned setting.
So is it safe to assume the XP client is using the GPO set DNS servers despite what ipconfig and the control panels say?
Guy Teverovsky <guyt@smartx.co.il> wrote:
If you type “nslookup” + Enter, what DNS server are you pointed to ? The one from DHCP or the one from the GPO ?
I could be wrong, but I can almost bet there were some issues with ipconfig.exe incorrectly reporting IP settings that were applied via GPO, while the resolver was actually doing the right thing.
Guy
From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Rand Salazar
Sent: Tuesday, April 29, 2008 7:22 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] GPO to Control Client DNS Servers
Thanks! Same thing occurred. I took a fresh machine with no trace of the GPO/registry values, and the same symptoms showed. It added the DNSClient entry (aka GPO applied), and the ipconfig still showed DHCP assigned.
Hmmm.. weird.
"Akomolafe, Deji" <deji@readymaids.com> wrote:
I'd take a sample machine, delete ALL instances of the non-GPO-assigned servers from the registry, reboot and re-test. Do you notice any difference?
Sincerely,
_____
(, / | /) /) /)
/---| (/_ ______ ___// _ // _
) / |_/(__(_) // (_(_)(/_(_(_/(__(/_
(_/ /)
(/
Microsoft MVP - Directory Services
www.akomolafe.name - we know IT
-5.75, -3.23
Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon
________________________________
From: ActiveDir-owner@mail.activedir.org [ActiveDir-owner@mail.activedir.org] On Behalf Of Rand Salazar [rmscheck@yahoo.com]
Sent: Tuesday, April 29, 2008 8:40 AM
To: Active Dir
Subject: [ActiveDir] GPO to Control Client DNS Servers
I've been messing with the GPO for DNS Servers... I want it to set DNS servers for (select) clients despite what they receive via DHCP.
Well, for t hese clients, I have confirmed the policy is being applied (via rsop, gpresult), however, ipconfig tells me otherwise. Ipconfig still shows the DHCP assigned DNS servers.
The value I specified in the GPO is also in the registry entry under DNSClient..
What gives?
________________________________
Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try it now.<http://us.rd.yahoo.com/evt=51733/*http:/mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ%20>
________________________________
Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try it now.<http://us.rd.yahoo.com/evt=51733/*http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ>
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ma/default.aspx
| | | |
| rmscheck
Posts:66
| | 04/29/2008 3:05 PM |
| Doh! I didnt even see the actual GPO, For Windows XP Professional Only. Duh!
So despite what the network connection control panel states, the XP machine is actually using the GPO setting for DNS? I wonder if its by design that the control panel doesnt reflect the GPO setting but rather continues to show the DHCP setting.
Thanks Deji!
"Akomolafe, Deji" <deji@readymaids.com> wrote: Like I said, this settings is only for XP machines. Anything other than XP will not use it. I haven't tested Vista, so I am not sure of the behavior here. When I had to do similar things for W2K and W2K3 machines, I had used scripting. See http://www.activexperts.com/activmonitor/windowsmanagement/adminscripts/networking/client/#ConfigDnsServer.htm
Sincerely,
_____
(, / | /) /) /)
/---| (/_ ______ ___// _ // _
) / |_/(__(_) // (_(_)(/_(_(_/(__(/_
(_/ /)
(/
Microsoft MVP - Directory Services
www.akomolafe.name - we know IT
-5.75, -3.23
Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon
________________________________
From: ActiveDir-owner@mail.activedir.org [ActiveDir-owner@mail.activedir.org] On Behalf Of Rand Salazar [rmscheck@yahoo.com]
Sent: Tuesday, April 29, 2008 10:36 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] GPO to Control Client DNS Servers
Ah ha.. On WinXP, nslookup pulls up the GPO assigned setting. Interesting! Perhaps the network configuration display only shows the actual interface setting?
The weird thing is the 2003 Server client, nslookup still shows the DHCP assigned setting.
So is it safe to assume the XP client is using the GPO set DNS servers despite what ipconfig and the control panels say?
Guy Teverovsky wrote:
If you type nslookup + Enter, what DNS server are you pointed to ? The one from DHCP or the one from the GPO ?
I could be wrong, but I can almost bet there were some issues with ipconfig.exe incorrectly reporting IP settings that were applied via GPO, while the resolver was actually doing the right thing.
Guy
From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Rand Salazar
Sent: Tuesday, April 29, 2008 7:22 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] GPO to Control Client DNS Servers
Thanks! Same thing occurred. I took a fresh machine with no trace of the GPO/registry values, and the same symptoms showed. It added the DNSClient entry (aka GPO applied), and the ipconfig still showed DHCP assigned.
Hmmm.. weird.
"Akomolafe, Deji" wrote:
I'd take a sample machine, delete ALL instances of the non-GPO-assigned servers from the registry, reboot and re-test. Do you notice any difference?
Sincerely,
_____
(, / | /) /) /)
/---| (/_ ______ ___// _ // _
) / |_/(__(_) // (_(_)(/_(_(_/(__(/_
(_/ /)
(/
Microsoft MVP - Directory Services
www.akomolafe.name - we know IT
-5.75, -3.23
Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon
________________________________
From: ActiveDir-owner@mail.activedir.org [ActiveDir-owner@mail.activedir.org] On Behalf Of Rand Salazar [rmscheck@yahoo.com]
Sent: Tuesday, April 29, 2008 8:40 AM
To: Active Dir
Subject: [ActiveDir] GPO to Control Client DNS Servers
I've been messing with the GPO for DNS Servers... I want it to set DNS servers for (select) clients despite what they receive via DHCP.
Well, for t hese clients, I have confirmed the policy is being applied (via rsop, gpresult), however, ipconfig tells me otherwise. Ipconfig still shows the DHCP assigned DNS servers.
The value I specified in the GPO is also in the registry entry under DNSClient..
What gives?
________________________________
Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try it now.
________________________________
Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try it now.
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ma/default.aspx
---------------------------------
Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try it now.
| | | |
| deji
Posts:140
| | 04/29/2008 3:15 PM |
| It is by design. OK, I should say, that's the way it's always been so, if it were a bug, they would have fixed it 
Sincerely,
_____
(, / | /) /) /)
/---| (/_ ______ ___// _ // _
) / |_/(__(_) // (_(_)(/_(_(_/(__(/_
(_/ /)
(/
Microsoft MVP - Directory Services
www.akomolafe.name<http://www.akomolafe.name/> - we know IT
-5.75, -3.23
Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon
________________________________
From: ActiveDir-owner@mail.activedir.org [ActiveDir-owner@mail.activedir.org] On Behalf Of Rand Salazar [rmscheck@yahoo.com]
Sent: Tuesday, April 29, 2008 11:59 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] GPO to Control Client DNS Servers
Doh! I didnt even see the actual GPO, For Windows XP Professional Only. Duh!
So despite what the network connection control panel states, the XP machine is actually using the GPO setting for DNS? I wonder if its by design that the control panel doesnt reflect the GPO setting but rather continues to show the DHCP setting.
Thanks Deji!
"Akomolafe, Deji" <deji@readymaids.com> wrote:
Like I said, this settings is only for XP machines. Anything other than XP will not use it. I haven't tested Vista, so I am not sure of the behavior here. When I had to do similar things for W2K and W2K3 machines, I had used scripting. See http://www.activexperts.com/activmonitor/windowsmanagement/adminscripts/networking/client/#ConfigDnsServer.htm
Sincerely,
_____
(, / | /) /) /)
/---| (/_ ______ ___// _ // _
) / |_/(__(_) // (_(_)(/_(_(_/(__(/_
(_/ /)
(/
Microsoft MVP - Directory Services
www.akomolafe.name - we know IT
-5.75, -3.23
Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon
________________________________
From: ActiveDir-owner@mail.activedir.org [ActiveDir-owner@mail.activedir.org] On Behalf Of Rand Salazar [rmscheck@yahoo.com]
Sent: Tuesday, April 29, 2008 10:36 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] GPO to Control Client DNS Servers
Ah ha.. On WinXP, nslookup pulls up the GPO assigned setting. Interesting! Perhaps the network configuration display only shows the actual interface setting?
The weird thing is the 2003 Server client, nslookup still shows the DHCP assigned setting.
So is it safe to assume the XP client is using the GPO set DNS servers despite what ipconfig and the control panels say?
Guy Teverovsky wrote:
If you type “nslookup” + Enter, what DNS server are you pointed to ? The one from DHCP or the one from the GPO ?
I could be wrong, but I can almost bet there were some issues with ipconfig.exe incorrectly reporting IP settings that were applied via GPO, while the resolver was actually doing the right thing.
Guy
From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Rand Salazar
Sent: Tuesday, April 29, 2008 7:22 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] GPO to Control Client DNS Servers
Thanks! Same thing occurred. I took a fresh machine with no trace of the GPO/registry values, and the same symptoms showed. It added the DNSClient entry (aka GPO applied), and the ipconfig still showed DHCP assigned.
Hmmm.. weird.
"Akomolafe, Deji" wrote:
I'd take a sample machine, delete ALL instances of the non-GPO-assigned servers from the registry, reboot and re-test. Do you notice any difference?
Sincerely,
_____
(, / | /) /) /)
/---| (/_ ______ ___// _ // _
) / |_/(__(_) // (_(_)(/_(_(_/(__(/_
(_/ /)
(/
Microsoft MVP - Directory Services
www.akomolafe.name - we know IT
-5.75, -3.23
Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon
________________________________
From: ActiveDir-owner@mail.activedir.org [ActiveDir-owner@mail.activedir.org] On Behalf Of Rand Salazar [rmscheck@yahoo.com]
Sent: Tuesday, April 29, 2008 8:40 AM
To: Active Dir
Subject: [ActiveDir] GPO to Control Client DNS Servers
I've been messing with the GPO for DNS Servers... I want it to set DNS servers for (select) clients despite what they receive via DHCP.
Well, for t hese clients, I have confirmed the policy is being applied (via rsop, gpresult), however, ipconfig tells me otherwise. Ipconfig still shows the DHCP assigned DNS servers.
The value I specified in the GPO is also in the registry entry under DNSClient..
What gives?
________________________________
Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try it now.
________________________________
Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try it now.
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ma/default.aspx
________________________________
Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try it now.<http://us.rd.yahoo.com/evt=51733/*http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ>
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ma/default.aspx
| | | |
| darren
Posts:168
| | 04/29/2008 3:20 PM |
| I have seen this behavior in the past (distant past on NT4) where ipconfig
reports something different from settings that were defined automatically
elsewhere. I can't for the life of me remember how to "sync" them up and it
may not be the exact same issue in this case, but yes, this is probably
"expected" behavior.
Darren
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Rand Salazar
Sent: Tuesday, April 29, 2008 10:37 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] GPO to Control Client DNS Servers
Ah ha.. On WinXP, nslookup pulls up the GPO assigned setting. Interesting!
Perhaps the network configuration display only shows the actual interface
setting?
The weird thing is the 2003 Server client, nslookup still shows the DHCP
assigned setting.
So is it safe to assume the XP client is using the GPO set DNS servers
despite what ipconfig and the control panels say?
Guy Teverovsky <guyt@smartx.co.il> wrote:
If you type "nslookup" + Enter, what DNS server are you pointed to ? The one
from DHCP or the one from the GPO ?
I could be wrong, but I can almost bet there were some issues with
ipconfig.exe incorrectly reporting IP settings that were applied via GPO,
while the resolver was actually doing the right thing.
Guy
From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Rand Salazar
Sent: Tuesday, April 29, 2008 7:22 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] GPO to Control Client DNS Servers
Thanks! Same thing occurred. I took a fresh machine with no trace of the
GPO/registry values, and the same symptoms showed. It added the DNSClient
entry (aka GPO applied), and the ipconfig still showed DHCP assigned.
Hmmm.. weird.
"Akomolafe, Deji" <deji@readymaids.com> wrote:
I'd take a sample machine, delete ALL instances of the non-GPO-assigned
servers from the registry, reboot and re-test. Do you notice any difference?
Sincerely,
_____
(, / | /) /) /)
/---| (/_ ______ ___// _ // _
) / |_/(__(_) // (_(_)(/_(_(_/(__(/_
(_/ /)
(/
Microsoft MVP - Directory Services
www.akomolafe.name - we know IT
-5.75, -3.23
Do you now realize that Today is the Tomorrow you were worried about
Yesterday? -anon
________________________________
From: ActiveDir-owner@mail.activedir.org
[ActiveDir-owner@mail.activedir.org] On Behalf Of Rand Salazar
[rmscheck@yahoo.com]
Sent: Tuesday, April 29, 2008 8:40 AM
To: Active Dir
Subject: [ActiveDir] GPO to Control Client DNS Servers
I've been messing with the GPO for DNS Servers... I want it to set DNS
servers for (select) clients despite what they receive via DHCP.
Well, for t hese clients, I have confirmed the policy is being applied (via
rsop, gpresult), however, ipconfig tells me otherwise. Ipconfig still shows
the DHCP assigned DNS servers.
The value I specified in the GPO is also in the registry entry under
DNSClient..
What gives?
_____
Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try
<http://us.rd.yahoo.com/evt=51733/*http:/mobile.yahoo.com/;_ylt=Ahu06i62sR8H
DtDypao8Wcj9tAcJ%20> it now.
_____
Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try
<http://us.rd.yahoo.com/evt=51733/*http:/mobile.yahoo.com/;_ylt=Ahu06i62sR8H
DtDypao8Wcj9tAcJ%20> it now.
| | | |
| rmscheck
Posts:66
| | 04/29/2008 3:25 PM |
| Sadly no, the GPO applied settings are nowhere to be found in the typical spots (ie. ipconfig, netsh, network control panel). All you find there are the DHCP assigned settings. My only confirmation that the XP system is using the GPO settings is by looking at the specific registry key and running nslookup. At that point I am just trusting that the system is actually using the GPO DNS for normal consumption.
Guy Teverovsky <guyt@smartx.co.il> wrote: v\:* {behavior:url(#default#VML);} o\:* {behavior:url(#default#VML);} w\:* {behavior:url(#default#VML);} .shape {behavior:url(#default#VML);} Do you see the GPO applied settings in ipconfig /all on XP ?
The GUI will always show you the non-GPO settings and this is expected and partially makes sense (depending on your point of view if the GPO is removed, you want to know to what settings you are reverting to). Its up to ipconfig.exe to show the actual settings.
Guy
From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Rand Salazar
Sent: Tuesday, April 29, 2008 9:59 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] GPO to Control Client DNS Servers
Doh! I didnt even see the actual GPO, For Windows XP Professional Only. Duh!
So despite what the network connection control panel states, the XP machine is actually using the GPO setting for DNS? I wonder if its by design that the control panel doesnt reflect the GPO setting but rather continues to show the DHCP setting.
Thanks Deji!
"Akomolafe, Deji" <deji@readymaids.com> wrote:
Like I said, this settings is only for XP machines. Anything other than XP will not use it. I haven't tested Vista, so I am not sure of the behavior here. When I had to do similar things for W2K and W2K3 machines, I had used scripting. See http://www.activexperts.com/activmonitor/windowsmanagement/adminscripts/networking/client/#ConfigDnsServer.htm
Sincerely,
_____
(, / | /) /) /)
/---| (/_ ______ ___// _ // _
) / |_/(__(_) // (_(_)(/_(_(_/(__(/_
(_/ /)
(/
Microsoft MVP - Directory Services
www.akomolafe.name - we know IT
-5.75, -3.23
Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon
________________________________
From: ActiveDir-owner@mail.activedir.org [ActiveDir-owner@mail.activedir.org] On Behalf Of Rand Sal azar [rmscheck@yahoo.com]
Sent: Tuesday, April 29, 2008 10:36 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] GPO to Control Client DNS Servers
Ah ha.. On WinXP, nslookup pulls up the GPO assigned setting. Interesting! Perhaps the network configuration display only shows the actual interface setting?
The weird thing is the 2003 Server client, nslookup still shows the DHCP assigned setting.
So is it safe to assume the XP client is using the GPO set DNS servers despite what ipconfig and the control panels say?
Guy Teverovsky wrote:
If you type nslookup + Enter, what DNS server are you pointed to ? The one from DHCP or the one from the GPO ?
I could be wrong, but I can almost bet there were some issues with ipconfig.exe incorrectly reporting IP settings that were applied via GPO, while the resolver was actually doing the right thing.
Guy
From: ActiveDir-owner@mail.activedir. org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Rand Salazar
Sent: Tuesday, April 29, 2008 7:22 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] GPO to Control Client DNS Servers
Thanks! Same thing occurred. I took a fresh machine with no trace of the GPO/registry values, and the same symptoms showed. It added the DNSClient entry (aka GPO applied), and the ipconfig still showed DHCP assigned.
Hmmm.. weird.
"Akomolafe, Deji" wrote:
I'd take a sample machine, delete ALL instances of the non-GPO-assigned servers from the registry, reboot and re-test. Do you notice any difference?
Sincerely,
_____
(, / | /) /) /)
/---| (/_ ______ ___// _ // _
) / |_/(__(_) // (_(_)(/_(_(_/(__(/_
(_/ /)
(/
Microsoft MVP - Directory Services
www.akomolafe.name - we know IT
-5.75, -3.23
Do you now realize that Today is the Tomorrow you were worried about Yesterday? -anon
________________________________
From: ActiveDir-owner@mail.activedir.org [ActiveDir-owner@mail.activedir.org] On Behalf Of Rand Salazar [rmscheck@yahoo.com]
Sent: Tuesday, April 29, 2008 8:40 AM
To: Active Dir
Subject: [ActiveDir] GPO to Control Client DNS Servers
I've been messing with the GPO for DNS Servers... I want it to set DNS servers for (select) clients despite what they receive via DHCP.
Well, for t hese clients, I have confirmed the policy is being applied (via rsop, gpresult), however, ipconfig tells me otherwise. Ipconfig still shows the DHCP assigned DNS servers.
The value I specified in the GPO is also in the registry entry under DNSClient..
What gives?
________________________________
Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try it now.
< br>________________________________
Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try it now.
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ma/default.aspx
---------------------------------
Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try it now.
---------------------------------
Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try it now.
| | | |
| smc808
Posts:6
| | 04/29/2008 7:17 PM |
| <html><body>Funny you mention this.. We've had the same phenomenon at my place. It wasn't until I saw no change to the actual interface config that I remembered we had the same issue from back in the NT and 2000 days. If you want to verify what DNS server the client is hitting, I suppose you could run a network trace of sorts to confirm. Yes, who says we have to trust MS :p
________________________________
<div><b><span style="font-size: 10pt; font-family: "Tahoma","sans-serif";">From:</span></b><span style="font-size: 10pt; font-family: "Tahoma","sans-serif";"> <a href="javascript:window.location.replace('ma'+'ilto:'+'ActiveDir-owner'+'@'+'mail'+'.activedir')".org">ActiveDir-owner@mail.activedir.org</a>
[<a href="javascript:window.location.replace('ma'+'ilto:'+'ActiveDir-owner'+'@'+'mail'+'.activedir')".org">mailto:ActiveDir-owner@mail.activedir.org</a>] <b>On Behalf Of </b>Rand Salazar
<b>Sent:</b> Tuesday, April 29, 2008 2:22 PM
<b>To:</b> <a href="javascript:window.location.replace('ma'+'ilto:'+'ActiveDir'+'@'+'mail'+'.activedir')".org">ActiveDir@mail.activedir.org</a>
<b>Subject:</b> RE: [ActiveDir] GPO to Control Client DNS Servers<o:p></o:p></span></div>
<div><o:p> </o:p></div>
<div>Sadly no, the GPO applied settings are nowhere to be found
in the typical spots (ie. ipconfig, netsh, network control panel). All
you find there are the DHCP assigned settings. My only confirmation that
the XP system is using the GPO settings is by looking at the specific registry
key and running nslookup. At that point I am just trusting that the
system is actually using the GPO DNS for normal consumption.
<b><i>Guy Teverovsky <<a href="javascript:window.location.replace('ma'+'ilto:'+'guyt'+'@'+'smartx'+'.co')">guyt@smartx.co</a>.il></i></b> wrote:<o:p></o:p></div>
<div><span style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);">Do you see the GPO applied settings in ipconfig /all on XP ?</span><o:p></o:p></div>
<div><span style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);">The GUI will always show you the non-GPO settings and this is
expected and partially makes sense (depending on your point of view – if the
GPO is removed, you want to know to what settings you are reverting to). It’s
up to ipconfig.exe to show the actual settings.</span><o:p></o:p></div>
<div><span style="font-size: 11pt; font-family: "Calibri","sans-serif";"> </span><o:p></o:p></div>
<div><span style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);">Guy</span><o:p></o:p></div>
<div><span style="font-size: 11pt; font-family: "Calibri","sans-serif"; color: rgb(31, 73, 125);"></span>________________________________<o:p></o:p></div>
<div><b><span style="font-size: 10pt; font-family: "Tahoma","sans-serif";">From:</span></b><span style="font-size: 10pt; font-family: "Tahoma","sans-serif";">
<a href="javascript:window.location.replace('ma'+'ilto:'+'ActiveDir-owner'+'@'+'mail'+'.activedir')".org">ActiveDir-owner@mail.activedir.org</a> [<a href="javascript:window.location.replace('ma'+'ilto:'+'ActiveDir-owner'+'@'+'mail'+'.activedir')".org">mailto:ActiveDir-owner@mail.activedir.org</a>] <b>On
Behalf Of </b>Rand Salazar
<b>Sent:</b> Tuesday, April 29, 2008 9:59 PM
<b>To:</b> <a href="javascript:window.location.replace('ma'+'ilto:'+'ActiveDir'+'@'+'mail'+'.activedir')".org">ActiveDir@mail.activedir.org</a>
<b>Subject:</b> RE: [ActiveDir] GPO to Control Client DNS Servers</span><o:p></o:p></div>
<div> <o:p></o:p></div>
<div>Doh! I didnt even see the actual GPO, For Windows XP
Professional Only. Duh!
So despite what the network connection control panel states, the XP machine is
actually using the GPO setting for DNS? I wonder if its by design that
the control panel doesnt reflect the GPO setting but rather continues to show
the DHCP setting.
Thanks Deji!
<b><i>"Akomolafe, Deji" <deji@readymaids.com></i></b> wrote:<o:p></o:p></div>
<div>Like I said, this settings is only for XP machines. Anything
other than XP will not use it. I haven't tested Vista, so I am not sure of the
behavior here. When I had to do similar things for W2K and W2K3 machines, I had
used scripting. See
<a href="http://www.activexperts.com/activmonitor/windowsmanagement/adminscripts/networking/client/#ConfigDnsServer.htm">http://www.activexperts.com/activmonitor/windowsmanagement/adminscripts/networking/client/#ConfigDnsServer.htm</a>
Sincerely,
_____
(, / | /) /) /)
/---| (/_ ______ ___// _ // _
) / |_/(__(_) // (_(_)(/_(_(_/(__(/_
(_/ /)
(/
Microsoft MVP - Directory Services
<a href="http://www.akomolafe.name">www.akomolafe.name</a> - we know IT
-5.75, -3.23
Do you now realize that Today is the Tomorrow you were worried about Yesterday?
-anon
________________________________
From: <a href="javascript:window.location.replace('ma'+'ilto:'+'ActiveDir-owner'+'@'+'mail'+'.activedir')".org">ActiveDir-owner@mail.activedir.org</a> [ActiveDir-owner@mail.activedir.org]
On Behalf Of Rand Sal azar [rmscheck@yahoo.com]
Sent: Tuesday, April 29, 2008 10:36 AM
To: <a href="javascript:window.location.replace('ma'+'ilto:'+'ActiveDir'+'@'+'mail'+'.activedir')".org">ActiveDir@mail.activedir.org</a>
Subject: RE: [ActiveDir] GPO to Control Client DNS Servers
Ah ha.. On WinXP, nslookup pulls up the GPO assigned setting. Interesting!
Perhaps the network configuration display only shows the actual interface
setting?
The weird thing is the 2003 Server client, nslookup still shows the DHCP
assigned setting.
So is it safe to assume the XP client is using the GPO set DNS servers despite
what ipconfig and the control panels say?
Guy Teverovsky wrote:
If you type “nslookup” + Enter, what DNS server are you pointed to ? The one
from DHCP or the one from the GPO ?
I could be wrong, but I can almost bet there were some issues with ipconfig.exe
incorrectly reporting IP settings that were applied via GPO, while the resolver
was actually doing the right thing.
Guy
________________________________
From: <a href="javascript:window.location.replace('ma'+'ilto:'+'ActiveDir-owner'+'@'+'mail'+'.activedir')">ActiveDir-owner@mail.activedir</a>. org
[<a href="javascript:window.location.replace('ma'+'ilto:'+'ActiveDir-owner'+'@'+'mail'+'.activedir')".org">mailto:ActiveDir-owner@mail.activedir.org</a>] On Behalf Of Rand Salazar
Sent: Tuesday, April 29, 2008 7:22 PM
To: <a href="javascript:window.location.replace('ma'+'ilto:'+'ActiveDir'+'@'+'mail'+'.activedir')".org">ActiveDir@mail.activedir.org</a>
Subject: RE: [ActiveDir] GPO to Control Client DNS Servers
Thanks! Same thing occurred. I took a fresh machine with no trace of the
GPO/registry values, and the same symptoms showed. It added the DNSClient entry
(aka GPO applied), and the ipconfig still showed DHCP assigned.
Hmmm.. weird.
"Akomolafe, Deji" wrote:
I'd take a sample machine, delete ALL instances of the non-GPO-assigned servers
from the registry, reboot and re-test. Do you notice any difference?
Sincerely,
_____
(, / | /) /) /)
/---| (/_ ______ ___// _ // _
) / |_/(__(_) // (_(_)(/_(_(_/(__(/_
(_/ /)
(/
Microsoft MVP - Directory Services
<a href="http://www.akomolafe.name">www.akomolafe.name</a> - we know IT
-5.75, -3.23
Do you now realize that Today is the Tomorrow you were worried about Yesterday?
-anon
________________________________
From: <a href="javascript:window.location.replace('ma'+'ilto:'+'ActiveDir-owner'+'@'+'mail'+'.activedir')".org">ActiveDir-owner@mail.activedir.org</a> [ActiveDir-owner@mail.activedir.org]
On Behalf Of Rand Salazar [rmscheck@yahoo.com]
Sent: Tuesday, April 29, 2008 8:40 AM
To: Active Dir
Subject: [ActiveDir] GPO to Control Client DNS Servers
I've been messing with the GPO for DNS Servers... I want it to set DNS servers
for (select) clients despite what they receive via DHCP.
Well, for t hese clients, I have confirmed the policy is being applied (via
rsop, gpresult), however, ipconfig tells me otherwise. Ipconfig still shows the
DHCP assigned DNS servers.
The value I specified in the GPO is also in the registry entry under
DNSClient..
What gives?
</div><div class="MsoNormal" style="font-size:12pt;">
<b><i></i></b></div>
</body></html>
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ma/default.aspx
| | | |
|
|