Re: Authorizing Non Domain Computer to Access DNS?

"W" <> wrote in message
news: ...
> On one of our domains, our UPS systems (which are realtime networked
> computers that are not part of a Microsoft domain) are able to resolve DNS
> using our domain controller. On another one of our domains, our UPS
> systems attempt to resolve a hostname from DNS and get a server rejection
> from the domain controller. We are guessing security must be tighter on
> the second domain compared to the first.
>
> What is required to have a Microsoft domain controller running on Windows
> 2003 reply to a DNS request that originates from a non-Microsoft OS, not
> in the domain?
>
> --
> W
>
>


Any machine (AD client or not), can use any DNS server as long as the DNS
server allows recursion. This is a default setting.

My feeling is the UPS is trying to register it's info into the zone, and the
zone is set to Secure updates only, which uses Kerberos to authenticate,
which only domain machines support.

The other thing I can think of is that the zone name to update into is not
configured properly on the UPS.

Or it's a combination of both the above.


--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Please reply back to the newsgroup or forum for collaboration benefit among
responding engineers, and to help others benefit from your resolution.

Ace Fekay, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE & MCSA
2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer

For urgent issues, please contact Microsoft PSS directly. Please check
http://support.microsoft.com for regional support phone numbers.