1. Welcome Guest! In order to create a new topic or reply to an existing one, you must register first. It is easy and free. Click here to sign up now!.
    Dismiss Notice

group policy and DNS

Discussion in 'Windows Home Server' started by Peter Hatzis, Aug 12, 2009.

  1. Peter Hatzis

    Peter Hatzis Guest

    Hello. Can i configure a group policy so that client's dns settings are
    configured by this policy? The domain is 2003 and the clients XP mostly and
    few Vista.
    Regards, Peter
     
  2. You should use DHCP. That is the tool you use to give clients DNS settings.

    hth
    DDS

    "Peter Hatzis" <jkatsor2000@yahoo.com> wrote in message
    news:%23VSXac1GKHA.4376@TK2MSFTNGP03.phx.gbl...<!--coloro:blue--><span style="color:blue <!--/coloro-->
    > Hello. Can i configure a group policy so that client's dns settings are
    > configured by this policy? The domain is 2003 and the clients XP mostly
    > and few Vista.
    > Regards, Peter <!--colorc--><!--/colorc-->
     
  3. "Anthony [MVP]" <anthony@no-reply.com> wrote in message
    news:CCB10D5A-E14A-48E9-9B73-F3DF2D2E9DD7@microsoft.com...<!--coloro:blue--><span style="color:blue <!--/coloro-->
    >I agree with Danny.
    > The point about IP settings is that they apply before you authenticate to
    > any domain.<!--colorc--><!--/colorc-->

    And to add, the DNS settings are used to 'find' the domain controllers in
    the domain.

    So putting them into a GPO is pointless. Chicken before the egg. :)

    Cheers!

    Ace
     
  4. Peter Hatzis

    Peter Hatzis Guest

    Hello everyone. The case is that th IP adresss of the DNS has changed and
    the clients use static ip addresses and DNS, so i can't use DHCP. To avoid
    connection problems i thought to configure dns in a GPO temporarily. is this
    possible?

    Thanks, Peter


    "Ace Fekay [MCT]" <aceman@mvps.RemoveThisPart.org> wrote in message
    news:OySgwR4GKHA.4416@TK2MSFTNGP04.phx.gbl...<!--coloro:blue--><span style="color:blue <!--/coloro-->
    > "Anthony [MVP]" <anthony@no-reply.com> wrote in message
    > news:CCB10D5A-E14A-48E9-9B73-F3DF2D2E9DD7@microsoft.com...<!--coloro:green--><span style="color:green <!--/coloro-->
    >>I agree with Danny.
    >> The point about IP settings is that they apply before you authenticate to
    >> any domain.<!--colorc--><!--/colorc-->
    >
    > And to add, the DNS settings are used to 'find' the domain controllers in
    > the domain.
    >
    > So putting them into a GPO is pointless. Chicken before the egg. :)
    >
    > Cheers!
    >
    > Ace
    >
    > <!--colorc--><!--/colorc-->
     
  5. Hello Peter,

    Use a scripting solution with a batch file:

    netsh interface ip set dns "Local Area Connection" static 192.168.10.10 primary

    Of course you need a running DNS so that a GPO with that startup script can
    apply. And do some TESTs before.

    See also:




    Best regards

    Meinolf Weber
    Disclaimer: This posting is provided "AS IS" with no warranties, and confers
    no rights.
    ** Please do NOT email, only reply to Newsgroups
    ** HELP us help YOU!!!


    <!--coloro:blue--><span style="color:blue <!--/coloro-->
    > Hello everyone. The case is that th IP adresss of the DNS has changed
    > and the clients use static ip addresses and DNS, so i can't use DHCP.
    > To avoid connection problems i thought to configure dns in a GPO
    > temporarily. is this possible?
    >
    > Thanks, Peter
    >
    > "Ace Fekay [MCT]" <aceman@mvps.RemoveThisPart.org> wrote in message
    > news:OySgwR4GKHA.4416@TK2MSFTNGP04.phx.gbl...
    > <!--coloro:green--><span style="color:green <!--/coloro-->
    >> "Anthony [MVP]" <anthony@no-reply.com> wrote in message
    >> news:CCB10D5A-E14A-48E9-9B73-F3DF2D2E9DD7@microsoft.com...
    >> <!--coloro:darkred--><span style="color:darkred <!--/coloro-->
    >>> I agree with Danny.
    >>> The point about IP settings is that they apply before you
    >>> authenticate to
    >>> any domain.<!--colorc--><!--/colorc-->
    >> And to add, the DNS settings are used to 'find' the domain
    >> controllers in the domain.
    >>
    >> So putting them into a GPO is pointless. Chicken before the egg. :)
    >>
    >> Cheers!
    >>
    >> Ace
    >> <!--colorc--><!--/colorc--><!--colorc--><!--/colorc-->
     
  6. Peter Hatzis

    Peter Hatzis Guest

    Hi. I think there was already in 2003's gpo's. But perhaps i'v seen it in
    2008 server. not sure. anyway, thanks a lot!!!

    "Meinolf Weber [MVP-DS]" <meiweb(nospam)@gmx.de> wrote in message
    news:ff16fb662d3118cbea07f94643ac@msnews.microsoft.com...<!--coloro:blue--><span style="color:blue <!--/coloro-->
    > Hello Peter,
    >
    > Use a scripting solution with a batch file:
    >
    > netsh interface ip set dns "Local Area Connection" static 192.168.10.10
    > primary
    >
    > Of course you need a running DNS so that a GPO with that startup script
    > can apply. And do some TESTs before.
    >
    > See also:
    >
    >
    >

    >
    > Best regards
    >
    > Meinolf Weber
    > Disclaimer: This posting is provided "AS IS" with no warranties, and
    > confers no rights.
    > ** Please do NOT email, only reply to Newsgroups
    > ** HELP us help YOU!!!

    ><!--coloro:green--><span style="color:green <!--/coloro-->
    >> Hello everyone. The case is that th IP adresss of the DNS has changed
    >> and the clients use static ip addresses and DNS, so i can't use DHCP.
    >> To avoid connection problems i thought to configure dns in a GPO
    >> temporarily. is this possible?
    >>
    >> Thanks, Peter
    >>
    >> "Ace Fekay [MCT]" <aceman@mvps.RemoveThisPart.org> wrote in message
    >> news:OySgwR4GKHA.4416@TK2MSFTNGP04.phx.gbl...
    >><!--coloro:darkred--><span style="color:darkred <!--/coloro-->
    >>> "Anthony [MVP]" <anthony@no-reply.com> wrote in message
    >>> news:CCB10D5A-E14A-48E9-9B73-F3DF2D2E9DD7@microsoft.com...
    >>>
    >>>> I agree with Danny.
    >>>> The point about IP settings is that they apply before you
    >>>> authenticate to
    >>>> any domain.
    >>> And to add, the DNS settings are used to 'find' the domain
    >>> controllers in the domain.
    >>>
    >>> So putting them into a GPO is pointless. Chicken before the egg. :)
    >>>
    >>> Cheers!
    >>>
    >>> Ace
    >>><!--colorc--><!--/colorc--><!--colorc--><!--/colorc-->
    >
    > <!--colorc--><!--/colorc-->
     
  7. Hello Peter,

    You can configure DNS settings per GPO, but i prefer using the local machine.
    Check under:
    Computer configuration, Administrative templates, Network, DNS client "DNS
    servers"

    Best regards

    Meinolf Weber
    Disclaimer: This posting is provided "AS IS" with no warranties, and confers
    no rights.
    ** Please do NOT email, only reply to Newsgroups
    ** HELP us help YOU!!!

    <!--coloro:blue--><span style="color:blue <!--/coloro-->
    > Hi. I think there was already in 2003's gpo's. But perhaps i'v seen it
    > in 2008 server. not sure. anyway, thanks a lot!!!
    >
    > "Meinolf Weber [MVP-DS]" <meiweb(nospam)@gmx.de> wrote in message
    > news:ff16fb662d3118cbea07f94643ac@msnews.microsoft.com...
    > <!--coloro:green--><span style="color:green <!--/coloro-->
    >> Hello Peter,
    >>
    >> Use a scripting solution with a batch file:
    >>
    >> netsh interface ip set dns "Local Area Connection" static
    >> 192.168.10.10 primary
    >>
    >> Of course you need a running DNS so that a GPO with that startup
    >> script can apply. And do some TESTs before.
    >>
    >> See also:
    >>

    >>

    >>
    >> Best regards
    >>
    >> Meinolf Weber
    >> Disclaimer: This posting is provided "AS IS" with no warranties, and
    >> confers no rights.
    >> ** Please do NOT email, only reply to Newsgroups
    >> ** HELP us help YOU!!!
    <!--coloro:darkred--><span style="color:darkred <!--/coloro-->
    >>> Hello everyone. The case is that th IP adresss of the DNS has
    >>> changed and the clients use static ip addresses and DNS, so i can't
    >>> use DHCP. To avoid connection problems i thought to configure dns in
    >>> a GPO temporarily. is this possible?
    >>>
    >>> Thanks, Peter
    >>>
    >>> "Ace Fekay [MCT]" <aceman@mvps.RemoveThisPart.org> wrote in message
    >>> news:OySgwR4GKHA.4416@TK2MSFTNGP04.phx.gbl...
    >>>
    >>>> "Anthony [MVP]" <anthony@no-reply.com> wrote in message
    >>>> news:CCB10D5A-E14A-48E9-9B73-F3DF2D2E9DD7@microsoft.com...
    >>>>
    >>>>> I agree with Danny.
    >>>>> The point about IP settings is that they apply before you
    >>>>> authenticate to
    >>>>> any domain.
    >>>> And to add, the DNS settings are used to 'find' the domain
    >>>> controllers in the domain.
    >>>>
    >>>> So putting them into a GPO is pointless. Chicken before the egg.
    >>>> :)
    >>>>
    >>>> Cheers!
    >>>>
    >>>> Ace
    >>>> <!--colorc--><!--/colorc--><!--colorc--><!--/colorc--><!--colorc--><!--/colorc-->
     
  8. Hello Peter,

    Of course without access to the domain because of wrong/missing DNS you can
    not apply them, as Ace already stated.

    Best regards

    Meinolf Weber
    Disclaimer: This posting is provided "AS IS" with no warranties, and confers
    no rights.
    ** Please do NOT email, only reply to Newsgroups
    ** HELP us help YOU!!!

    <!--coloro:blue--><span style="color:blue <!--/coloro-->
    > Hi. I think there was already in 2003's gpo's. But perhaps i'v seen it
    > in 2008 server. not sure. anyway, thanks a lot!!!
    >
    > "Meinolf Weber [MVP-DS]" <meiweb(nospam)@gmx.de> wrote in message
    > news:ff16fb662d3118cbea07f94643ac@msnews.microsoft.com...
    > <!--coloro:green--><span style="color:green <!--/coloro-->
    >> Hello Peter,
    >>
    >> Use a scripting solution with a batch file:
    >>
    >> netsh interface ip set dns "Local Area Connection" static
    >> 192.168.10.10 primary
    >>
    >> Of course you need a running DNS so that a GPO with that startup
    >> script can apply. And do some TESTs before.
    >>
    >> See also:
    >>

    >>

    >>
    >> Best regards
    >>
    >> Meinolf Weber
    >> Disclaimer: This posting is provided "AS IS" with no warranties, and
    >> confers no rights.
    >> ** Please do NOT email, only reply to Newsgroups
    >> ** HELP us help YOU!!!
    <!--coloro:darkred--><span style="color:darkred <!--/coloro-->
    >>> Hello everyone. The case is that th IP adresss of the DNS has
    >>> changed and the clients use static ip addresses and DNS, so i can't
    >>> use DHCP. To avoid connection problems i thought to configure dns in
    >>> a GPO temporarily. is this possible?
    >>>
    >>> Thanks, Peter
    >>>
    >>> "Ace Fekay [MCT]" <aceman@mvps.RemoveThisPart.org> wrote in message
    >>> news:OySgwR4GKHA.4416@TK2MSFTNGP04.phx.gbl...
    >>>
    >>>> "Anthony [MVP]" <anthony@no-reply.com> wrote in message
    >>>> news:CCB10D5A-E14A-48E9-9B73-F3DF2D2E9DD7@microsoft.com...
    >>>>
    >>>>> I agree with Danny.
    >>>>> The point about IP settings is that they apply before you
    >>>>> authenticate to
    >>>>> any domain.
    >>>> And to add, the DNS settings are used to 'find' the domain
    >>>> controllers in the domain.
    >>>>
    >>>> So putting them into a GPO is pointless. Chicken before the egg.
    >>>> :)
    >>>>
    >>>> Cheers!
    >>>>
    >>>> Ace
    >>>> <!--colorc--><!--/colorc--><!--colorc--><!--/colorc--><!--colorc--><!--/colorc-->
     
  9. "Anthony [MVP]" <anthony@no-reply.com> wrote in message
    news:A6BFE583-52E2-4188-9240-1E0155F69C14@microsoft.com...<!--coloro:blue--><span style="color:blue <!--/coloro-->
    > Peter,
    > I would prefer a scripting solution to make this kind of one-off change,<!--colorc--><!--/colorc-->

    Maybe a script on the desktop that a user can double click on and with a
    prompt to choose which DNS addresses to use?

    Ace
     
  10. Peter Hatzis

    Peter Hatzis Guest

    Hello. The "Computer configuration, Administrative templates, Network, DNS
    client DNS
    servers" is what i was looking for. Bot it doesn't seem to apply to XP
    clients. I realise that the policy will apply after logging in, but should't
    the dns settings change after logon?

    "Meinolf Weber [MVP-DS]" <meiweb(nospam)@gmx.de> wrote in message
    news:ff16fb662d35c8cbea2e7b57e95c@msnews.microsoft.com...<!--coloro:blue--><span style="color:blue <!--/coloro-->
    > Hello Peter,
    >
    > You can configure DNS settings per GPO, but i prefer using the local
    > machine. Check under:
    > Computer configuration, Administrative templates, Network, DNS client "DNS
    > servers"
    >
    > Best regards
    >
    > Meinolf Weber
    > Disclaimer: This posting is provided "AS IS" with no warranties, and
    > confers no rights.
    > ** Please do NOT email, only reply to Newsgroups
    > ** HELP us help YOU!!!
    ><!--coloro:green--><span style="color:green <!--/coloro-->
    >> Hi. I think there was already in 2003's gpo's. But perhaps i'v seen it
    >> in 2008 server. not sure. anyway, thanks a lot!!!
    >>
    >> "Meinolf Weber [MVP-DS]" <meiweb(nospam)@gmx.de> wrote in message
    >> news:ff16fb662d3118cbea07f94643ac@msnews.microsoft.com...
    >><!--coloro:darkred--><span style="color:darkred <!--/coloro-->
    >>> Hello Peter,
    >>>
    >>> Use a scripting solution with a batch file:
    >>>
    >>> netsh interface ip set dns "Local Area Connection" static
    >>> 192.168.10.10 primary
    >>>
    >>> Of course you need a running DNS so that a GPO with that startup
    >>> script can apply. And do some TESTs before.
    >>>
    >>> See also:
    >>>

    >>>

    >>>
    >>> Best regards
    >>>
    >>> Meinolf Weber
    >>> Disclaimer: This posting is provided "AS IS" with no warranties, and
    >>> confers no rights.
    >>> ** Please do NOT email, only reply to Newsgroups
    >>> ** HELP us help YOU!!!

    >>>> Hello everyone. The case is that th IP adresss of the DNS has
    >>>> changed and the clients use static ip addresses and DNS, so i can't
    >>>> use DHCP. To avoid connection problems i thought to configure dns in
    >>>> a GPO temporarily. is this possible?
    >>>>
    >>>> Thanks, Peter
    >>>>
    >>>> "Ace Fekay [MCT]" <aceman@mvps.RemoveThisPart.org> wrote in message
    >>>> news:OySgwR4GKHA.4416@TK2MSFTNGP04.phx.gbl...
    >>>>
    >>>>> "Anthony [MVP]" <anthony@no-reply.com> wrote in message
    >>>>> news:CCB10D5A-E14A-48E9-9B73-F3DF2D2E9DD7@microsoft.com...
    >>>>>
    >>>>>> I agree with Danny.
    >>>>>> The point about IP settings is that they apply before you
    >>>>>> authenticate to
    >>>>>> any domain.
    >>>>> And to add, the DNS settings are used to 'find' the domain
    >>>>> controllers in the domain.
    >>>>>
    >>>>> So putting them into a GPO is pointless. Chicken before the egg.
    >>>>> :)
    >>>>>
    >>>>> Cheers!
    >>>>>
    >>>>> Ace
    >>>>><!--colorc--><!--/colorc--><!--colorc--><!--/colorc-->
    >
    > <!--colorc--><!--/colorc-->
     
  11. Hello Peter,

    This is a computer policy, so it applies during startup. Please run gpresult
    /v or rsop.msc to check if it is applied correct. Also it appplies to XP
    and higher.

    See:


    Best regards

    Meinolf Weber
    Disclaimer: This posting is provided "AS IS" with no warranties, and confers
    no rights.
    ** Please do NOT email, only reply to Newsgroups
    ** HELP us help YOU!!!


    <!--coloro:blue--><span style="color:blue <!--/coloro-->
    > Hello. The "Computer configuration, Administrative templates, Network,
    > DNS
    > client DNS
    > servers" is what i was looking for. Bot it doesn't seem to apply to
    > XP
    > clients. I realise that the policy will apply after logging in, but
    > should't
    > the dns settings change after logon?
    >
    > "Meinolf Weber [MVP-DS]" <meiweb(nospam)@gmx.de> wrote in message
    > news:ff16fb662d35c8cbea2e7b57e95c@msnews.microsoft.com...
    > <!--coloro:green--><span style="color:green <!--/coloro-->
    >> Hello Peter,
    >>
    >> You can configure DNS settings per GPO, but i prefer using the local
    >> machine. Check under:
    >> Computer configuration, Administrative templates, Network, DNS client
    >> "DNS
    >> servers"
    >> Best regards
    >>
    >> Meinolf Weber
    >> Disclaimer: This posting is provided "AS IS" with no warranties, and
    >> confers no rights.
    >> ** Please do NOT email, only reply to Newsgroups
    >> ** HELP us help YOU!!!
    <!--coloro:darkred--><span style="color:darkred <!--/coloro-->
    >>> Hi. I think there was already in 2003's gpo's. But perhaps i'v seen
    >>> it in 2008 server. not sure. anyway, thanks a lot!!!
    >>>
    >>> "Meinolf Weber [MVP-DS]" <meiweb(nospam)@gmx.de> wrote in message
    >>> news:ff16fb662d3118cbea07f94643ac@msnews.microsoft.com...
    >>>
    >>>> Hello Peter,
    >>>>
    >>>> Use a scripting solution with a batch file:
    >>>>
    >>>> netsh interface ip set dns "Local Area Connection" static
    >>>> 192.168.10.10 primary
    >>>>
    >>>> Of course you need a running DNS so that a GPO with that startup
    >>>> script can apply. And do some TESTs before.
    >>>>
    >>>> See also:
    >>>>

    >>>>

    >>>>
    >>>> Best regards
    >>>>
    >>>> Meinolf Weber
    >>>> Disclaimer: This posting is provided "AS IS" with no warranties,
    >>>> and
    >>>> confers no rights.
    >>>> ** Please do NOT email, only reply to Newsgroups
    >>>> ** HELP us help YOU!!!

    >>>>> Hello everyone. The case is that th IP adresss of the DNS has
    >>>>> changed and the clients use static ip addresses and DNS, so i
    >>>>> can't use DHCP. To avoid connection problems i thought to
    >>>>> configure dns in a GPO temporarily. is this possible?
    >>>>>
    >>>>> Thanks, Peter
    >>>>>
    >>>>> "Ace Fekay [MCT]" <aceman@mvps.RemoveThisPart.org> wrote in
    >>>>> message news:OySgwR4GKHA.4416@TK2MSFTNGP04.phx.gbl...
    >>>>>
    >>>>>> "Anthony [MVP]" <anthony@no-reply.com> wrote in message
    >>>>>> news:CCB10D5A-E14A-48E9-9B73-F3DF2D2E9DD7@microsoft.com...
    >>>>>>
    >>>>>>> I agree with Danny.
    >>>>>>> The point about IP settings is that they apply before you
    >>>>>>> authenticate to
    >>>>>>> any domain.
    >>>>>> And to add, the DNS settings are used to 'find' the domain
    >>>>>> controllers in the domain.
    >>>>>>
    >>>>>> So putting them into a GPO is pointless. Chicken before the egg.
    >>>>>> :)
    >>>>>>
    >>>>>> Cheers!
    >>>>>>
    >>>>>> Ace
    >>>>>> <!--colorc--><!--/colorc--><!--colorc--><!--/colorc--><!--colorc--><!--/colorc-->
     

Share This Page