Key Name: SecureResponses
Type: DWORD (Boolean)
Default: NoKey (No secureresponses)
Value: 0 (The DNS server saves all name query records in its memory cache)
1 (The DNS server saves only those NS records that are in the same
subtree of origination dns server)
To set value of this key, then run
reg add HKLM\SYSTEM\CurrentControlSet\Services\DNS\Parameters" /v SecureResponses /t reg_dword /d 1
Note, The changes through regedit.exe are will be effective only after restarting the DNS server.
To change secureresponses with out restarting dns server, do the following
1. Open DNS manager using dnsmgmt.msc command
2. In the dns manager console tree, right click on the dns server node and click properties.
3. In the dns server properties dialog, go to AdvancedTab and check "Secure cache against pollution" option, click apply and finally click OK button.
Key Name: ForwardDelegationsBy default, whenever a DNS server receives a dns query for a normal zone(not a delegated zone) name outside its authoritative zone, it simply forwards to a similar name server outside of its zone. However, when it receives a query for a delegated subzone, it sends the query directly to the delegated subzone and does not forward it.
Type: DWORD (Boolean)
Default: NoKey (doesnot forward delegations.)
To set Local Net Priority to windows 2000 mode, then set the reg key to 0x00FFFFFF.
reg add "HKLM\SYSTEM\CurrentControlSet\Services\DNS\parameters" /v LocalNetPriority /t REG_DWORD /d 0x00FFFFFF
Host A Responses with Matching Subnet Mask "S" | Host A response but with different subnet masks |
Load balancing: if the DNS server sends Host A records in the same proximity order every time a dns query repeats from a dns client,Then the hosts which are first in order list will receive more load than hosts which are in last position. To alleviate this problem, DNS server sends Host A type records in round robin fashion.
In windows 2003 and windows 2008, load balancing is improved further. The following illustrates the improved behavior.
Suppose, In an orgainisation, or In WAN environment, internet address space can be organized in to Class A, Class B or even in Class C addresses. Using the default behavior of Address Proximity, Class B and Class C Host A records may not in the Proximity Address list even though the Class B and C addresses are physically nearer to the client. To address this issue, All addresses with matching 24 most significant bits will put in "Proximity Address List".
The following load balancing modes are supported in windows 2003 and windows 2008.
Default mode: In this mode, 24 most significant bits used to find proximity list.
Backport mode: In this mode, Address Proximity list is calculated using traditional windows 2000 behavior.
Extended Mode: In this mode, variable no of most significant bits can be used to find proximity address list.
Note: In windows 2000, load balancing using round rabin is applied only to Type "A" dns responses. But In windows 2003 and 2008 round rabbin is applied to all types of dns responses.
Relevant Posts:
set localnetpriority using dnscmd
Local Net Prioriry Registry Key
round-robin vs localnetpriority
The following vb script join a client machine in to a domain.
1. Assume client machine name is "dnsclient, domain is "myrootdns2003.com", domain user with admin preveleges is administrator@myrootdns2003.com,
domain user password is "Mydns123"
2. Then run the below script (joindomain.wsf) on command prompt as
joindomain.wsf dnsclient /NWname:"myrootdns2003.com" /user:"Administrator" /Password:"Mydns123" /NWType:"1"
'###################################################
' Join Domain - joindomain.wsf
'###################################################
Password = ""
UserName = ""
DomainWG = ""
NWType = "1"
Call SetLogLevel()
Call SetVars()
Function ExecuteWMICommand(WMIEchoStr)
Set objWMIService = GetObject("winmgmts:\root\cimv2")
Set SystemInstances = objWMIService.ExecQuery("Select * from Win32_ComputerSystem")
For Each Instance in SystemInstances
TraceLog "Credentials: " & DomainWG & "|" & Password & "|" & UserName & "|" & "|" &NWType
ExecuteWMICommand = Instance.joinDomainOrWorkgroup(DomainWG,Password,UserName,NULL,NWType)
Next
WMIEchoStr = DomainWG
End Function
Function ExecuteValidationCommand(ValidationEchoStr)
If ( NWType = "1" ) then
'Join to domain
OutStr = ExecCommand( "net config workstation | Findstr Domain")
Else
'Join to Workgroup
OutStr = ExecCommand( "net config workstation | Findstr Workstation.domain")
End If
ValidationEchoStr = StringGetLastWord (OutStr)
ExecuteValidationCommand = "0"
End Function
Function CompareResults(WMIReturn, WMIEchoStr, ValidationReturn, ValidationEchoStr, OperationResultStr )
OperationResultStr = "Machine join failed"
CompareResults = OperationFailure
If StrComp(WMIReturn,ValidationReturn,1) = 0 Then
if StrComp(ValidationEchoStr,WMIEchoStr,1) = 0 Then
CompareResults = OperationSucess
OperationResultStr = "Machine joined successfully"
End If
End If
End Function
Sub SetVars ()
Set colNamedArguments = WScript.Arguments.Named
UserName = colNamedArguments.Item("User")
Password = colNamedArguments.Item("Password")
DomainWG = colNamedArguments.Item("NWName")
NWType = colNamedArguments.Item("NWType")
if ( StrComp ( NWType,"0",1 ) = 0 ) then
NWType = 0
Else
NWType = "1"
End if
End Sub
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
Design by infinityskins.blogspot
