Disable Dynamic Updates using dnscmd

To Disable dynamic updates of all the DNS records, just config the updateoptions to zero(0).

dnscmd /config /UpdateOptions 0x80000000







To enable dynamic update of all the dns records,

dnscmd /config /UpdateOptions 0x0







To set dynamic updates to default, run

dnscmd /config /UpdateOptions 0x30F

Note: in default mode only SOA and zone root NS updates for secure zones is allowed.

To disable dynamic updates for SOA (Start of Authority) records in standard zone,

dnscmd /config /UpdateOptions 0x1

To disable dynamic updates for NS (name server) records in standard zone,

dnscmd /config /UpdateOptions 0x2

To disable dynamic updates for Delegation NS records in standard zone,

dnscmd /config /UpdateOptions 0x4

To disable dynamic updates for Server host A records.

dnscmd /config /UpdateOptions 0x8

To disable dynamic updates for SOA (Start of Authority) records in a secure zone,

dnscmd /config /UpdateOptions 0x100

To disable dynamic updates for NS records in a secure zone,

dnscmd /config /UpdateOptions 0x200

To disable dynamic updates for Delegation NS records in a secure zone,

dnscmd /config /UpdateOptions 0x400

To disable dynamic updates for A (address) records in the DNS server's own host record in secure zone

dnscmd /config /UpdateOptions 0x800