Set Registration Refresh Interval through command prompt

To enable and to set "Registration Refresh Interval" group through command prompt, one as to set the registry key "RegistrationRefreshInterval" which will hold refresh interval value in seconds.

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient" /v Registrat ionRefreshInterval /t reg_dword /d 1800 /f







To disable it just delete the registry key.

reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient" /v Registrat ionRefreshInterval /f








Relevant Posts:
Group Policy: Enable or Disable registration refresh
set dns zone refresh interval

Enable Connection Specific dns suffix group policy

To enable connection specific dns suffix group policy, do the following,

1. Run the reg add command and set the "AdapterDomainName" registry key to 1

reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient" / v AdapterDomainName /t reg_dword /d 1 /f






2. To disable connection specific dns suffix group policy, run

reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient" / v AdapterDomainName /t reg_dword /d 0 /f


3. To set connection specific dns suffix group policy to "Notconfigured" then delete the registey key "AdapterDomainName".

reg delete "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient" / v AdapterDomainName

Connection Specifix DNS Suffix Group Policy

This policy supersedes the connection-specific DNS suffixes of the computers which are configured locally or configured using DHCP.

To Enable Connection Specifix DNS Suffix Group Policy, do the following.

1. open gpedit.msc on command prompt.
2. In the group policy wizard, browse to the node Computer Configuration - > Admininstrative Templates -> Network -> DNS Client, in the right panel, right click on "Connection Specific DNS Suffix" and select "properties" menu item
3. In the connection specific dns suffix properties dialog, select enabled, enter connection-specific suffix "myrootdns.com" and press apply and finally click OK.If this policy is disabled, then Connection Specific DNS Suffix policy is not used.

If this policy is not configured, it is not applied to any computers, and computers use their locally configured or DHCP configured connection specific dns suffixes.

Relevant Posts:
Enable Connection Specific Suffix On command prompt

Enable Register DNS Records Connection Specific Dns Suffix group policy through command prompt

To enable Register Dns Records Connection Specific Dns Suffix group policy through command , just set the registry key RegisterAdapterName to 1

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient" /v RegisterAdapterName /t REG_DWORD /d 1 /f





To disable the policy, run the following

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient" /v RegisterAdapterName /t REG_DWORD /d 0 /f

3. To set the policy to "NotConfigured", then remove the registry key

reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient" /v RegisterAdapterName /f

Enable TTL Set in the A and PTR records through command prompt

To enable the group policy
"TTL Set in the A and PTR records" , run the following command.

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient" /v RegistrationTtl /t REG_DWORD /d 900 /f





To disable or to set as "Notconfigured" just delete the reg key

reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient" /v RegistrationTtl /f

TTL Set in A and PTR Records Group Policy

This policy determines the Time-To-Live (TTL) for A and PTR resource records registered by the host computers.

To Enable this policy do the following.

1. Open group policy editor using command gpedit.msc
2. Browse to a node computer configuration -> Administrative Templates -> Network -> DnsClient and in the right pane right click on "TTL Set in A and PTR Records" policy and select properties












3. In the "TTL Set in A and PTR Records" dialog, select "enabled" option and enter TTL value in the seconds field, press apply and click OK button.




















The minimum TTL value is 0 and maximum TTL is 4294967200
by default the TTL value is set to 600.

If this setting is disabled or not configured, TTL is not applied to host computer.

Enable Update Security Level through command line

The following illustrates on how to enable "update security level" through command line

1. To Enable update security level with OnlySecure option run the following

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient" /v UpdateSecurityLevel /t REG_DWORD /d 256 /f







2. To enable it with OnlyUnsecure, run

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient" /v UpdateSecurityLevel /t REG_DWORD /d 16 /f






3. To enable it with UnsecureFollowedBySecure, run

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient" /v UpdateSecurityLevel /t REG_DWORD /d 0 /f







4. To set "update security level" to disabled or not configured, delete the registry key

reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient" /v UpdateSecurityLevel

Enable Top Level Domain Zones group policy through command line

To Enable "Update Top Level Domain Zones" group policy on command prompt, set the registry key "UpdateTopLevelDomainZones" to 1
1. On command prompt run the command

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient" /v UpdateTopLevelDomainZones /t reg_dword /d 1 /f





To disable the group policy, do the following

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient" /v UpdateTopLevelDomainZones /t reg_dword /d 0 /f






To set the policy to "NotConfigured", just remove the reg key,

DNS Client Disable DNS Registration on command line

DNS Client DNS Registration is also referred to DNS Dynamic Update. To disable "RegistrationEnabled" (DynamicUpdate) run the following on command prompt.

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient" /v RegistrationEnabled /t REG_DWORD /d 0 /f






you can verify that the registry key "RegistrationEnabled" (regedit) to verify the group policy is disabled.







To set DynamicUpdate as "NotConfigured" just the remove the reg key from registry using the command "reg delete".

reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient" /v RegistrationEnabled /f






verify the reg key "RegistrationEnabled" is removed from the registry.

Enable Dynamic Update on command line

To enable Dynamic DNS registration through command line, run the following command


reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient" /v RegistrationEnabled /t REG_DWORD /d 1






To verify the group policy applied correctly, check "RegistrationEnable" is set to 1