Tag: Computer Configuration
Replace addresses in conflicts
Specifies whether dynamic updates should overwrite existing resource records that contain conflicting IP addresses. This policy setting is designed for computers that register address (A) resource records in DNS zones that do not use Secure Dynamic Updates. Secure Dynamic Update preserves ownership of resource records and does not allow a DNS client to overwrite records that are registered by other computers. During dynamic update of resource records in a zone that does not use Secure Dynamic Updates an A resource record might exist that associates the client’s host name with an IP address different than the one currently in use by the client. By default the DNS client attempts to replace the existing A resource record with an A resource record that has the client’s current IP address. If you enable this policy setting or if you do not configure this policy setting DNS clients maintain their default behavior and will attempt to replace conflicting A resource records during dynamic update. If you disable this policy setting existing A resource records that contain conflicting IP addresses will not be replaced during a dynamic update and an error will be recorded in Event Viewer.
Dynamic update
Specifies if DNS dynamic update is enabled. Computers configured for DNS dynamic update automatically register and update their DNS resource records with a DNS server. If you enable this policy setting or you do not configure this policy setting computers will attempt to use dynamic DNS registration on all network connections that have connection-specific dynamic DNS registration enabled. For a dynamic DNS registration to be enabled on a network connection the connection-specific configuration must allow dynamic DNS registration and this policy setting must not be disabled. If you disable this policy setting computers may not use dynamic DNS registration for any of their network connections regardless of the configuration for individual network connections.
Register PTR records
Specifies if DNS client computers will register PTR resource records. By default DNS clients configured to perform dynamic DNS registration will attempt to register PTR resource record only if they successfully registered the corresponding A resource record. If you enable this policy setting registration of PTR records will be determined by the option that you choose under Register PTR records. To use this policy setting click Enabled and then select one of the following options from the drop-down list:Do not register: Computers will not attempt to register PTR resource records. Register: Computers will attempt to register PTR resource records even if registration of the corresponding A records was not successful. Register only if A record registration succeeds: Computers will attempt to register PTR resource records only if registration of the corresponding A records was successful. If you disable this policy setting or if you do not configure this policy setting computers will use locally configured settings.
Register DNS records with connection-specific DNS suffix
Specifies if a computer performing dynamic DNS registration will register A and PTR resource records with a concatenation of its computer name and a connection-specific DNS suffix in addition to registering these records with a concatenation of its computer name and the primary DNS suffix. By default a DNS client performing dynamic DNS registration registers A and PTR resource records with a concatenation of its computer name and the primary DNS suffix. For example a computer name of mycomputer and a primary DNS suffix of microsoft. com will be registered as: mycomputer. microsoft. com. If you enable this policy setting a computer will register A and PTR resource records with its connection-specific DNS suffix in addition to the primary DNS suffix. This applies to all network connections used by computers that receive this policy setting. For example with a computer name of mycomputer a primary DNS suffix of microsoft. com and a connection specific DNS suffix of VPNconnection a computer will register A and PTR resource records for mycomputer. VPNconnection and mycomputer. microsoft. com when this policy setting is enabled. Important: This policy setting is ignored on a DNS client computer if dynamic DNS registration is disabled. If you disable this policy setting or if you do not configure this policy setting a DNS client computer will not register any A and PTR resource records using a connection-specific DNS suffix.
Primary DNS suffix
Specifies the primary DNS suffix used by computers in DNS name registration and DNS name resolution. To use this policy setting click Enabled and enter the entire primary DNS suffix you want to assign. For example: microsoft. com. Important: In order for changes to this policy setting to be applied on computers that receive it you must restart Windows. If you enable this policy setting it supersedes the primary DNS suffix configured in the DNS Suffix and NetBIOS Computer Name dialog box using the System control panel. You can use this policy setting to prevent users including local administrators from changing the primary DNS suffix. If you disable this policy setting or if you do not configure this policy setting each computer uses its local primary DNS suffix which is usually the DNS name of Active Directory domain to which it is joined.
DNS servers
Defines the DNS servers to which a computer sends queries when it attempts to resolve names. This policy setting supersedes the list of DNS servers configured locally and those configured using DHCP. To use this policy setting click Enabled and then enter a space-delimited list of IP addresses in the available field. To use this policy setting you must enter at least one IP address. If you enable this policy setting the list of DNS servers is applied to all network connections used by computers that receive this policy setting. If you disable this policy setting or if you do not configure this policy setting computers will use the local or DHCP supplied list of DNS servers if configured.
Connection-specific DNS suffix
Specifies a connection-specific DNS suffix. This policy setting supersedes local connection-specific DNS suffixes and those configured using DHCP. To use this policy setting click Enabled and then enter a string value representing the DNS suffix. If you enable this policy setting the DNS suffix that you enter will be applied to all network connections used by computers that receive this policy setting. If you disable this policy setting or if you do not configure this policy setting computers will use the local or DHCP supplied connection specific DNS suffix if configured.
Apply policy to removable media
This policy setting extends the disk quota policies in this folder to NTFS file system volumes on removable media. If you disable or do not configure this policy setting the disk quota policies established in this folder apply to fixed-media NTFS volumes only. Note: When this policy setting is applied the computer will apply the disk quota to both fixed and removable media.
Log event when quota warning level is exceeded
This policy setting determines whether the system records an event in the Application log when users reach their disk quota warning level on a volume. If you enable this policy setting the system records an event. If you disable this policy setting no event is recorded. When you enable or disable this policy setting the system disables the corresponding “Log event when a user exceeds their warning level” option on the Quota tab so that administrators cannot change logging while a policy setting is in effect. If you do not configure this policy setting no event is recorded but administrators can use the Quota tab option to change the logging setting. This policy setting does not affect the Quota Entries window on the Quota tab. Even without the logged event users can detect that they have reached their warning level because their status in the Quota Entries window changes. Note: To find the logging option in My Computer right-click the name of an NTFS file system volume click Properties and then click the Quota tab.
Log event when quota limit is exceeded
This policy setting determines whether the system records an event in the local Application log when users reach their disk quota limit on a volume and prevents users from changing the logging setting. If you enable this policy setting the system records an event when the user reaches their limit. If you disable this policy setting no event is recorded. Also when you enable or disable this policy setting the system disables the “Log event when a user exceeds their quota limit” option on the Quota tab so administrators cannot change the setting while a setting is in effect. If you do not configure this policy setting no events are recorded but administrators can use the Quota tab option to change the setting. This policy setting is independent of the enforcement policy settings for disk quotas. As a result you can direct the system to log an event regardless of whether or not you choose to enforce the disk quota limit. Also this policy setting does not affect the Quota Entries window on the Quota tab. Even without the logged event users can detect that they have reached their limit because their status in the Quota Entries window changes. Note: To find the logging option in My Computer right-click the name of an NTFS file system volume click Properties and then click the Quota tab.