DNS registration

[Guest]

I set up a test lab for a smooth migration NT4 --> Windows 2003
I installed the NT4 PDC, then added another NT4 BDC and promoted it to PDC, then I started the real upgrade to Windows 2003. Everything went well and the former PDC (demoted to BDC) could join the domain again in Mixed Mode and a bogus Windows 2000 client didn't notice the domain change from NT to 2003. Now the problem is about DNS registration in the new Windows 2003 Domain Controller. The local zone is AD-integrated and accepts secure update. There's also a reverse lookup zone with the correct hosts (the two DC's). The Windows 2000 Pro box cannot register into the DNS zone, ipconfig /registerdns has no luck. No errors in the event viewer, both on the server side and the client side. The primary DNS points to the loca
DNS server, of course. I added the correct primary DNS suffix in the Network Identification tab as well as in the Advanced properties of the IP configuration (that is, DNS Suffix for this connection). Still it cannot register into the DNS zone

Any help? Thanks.

 

[Kevin D. Goodknecht [MVP]]

In

I set up a test lab for a smooth migration NT4 --> Windows 2003.
I installed the NT4 PDC, then added another NT4 BDC and promoted it
to PDC, then I started the real upgrade to Windows 2003. Everything
went well and the former PDC (demoted to BDC) could join the domain
again in Mixed Mode and a bogus Windows 2000 client didn't notice the
domain change from NT to 2003. Now the problem is about DNS
registration in the new Windows 2003 Domain Controller. The local
zone is AD-integrated and accepts secure update. There's also a
reverse lookup zone with the correct hosts (the two DC's). The
Windows 2000 Pro box cannot register into the DNS zone, ipconfig
/registerdns has no luck. No errors in the event viewer, both on the
server side and the client side. The primary DNS points to the local
DNS server, of course. I added the correct primary DNS suffix in the
Network Identification tab as well as in the Advanced properties of
the IP configuration (that is, DNS Suffix for this connection). Still
it cannot register into the DNS zone.

Any help? Thanks.

Try changing the "Allow dynamic updates" to "Yes" instead of "Only secure
updates" to see if that is the problem. Secure updates require that the
machine or the domain computer group have permissions to create and delete
child objects on the zone ACL on the Security tab.