Dynamic DNS registration not working!!

[dude]

Ok guys, we just upgraded from a NT4 domain to an AD domain. The old NT4.0
domain joined a preconfigured empty root domain as a child domain. The two
root DCs run on Win2k sp4, two DCs in the child domain run Win2k sp3. The
upgrade went successfully. I can authenticate and access all domain
resources, however, DDNS registration is not working! It only works if I
disjoint then rejoin the AD domain. Dynamic registration works flawlessly
in the test environment and DNS/DHCP configurations are identical. What am
I doing wrong here? I checked all necessary options on the client and allow
"only secure update" on the forward and reverse lookup zones on DNS. I
don't know what else to check. There are no errors in EventViewer either.

thanks

 

[Simon Geary]

Does it work if you change the 'allow secure updates' option to Yes instead
of only secure updates?

 

[dude]

No, it does not. I already tried this.

Anymore tips?

 

[Simon Geary]

How about permissions on the DNS zones, do authenticated users have the
right to create child objects in the DNS zones? And have you put your DHCP
servers in the DNSUpdateProxy group?