Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm not a networking guy by all means, I'm just a developer who dabbles enough to get into trouble and I'm there. So bear with me... :)

At my office I have a Windows 2003 Domain Controller which also services DNS. On the domain I have a handful of computers and other misc. equipment/toys. For the DNS I only created a Forward Lookup Zone for my domain ( I run a lot of VM's so generally I have everything on the domain, however some of those VM's are not and only in a 'Workgroup'. I also have another laptop which belongs to another domain ( which is here 100% but I use it for other purposes and has to belong to the

With all that said, I have two questions:

  1. I have found any computer not on does not register it's IP address even though 'Register this connections address in DNS' is set to in the 'Advanced TCP/IP Settings' for the nic. Where have I messed this up?
  2. On the laptop which is registered on, when I do a nslookup for a computer on (e.g. nslookup devbox1) it appends as the suffix (e.g. queries Same thing occurs if I use the fully qualified name. In the 'Advanced TCP/IP Settings' for that nic, I can 'Append these DNS suffixes' of but I fear that will hose my DNS lookups when I VPN to So what is the correct approach to resolve this issue? Do I add both and in that order?
share|improve this question

For #1 have you allowed Nonsecure and secure Dynamic Updates of DNS? If not, only domain clients will be able to update DNS. This is set on the General tab of the DNs zone. You should understand the implications before changing it.
If you use DHCP for all clients, you can configure the DHCP server to update DNS on the DNS tab of the scope settings.

For #2 your approach sounds right. Remember you can change it back after testing. Other than that, you can specify the full domain name and append a "." to prevent the appending of

share|improve this answer
Regarding #1, generally speaking, what would the implications be? – Jeff Willener Mar 23 '12 at 0:24
Any unauthenticated client can update DNS. If the environment is controlled, you're probably OK. If not, try the DHCP way first – uSlackr Mar 23 '12 at 0:27
Regarding #2, if I do an nslookup on there are three searches now which occur:, and then Is that appropriate? – Jeff Willener Mar 23 '12 at 1:02
By the way, thank you very much. – Jeff Willener Mar 23 '12 at 1:02
what happens if you do a nslookup on ? – uSlackr Mar 23 '12 at 1:03

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.