Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have Forward Lookup Zone domainname1.domainname2.com which is AD-integrated zone. Dynamic updates is set to Nonsecure and secure.

At the same time, there's Reverse Lookup zone on the same server, but Dynamic Updates are set to Secure Only. In DNS log in Event Viewer there are plenty of errors with ID 4000, 4011, 4015.

Now, the problem is that not all client machine register themselves with DNS. Clients receives IP via DHCP and DHCP is allowed to update DNS. DHCP Client service is enabled on client machines.

Should Dynamic Update settings be identical for the same ForwardLookup and ReverseLookup zones? Is there some sort of AD issues I should dig in?

share|improve this question
Not to put a damper on your question, but why is updating the rDNS zone so important? It's not used by AD or any applications that I'm aware of. Do you use the rDNS zone for something? –  joeqwerty Nov 1 '12 at 13:05
The issue now is that rDNS is updated, and fDNS is NOT. I wonder if changing settings for Dynamic Update on fDNS to Secure Only will solve the issue? –  Volodymyr Nov 1 '12 at 13:14

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.