Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I would like to have my windows 7 clients register their own PTR records since I use a Cisco DHCP servers. DNS is Active Directory integrated.

How can I go about doing so without setting up a Windows DHCP server? I'm already using a TFTP server and I don't want the complexity of a second forwarding host.

share|improve this question
Where is your DNS hosted? That changes things up a bit. – Brent Pabst Dec 17 '12 at 19:56
up vote 2 down vote accepted

Due to a limitation in Cisco / Windows integration there isn't a ready way (assuming the use of secure update zones in your DNS server) to have this function directly from the Cisco side.

The Windows DNS server expects Kerberos integration to validate the credentials. The Cisco kit doesn't do this.

Turning on the insecure update option on your reverse lookup zones in conjunction with the update both setting on the Cisco DHCP server will get this to function, albeit at a reduced security level.

The best option is to have the Windows devices perform their own registration. This behavior changed between XP and Vista so that this doesn't occur by default.

To configure this behavior a group policy with the following settings will do it.

Computer Configuration \ Policies \ Network \ DNS Client

Connection Speciffic DNS Suffix:
Dynamic Update: enabled
Register DNS records with connection specific DNS suffix: enabled
Register PTR Records: Register

Depending on OU structure this can be filtered to only workstations running Vista or higher as needed.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.