JSI Tip 10006. How can I configure my DNS client to send secure or non-secure dynamic updates?

When dynamically re-registering DNS, the DNS client attempts to send a secure dynamic update only when a non-secure dynamic update has been refused.

Using REG.EXE, built into Windows XP and Windows Server 2003, or from the Windows 2000 Support Tools, I have scripted CFGSNSDNS.bat to configure a DNS client to send secure updates only, non-secure updates only, or the default, described above.

The syntax for using CFGSNSDNS.bat is:

CFGSNSDNS X

Where X is:

D - The default, send a secure dynamic update only when a non-secure dynamic update has been refused.S - Send secure updates only.N - Send non-secure updates only.

NOTE: You must shutdown and restart your client for this entry to become effective.

NOTE: See Your Windows Server 2003 domain controller System event log records event ID 5774?

CFGSNSDNS.bat contains:

@echo offsetlocalif {%1}=={} goto errset type=%1if /i "%type%" EQU "D" set X=0&goto setitif /i "%type%" EQU "N" set X=16&goto setitif /i "%type%" EQU "S" set X=256&goto setitgoto err:setitcall :quiet>nul 2>&1endlocalgoto :EOF:quietREG ADD HKLMSYSTEMCurrentControlSetServicesTcpipParameters /V UpdateSecurityLevel /T REG_DWORD /F /D %X%goto :EOF:err@echo Syntax: CFGSNSDNS Typeendlocal