Dnscmd /Config /OpenACLOnProxyUpdates - Need help on this command

Question

_{Tuesday, September 20, 2016 7:42 AM}

Hi Folks,

I am working on DNS-DHCP integration and looking after below post

https://technet.microsoft.com/en-us/library/ff631099(v=ws.10).aspx

I have 2012 R2 DHCP on member server and 2012 R2 domain controller / dns server

What is default value for "Dnscmd /Config /OpenACLOnProxyUpdates" on 2012 R2 domain controllers

I found that running "Dnscmd /Info /OpenACLOnProxyUpdates" on 2012 R2 domain controller (DNS server) returns default value of 1, however there is no registry found on DNS server for this value

Can I assume that by default **"**OpenACLOnProxyUpdates" value on 2012 R2 DNS server is set to 1 ?

Further as per above TechNet article, is this value automatically getting changed to "0" from "1" during DNS dynamic updates?

OR

We need to manually set it to 0  ?

If I set this value to "0", it will create registry on DNS server under HKLM\System\CurrentControlSet\Services\DNS\Parameters as Reg-Dword value "OpenACLOnProxyUpdates" with value 0

Thanks Best Regards Mahesh

All replies (2)

_{Tuesday, September 20, 2016 10:44 AM ✅Answered}

Yes, OpenACLOnProxyUpdates has default value of 1 on 2012. The value is not changed automatically - if you want to prevent "foreign" updates to records created by DHCP, then you should manually set it to 0 using Dnscmd /Config /OpenACLOnProxyUpdates 0

Gleb.

_{Tuesday, September 20, 2016 11:38 AM}

Thanks

Thanks Best Regards Mahesh