How to Configure Secure Dynamic DNS (Windows Server 2022)

Channel	Publish Date	Thumbnail & View Count	Download Video
	Publish Date not found	0 Views	View on YouTube Download Video

I (tobor), demonstrate how to set up Secure Only Dynamic DNS updates on Windows Server 2022.

If you are NOT using best practices and running your DHCP service on your Active Directory server, you will need to run the command below to apply least privilege.
CMD: dnscmd /config /OpenAclOnProxyUpdates 0

Script to configure dynamic DNS
https://github.com/OsbornePro/ConfigTemplates/blob/main/ConfigureDynamicDNS.ps1

Official site of OsbornePro
https://osbornepro.com/

View my verified certifications!
https://www.youracclaim.com/users/roberthosborne/badges

Give respect on HackTheBox!
https://www.hackthebox.eu/profile/52286

Check out PS Gallery modules!
https://www.powershellgallery.com/profiles/tobor

The BTPS security package
https://btpssecpack.osbornepro.com/

EncypIT application
https://encryptit.osbornepro.com/

0:00 Introductory summary
0:34 What is dynamic DNS
1:08 Set up DNS
2:01 Secure dynamic updates only
3:08 DHCP with name protection
4:57 Dynamic DNS user
6:04 DnsUpdateProxy group
7:31 NonDomain Participated in Windows device configuration for Named Protection
8:20 Register DNS records on a Windows device
8:50 New lease creates PTR record, but not A record for Windows (non-domain join)
9:21 New lease creates PTR record and a recording for non-domain connected Linux machine
9:58 Create a record for a non-domain joined Windows machine
10:43 Demonstrate the protection that /"Name Protection/" provides
11:19 NonDomain participates in the Windows Client configuration for dynamic DNS without name security
11:59 Configure DHCP server for dynamic DNS without named protection
13:08 Reassign a Windows machine lease to demonstrate the new behavior
14:50 Overwrite the existing A record now that there is no Name Protection
15:37 Demonstrate the BAD_RECORD log being created
17:15 DHCP log location and setting of the conflict detection attempts
6:00 PM Summary
18:47 Thanks for watching!