How To Configure Secure Dynamic DNS (Windows Server 2022) смотреть онлайн

I (tobor), demonstrate how to set up Secure Only Dynamic DNS updates on Windows Server 2022.

If you are NOT using best practices, running your DHCP service on your Active Directory server you will need to execute the below command to apply least privilege.
CMD: dnscmd /config /OpenAclOnProxyUpdates 0

Script to Configure Dynamic DNS
https://github.com/OsbornePro/ConfigTemplates/blob/main/ConfigureDynamicDNS.ps1

Official Site of OsbornePro
https://osbornepro.com/

View my Verified Certifications!
https://www.youracclaim.com/users/roberthosborne/badges

Follow us on GitHub!
https://github.com/tobor88
https://github.com/OsbornePro

Give Respect on HackTheBox!
https://www.hackthebox.eu/profile/52286

View PS Gallery Modules!
https://www.powershellgallery.com/profiles/tobor

The B.T.P.S. Security Package
https://btpssecpack.osbornepro.com/

EncypIT Application
https://encrypit.osbornepro.com/

0:00 Intro Summary
0:34 What is Dynamic DNS
1:08 Setting up DNS
2:01 Secure Only Dynamic Updates
3:08 DHCP with Name Protection
4:57 Dynamic DNS User
6:04 DnsUpdateProxy Group
7:31 NonDomain Joined Windows device config for Named Protection
8:20 Register DNS records on a Windows device
8:50 New lease creates PTR record but not A record for Windows (non-domain join)
9:21 New lease creates PTR record and A recrod for non-domain joined Linux machine
9:58 Create A record for NonDomain joined Windows machine
10:43 Demonstrate the protection "Name Protection" provides
11:19 NonDomain joined Windows Client configuration for Dynamic DNS without Name Protection
11:59 Configure DHCP Server for Dynamic DNS without Named Protection
13:08 Reassign Windows machine lease to demonstrate the new behavior
14:50 Overwrite the existing A record now that there is no Name Protection
15:37 Demonstrate the BAD_RECORD log that gets created
17:15 DHCP Log location and setting the Conflict Detection attempts
18:00 In Summary
18:47 Thanks for watching!