Best Practices
Designate a user account for DHCP registrations rather than using the computer account. When you configure a DHCP server, ensure that you designate a specific user account for the DHCP service to use when updating DNS resource records for DHCP clients. The user account’s membership in the DnsUpdateProxy group prevents the DHCP server from taking ownership of the DHCP-related DNS records, but still allows the computer account to register and take ownership of all SRV resource records registered by the DHCP’s Netlogon service when DHCP is installed on a domain controller or other application server that registers SRV resource records.
Do not use DHCP-assigned addresses for servers. It is preferable to assign static IP addresses to ...
Get Microsoft® Windows® Security Resource Kit, Second Edition now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
