Applies to: Centrify DirectControl 4.2.0 & above
Question:What permissions are required on DNS server to allow the clients to update the PTR/A records?
Answer:AD Integrated DNS servers:
- The domain & subnets under Forward and Reverse Lookup Zone should allow "Secure" updates.
- If the A record already exists, then right-click and go into:
- Properties > Security tab > Add > Choose the host and give Full permissions.
Non-AD Integrated DNS servers:
- Allow "Nonsecure and Secure" Dynamic Updates on both the domain & subnets under Forward and Reverse Zone Lookups respectively.