uncle_nick

I would like to set an alias to the SOA for a large multi-site
AD-integrated DNS zone which is the zone for the AD domain

Since the SOA Primary Server field is populated by each DC with its own
FQDN when using AD-Integrated zones, I figured this would be a great way
of identifying the local DC for a site.

This would allow me to write a generic WSUS GPO which pointed clients
at http://SOA_Alias
and thus avoid writing 75 near-identical GPO that specified local DC
names

I cannot find a way to reference the SOA RR which spoils this plan.
Does anyone have any clever suggestions ?

cheers
Nick


--
Uncle_Nick
------------------------------------------------------------------------
Uncle_Nick's Profile: http://forums.techarena.in/members/uncle_nick.htm
View this thread: http://forums.techarena.in/server-dns/1114685.htm

http://forums.techarena.in

james yeomans bsc, mcse, mcts

I cant think of a way of doing this, i would be interested if anyone else
can. Another thing you could try: Create 75 identicle dns records (same name,
say "wsus" and each one pointing to a different ip, basically 1 record per
wsus server) make sure dns subnet mask ordering is on and then your clients
should be returned the local ip address of the wsus server when they query
the record "wsus".
James.
--
James Yeomans, BSc, MCSE, MCTS
Ask me directly at: http://www.justaskjames.co.uk

uncle_nick

James - cheers for your response

I don't really like the idea of creating all the aliases; now pondering
a bit of VB to identify the AD Site's DC and then pipe that name into a
regfix for HKLM / SW / MS / policies / windows - not quite as elegant as
I would like, but still generic and doesn't require multiple
interventions.

Have you seen this approach before ?

cheers
Nick


--
Uncle_Nick
------------------------------------------------------------------------
Uncle_Nick's Profile: http://forums.techarena.in/members/uncle_nick.htm
View this thread: http://forums.techarena.in/server-dns/1114685.htm

http://forums.techarena.in

james yeomans bsc, mcse, mcts

Cant's say that I have. I am sure however there are people on here who will
have dealt with the type of scenarion you are talking about. One thing I will
say is that 75 WSUS servers seems rather a lot. Do you have 75 different
sites? If so are they really all big enough to justify a WSUS server?
Presumably you are going to have them replicate from each other so you just
approve the updates from 1 top level server?
Hope that helps
James.
--
James Yeomans, BSc, MCSE, MCTS
Ask me directly at: http://www.justaskjames.co.uk

uncle_nick

Hi James

Big, distributed enterprise here, with a lot of slow WAN links.... so
each site has a DC which contains a WSUS replica from the master here at
the core.

this is what I have knocked up - it wouldn't work here at the core
where there are many DCs but is fine for our leaf sites which only have
the one DC:

Dim objDomain
Dim objDC
Dim SrvregString
Dim StatregString
Dim RegFile

'find my login server
Set objDomain = GetObject("LDAP://RootDSE")
objDC = objDomain.Get("dnsHostName")
Wscript.Echo objDC

'create registry file values
SrvregString = Chr(34) &"WUServer"& Chr(34) &"="& Chr(34) &"http://"
SrvregString = (SrvregString)+(objDC)& Chr(34)
' debug: Wscript.Echo SrvregString

StatregString = Chr(34) &"WUStatusServer"& Chr(34) &"="& Chr(34)
&"http://"
StatregString = (StatregString)+(objDC)& Chr(34)
' debug: Wscript.Echo StatregString

'create the .reg file
Set objFSO = CreateObject("Scripting.FileSystemObject")
Set objFile = objFSO.CreateTextFile("c:\localDC.WSUS.reg")
objFile.WriteLine ("Windows Registry Editor Version 5.00")
objFile.WriteLine ("")
objFile.WriteLine
("[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Win dows\WindowsUpdate]")
objFile.WriteLine (SrvregString)
objFile.WriteLine (StatregString)
objFile.WriteLine ("")
objFile.Close

'fire the .reg file at the registry
Set oShell = CreateObject("Wscript.Shell")
RegFile = "c:\localDC.WSUS.reg"
oShell.Run "regedit.exe /s " & Chr(34) & RegFile & Chr(34), 0, True


--
Uncle_Nick
------------------------------------------------------------------------
Uncle_Nick's Profile: http://forums.techarena.in/members/uncle_nick.htm
View this thread: http://forums.techarena.in/server-dns/1114685.htm

http://forums.techarena.in