Windows 10: Can I reject some client DNS updates?

We have a lot of multi-homed Windows clients, especially due to VPN connections. Is there any way to reject client DNS updates due to various criteria, either the IP address of the client or the IP address of the record? Thanks.

:)

 

Change DNS on client

Hello,
we have a customer with over 2000 Windows 7 clients, domain controllers are Windows 2008, all clients are with IP and DNS settings configured manually, now they need to change DNS settings on that clients, please can you suggest us a few ways to do this
avoiding manual intervention on all clients?
Thanks
Regards

 

DNS problems with router

A couple suggestions I have for you:

Update the firmware on the router. Maybe it's getting into a badstate, and a firmware update might fix it. Or if you're comfortable with it, install a custom firmware like dd-wrt. Just make sure its supported on your router first.

Change your DNS to: 8.8.8.8, 4.2.2.1. Might help.

If none of these work, maybe statically set your DNS on your PS3/PC to the IPs you listed, taking the router out of the lookup procedure.

Last option, is look for a new router.

 

dns client resolvers not looking for 2nd DNS server when primary DNS server is off line

hi

i have a situation on a couple of domain networks where the client computers lose internet browsing (dns resolution) when the primary listed dns server goes off line.

i made the assumption that the client pc would imediately look to the secondary named dns server listed on its NIC ipv4 settings.

i have read a few articles from over 10 years ago that explains that it is the protocol that all vendors have to follow that causes this problem and that an ipconfig /flushdns will resolve the problem and the client will then find the secondary dns server.

can you tell me if there is a better solution or configuration that will remove the need for the end user to have to call tech support to fix their problem of not being able to web browse?

can DNS servers be clustered to prevent single point of contact failure? if so is it simple to configure?

if i point my primary dns to the firewall instead of the DC(DNS server) will this still allow for a speedy domain authentication?

are there any other solutions that you know of?

many thanks