Dear colleagues,
I'm having an issue where AD-integrated DNS is dynamically updated by DHCP, however the DHCP server had changed in time, thus reverse-lookup zone records are not being updated correctly.
To solve this I'd need to delete or scavenge all existing reverse DNS zones and configure DHCP to use an AD account for DNS updates.
While reading the articles, I come across the DNSUpdateProxy security group, however, I fail to see its viability.
This builtin group has no rights, it is not special in any way, and adding/removing servers from it has no consequence to the functioning of DDNS.
I'd like to follow the best-practice, but cannot find any information on the topic.
Your advice is appreciated.
BR,
Radko