[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248149

 
 

909

 
 

194803

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CCE
view XML

CCE-38106-1

Platform: cpe:/o:microsoft:windows_server_2012::r2Date: (C)2015-10-08   (M)2023-07-04



Register DNS records with connection-specific DNS suffix Determines if a computer performing dynamic registration may register A and PTR resource records with a concatenation of its Computer Name and a connection-specific DNS suffix, in addition to registering these records with a concatenation of its Computer Name and the Primary DNS suffix. Warning: Enabling of this group setting is applied to all the network connections of multihomed computers to which this setting is applied. By default, a DNS client performing dynamic DNS registration registers A and PTR resource records with a concatenation of its Computer Name and the primary DNS suffix. For example, a concatenation of a Computer Name, such as 'mycomputer', and the primary DNS suffix, such as 'microsoft.com', would result in 'mycomputer.microsoft.com'. If this setting were enabled, a computer would register A and PTR resource records with its connection-specific DNS suffix in addition to registering A and PTR resource records with the primary DNS suffix. For example, a concatenation of a Computer Name 'mycomputer' and the connection specific DNS suffix 'VPNconnection' would be used when registering A and PTR resource records, resulting in 'mycomputer.VPNconnection'. Notice that if dynamic DNS registration is disabled on a computer to which this setting is applied, then, regardless of this setting?s settings, a computer does not attempt dynamic DNS registration of A and PTR records containing a concatenation of its Computer Name and a connection-specific DNS suffix. If dynamic DNS registration is disabled on a specific network connection of a computer to which this setting is applied, then, regardless of this setting?s settings, a computer does not attempt dynamic DNS registration of A and PTR records containing a concatenation of its Computer Name and a connection-specific DNS suffix on that network connection. If this setting is disabled, a DNS client does not register A and PTR resource records with its connection-specific DNS suffix. If this setting is not configured, it is not applied to any computers, and computers use their local configuration.


Parameter:

[enable/disable]


Technical Mechanism:

(1) GPO: Computer ConfigurationAdministrative TemplatesNetworkDNS Client!Register DNS records with connection-specific DNS suffix (2) REG: HKEY_LOCAL_MACHINESoftwarePoliciesMicrosoftWindows NTDNSClient!RegisterAdapterName

CCSS Severity:CCSS Metrics:
CCSS Score : 6.3Attack Vector: ADJACENT_NETWORK
Exploit Score: 2.1Attack Complexity: LOW
Impact Score: 4.2Privileges Required: LOW
Severity: MEDIUMUser Interaction: NONE
Vector: AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:HScope: UNCHANGED
 Confidentiality: LOW
 Integrity: NONE
 Availability: HIGH
  

References:
Resource IdReference
SCAP Repo OVAL Definitionoval:org.secpod.oval:def:28418


OVAL    1
oval:org.secpod.oval:def:28418
XCCDF    1
xccdf_org.secpod_benchmark_general_Windows_2012_R2

© SecPod Technologies