CCE-38106-1Platform: cpe:/o:microsoft:windows_server_2012::r2 | Date: (C)2015-10-08 (M)2023-07-04 |
Register DNS records with connection-specific DNS suffix
Determines if a computer performing dynamic registration may register A and PTR resource records with a concatenation of its Computer Name and a connection-specific DNS suffix, in addition to registering these records with a concatenation of its Computer Name and the Primary DNS suffix.
Warning: Enabling of this group setting is applied to all the network connections of multihomed computers to which this setting is applied.
By default, a DNS client performing dynamic DNS registration registers A and PTR resource records with a concatenation of its Computer Name and the primary DNS suffix. For example, a concatenation of a Computer Name, such as 'mycomputer', and the primary DNS suffix, such as 'microsoft.com', would result in 'mycomputer.microsoft.com'.
If this setting were enabled, a computer would register A and PTR resource records with its connection-specific DNS suffix in addition to registering A and PTR resource records with the primary DNS suffix. For example, a concatenation of a Computer Name 'mycomputer' and the connection specific DNS suffix 'VPNconnection' would be used when registering A and PTR resource records, resulting in 'mycomputer.VPNconnection'. Notice that if dynamic DNS registration is disabled on a computer to which this setting is applied, then, regardless of this setting?s settings, a computer does not attempt dynamic DNS registration of A and PTR records containing a concatenation of its Computer Name and a connection-specific DNS suffix. If dynamic DNS registration is disabled on a specific network connection of a computer to which this setting is applied, then, regardless of this setting?s settings, a computer does not attempt dynamic DNS registration of A and PTR records containing a concatenation of its Computer Name and a connection-specific DNS suffix on that network connection.
If this setting is disabled, a DNS client does not register A and PTR resource records with its connection-specific DNS suffix.
If this setting is not configured, it is not applied to any computers, and computers use their local configuration.
Parameter:
[enable/disable]
Technical Mechanism:
(1) GPO: Computer ConfigurationAdministrative TemplatesNetworkDNS Client!Register DNS records with connection-specific DNS suffix
(2) REG: HKEY_LOCAL_MACHINESoftwarePoliciesMicrosoftWindows NTDNSClient!RegisterAdapterName
CCSS Severity: | CCSS Metrics: |
CCSS Score : 6.3 | Attack Vector: ADJACENT_NETWORK |
Exploit Score: 2.1 | Attack Complexity: LOW |
Impact Score: 4.2 | Privileges Required: LOW |
Severity: MEDIUM | User Interaction: NONE |
Vector: AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H | Scope: UNCHANGED |
| Confidentiality: LOW |
| Integrity: NONE |
| Availability: HIGH |
| |
References: Resource Id | Reference |
---|
SCAP Repo OVAL Definition | oval:org.secpod.oval:def:28418 |