Windows Forum

Ask something
Discussion Locked

DNS client change on all workstations

0 helpful
3 replies

by joshhansen 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
Through Active Directory group policy, you can force each workstation in the domain or ou to have a particular dns suffix entry(ies) defined in the workstation's dns settings. The problem is that the policy will overwrite what dns suffix entires were already listed with the ones defined in the gpo and the original entires will be lost. Is there a way to add additional dns suffix entires without overwriting any existing ones?

3 replies

by timwalsh

The short answer is no.

GPOs don't work that way. They enforce the settings specified in the GPO regardless of the setting that exists on the computer. There is no other way it could work (Otherwise, GPOs would end up being a tremendous headache to manage -- "OK, on this setting, I want the GPO to override the existing setting. On this one I want to add it to the existing setting. And on this one...). If you want to keep the entries that already exist, you would have to add those entries to the GPO itself. Otherwise you would have to add the additional suffixes on a by- machine basis.

This discussion is closed to new replies.