Configure DNS server details outside NIC properties GUI

[Roeee]

All,

I need to find a method of specifying within the OS the IP addresses of the DNS servers are on the network. However, for security reasons, I need to do this outside the normal NIC GUI [ NIC --> Rightclick --> IP details].

There is a switch within the LMHOST file to say which server is a domain controller [#DOM] but not one for a DNS server??

Ideally, the answer would be a list of servers with IP addresses which are written in a text file and cached. When a DNS lookup is initiated this list would be queried and the lookup subesquently sent to the respective DNS server.
At no time can I have the DNS servers referenced within the "primary DNS server" or "secondary DNS server" inside the NIC GUI.

Thanks...

 

[GlenJohnson]

Could you give us a few more details on what and why you are trying to do? There's a couple of ways to do this. Good luck.

Glen A. Johnson
If you like fun and sun, check out Tek-Tips Florida Forum
"The journey of life is like a man riding a bicycle. If he stops moving, he will fall off." William Golding (1911-1993), British novelist.

 

[Roeee]

I simply need to specify the IP's of the DNS servers but outside the normal NIC properties GUI. As such the IP's will not appear within the GUI but will be available to process DNS requests.

Once specified I should be able to perform NSLOOKUPS.

Thanks

 

[ITPangaeaArchitect]

that will not happen in windows....regardless of how dns servers are set, they will show up in the GUI...ewven if you do it via vbscript or command line. This is a must in order to contact your domain controllers. If you tried something like that, you are begging windows for failure after failure.
remember too, that lmhosts is for netbios name resolution, and is not technically needed in any windows 2000/windows 2003 AD domain.

The only option you would have would be to deploy a HOST file containing all DNS resolution to all systems needed (file servers, domain controllers, etc.)...however, this is more of a security risk than simply putting the DNS server addresses where they should be...as if DNS is running on Win2000/Win2003, the zone itself can be locked down so unauthorized users and systems cannot read through it.

WEhere in the world are you working that is requesting this...even the DOD and US Military set their DNS servers appropriately, then lock down teh actual DNS zone.

Hoenstly, i KNow a way you could probably spoof it to where only 0.0.0.0 showed up in teh initial GUI (TCP/IP properties of the NIC)...howevetr, they would still appear in the advanced properties...not to mention all DNS servers appear in the registry too..to put it simply, it doesnt matter what method you choose...I guarantee I could spoof out DNS servers on any system regardless of the method you tried to use.

-Brandon Wilson
MCSE00/03, MCSA:Messaging00, MCSA03, A+