Antonio Arienzo: the blog
le mie esperienze IT

Allow DNS Suffix Appending to Unqualified Multi-Label Name Queries

admin Tools, Win10, Windows Server Febbraio 1, 2017

fonte: http://www.computerstepbystep.com/allow-dns-suffix-appending-to-unqualified-multi-label-name-queries.html

Description:

Specifies whether the computers to which this setting is applied may attach suffixes to an unqualified
multi-label name before sending subsequent DNS queries, if the original name query fails.

A name containing dots, but not dot-terminated, is called an unqualified multi-label name, for example
“server.corp”. A fully qualified name would have a terminating dot, for example “server.corp.contoso.com.”.

If you enable this setting, suffixes are allowed to be appended to an unqualified multi-label name, if the
original name query fails. For example, an unqualified multi-label name query for “server.corp” will be queried
by the DNS Client first. If the query succeeds, the response is returned to the client. If the query fails, the
unqualified multi-label name is appended with DNS Suffixes configured for the computer for queries. These
suffixes can be derived from a combination of the local DNS Client’s primary domain suffix, a
connection-specific domain suffix and/or DNS Suffix Search List.

For example, if the local DNS Client receives a query for “server.corp”, and a primary domain suffix is
configured as “contoso.com”, with this setting the DNS Client will send a query for “server.corp.contoso.com.”
if the original name query for “server.corp” fails.

If you disable this setting, no suffixes are appended to unqualified multi-label name queries if the original
name query fails.

If you do not configure this setting, computers will use their local DNS Client configuration to determine the
query behavior for unqualified multi-label names.

Supported on: At least Windows Vista.
Allow DNS Suffix Appending to Unqualified
Multi-Label Name Queries

DescriptionGpeditRegeditCMDBack

VBScriptPowerShell Script

Gpedit:

Please perform the following steps:

Please go to Pearl button (Start) and click on the Search programs and files
For more information about the change from Start to Pearl button click here

Type gpedit.msc and press Enter

In the Group Policy window please navigate to Computer Configuration –> Administrative Templates –>
Network –> DNS Client and open Allow DNS Suffix Appending to Unqualified Multi-Label Name Queries.
Not Configured –> is the Default state
Enabled –> apply this GPO
Disabled –> this GPO will not be applied

To finish press ok button and close Group Policy window.

DescriptionGpeditRegeditCMDUpBack

VBScript

Type regedit and press ok

Please confirm User Account Control pop-up

Microsoft official disclaimer

Warning Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by
using another method. These problems might require that you reinstall the operating system. Microsoft
cannot guarantee that these problems can be solved. Modify the registry at your own risk.

Note: This registry key is created by Group Policy when this GPO is Enable or Disable. The GPO Default state
is Not Configured –> this registry entry is not present.

Please navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient and
locate AppendToMultiLabelName registry key
Regedit:          

Please perform the following steps:

Please go to Pearl button (Start) and click on the Search programs and files
For more information about the change from Start to Pearl button click here

DescriptionGpeditRegeditCMDUpBack

VBScript

Double click on AppendToMultiLabelName and edit the value:

To Enable:
Change the data value with 1

To Disable:
Change the data value with 0

To finish press ok button and close Registry Editor window

Note: Manual editing of this registry key will not be reflected in Group Policy. If you modify this GPO from
Group Policy this registry key will be rewritten.

DescriptionGpeditRegeditBackCMD

VBScriptUp

Type cmd, right click on cmd icon under the Programs and click on Run as administrator

Please confirm User Account Control pop-up

Please select, right and copy a registry key from below, then right click on command prompt window
, select Paste and press Enter

Enabled:
REG add “HKLM\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient” /v AppendToMultiLabelName /t REG_DWORD /d 1 /f

Disabled:
REG add “HKLM\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient” /v AppendToMultiLabelName /t REG_DWORD /d 0 /f

Not Configured:
REG DELETE “HKLM\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient” /v AppendToMultiLabelName /f

Note: Manual editing of this registry key will not be reflected in Group Policy. If you modify this GPO from
Group Policy this registry key will be rewritten.
CMD:

Please perform the following steps:

Please go to Pearl button (Start) and click on the Search programs and files
For more information about the change from Start to Pearl button click here

DescriptionGpeditRegeditBackCMD

VBScriptUp

VBScript:

Const HKEY_LOCAL_MACHINE = &H80000002
strComputer = “.”
Set oReg=GetObject(“winmgmts:{impersonationLevel=impersonate}!\\” & _
strComputer & “\root\default:StdRegProv”)

strKeyPath = “SOFTWARE\Policies\Microsoft\Windows NT\DNSClient”
oReg.CreateKey HKEY_LOCAL_MACHINE,strKeyPath
strValueName = “AppendToMultiLabelName”
‘Enabled
dwValue = 1
‘Disabled
‘dwValue = 0
oReg.SetDWORDValue HKEY_LOCAL_MACHINE,strKeyPath,strValueName,dwValue
‘Not Configured
‘oReg.DeleteValue HKEY_LOCAL_MACHINE,strKeyPath,strValueName

DescriptionGpeditRegeditBackCMD

VBScriptUp

PowerShell Script :

Enabled\Disabled

$RegKey = “HKLM:\SOFTWARE\Policies\Microsoft”
If(Test-Path ($RegKey + “\Windows NT”))
{
 $RegKey = “HKLM:\SOFTWARE\Policies\Microsoft\Windows NT”
 If(Test-Path ($RegKey + “\DNSClient”))
 {
   $RegKey = “HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient”
   ##Enabled
   New-ItemProperty –path $RegKey –name AppendToMultiLabelName –value 1 –PropertyType DWord –Force
   ##Disabled
   ##New-ItemProperty –path $RegKey –name AppendToMultiLabelName –value 0 –PropertyType DWord –Force
 }
 else
 {
   New-Item –path $RegKey –name Service
   $RegKey = “HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient”
   ##Enabled
   New-ItemProperty –path $RegKey –name AppendToMultiLabelName –value 1 –PropertyType DWord
   ##Disabled
   ##New-ItemProperty –path $RegKey –name AppendToMultiLabelName –value 0 –PropertyType DWord
 }
}
else
{
 New-Item –path $RegKey –name Windows NT
 $RegKey = “HKLM:\SOFTWARE\Policies\Microsoft\Windows NT”
 New-Item –path $RegKey –name Service
 $RegKey = “HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient”
 ##Enabled
 New-ItemProperty –path $RegKey –name AppendToMultiLabelName –value 1 –PropertyType DWord
 ##Disabled
 ##New-ItemProperty –path $RegKey –name AppendToMultiLabelName –value 0 –PropertyType DWord
}

Not Configured

$RegKey = “HKLM:\SOFTWARE\Policies\Microsoft”
Remove-ItemProperty –Path($RegKey + “\Windows NT\DNSClient”) –name AppendToMultiLabelName
If( (Get-Item –Path($RegKey + “\Windows NT\DNSClient”)).ValueCount –eq 0 –and (Get-Item –Path($RegKey + “\Windows NT\DNSClient”)).SubKeyCount –eq 0)
{
 Remove-Item –Path($RegKey + “\Windows NT\DNSClient”)
 If( (Get-Item –Path($RegKey + “\Windows NT”)).ValueCount –eq 0 –and (Get-Item –Path($RegKey + “\Windows NT”)).SubKeyCount –eq 0)
 {
   Remove-Item –Path($RegKey + “\Windows NT”)
 }
}

admin

Lascia un commento

Il tuo indirizzo email non sarà pubblicato. I campi obbligatori sono contrassegnati *

Questo sito usa Akismet per ridurre lo spam. Scopri come i tuoi dati vengono elaborati.