A Quick Tip To Prevent Registration Of A and GC Records For Domain Controllers

By default, Windows Server running Domain Controller role registers A Record for Domain Name and Global Catalog in the DNS Servers. There are certain situations where you would want to disable the registration of the records mentioned below:

  • DomainName.Com    A   IP_Address
  • gc._msdcs.DomainName.Com     A    IP_Address

You can use the below mentioned registry entry on the domain controllers to dis-allow registration of these records:

  • KEY Name: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetLogon\Parameters
  • Entry Name: RegisterDnsARecords
  • Data: DWORD
  • Value: 1 (Register A Records), 0 (Do not register A Records)

Note: This regsitry entry does not exist by default.

1 thought on “A Quick Tip To Prevent Registration Of A and GC Records For Domain Controllers”

Leave a Comment

Your email address will not be published.

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

Scroll to Top