How to prevent Mac DNS registration with W2K3 DNS

I have a Mac with two ethernet cards. The Mac is bound to a W2K3 AD and presents LAN services via one card (LAN IP). The other card is connected to a non-routed separate network used for other purposes (Private IP).
The Mac registers its forward lookup A record in the AD DNS twice, once with the wanted LAN IP address and once with the unwanted Private IP.
The Private IP address is not reachable by clients so I don't want it to register. Because of the round robin nature of AD DNS, it serves out the wrong IP address to 50% of LAN clients, who then fail to connect.
On Windows, it is possible in the GUI to specifically set a network card's properties not to register with the DNS. On the Mac this setting is absent in the GUI.
I assume there is a setting I can throw from terminal to block dynamic DNS registration for a specific ethernet card, whilst retaining it for the one I want. But I cant find it.
Can anybody point me in the correct direction please?

I think you will have a better chance of seeing your problem solved if you post on the XServe or Server forums.

Similar Messages

How putting my mac to sleep with the display closed????

How putting my mac to sleep with the display closed????

MBP does not sleep when display is closed?
For: A portable Mac doesn't appear to respond properly when you close or open the lid.
Reset SMC. http://support.apple.com/kb/HT3964
Choose the method for:
"Resetting SMC on portables with a battery you should not remove on your own".

How to prevent Mac Pro to select USB audio out instead of optical audio out?

I have the following problem: Usually I use the optical audio output of my Mac Pro, but every time I reboot the system, Mac OS X changes the audio output to an usb audio device I've attached to use it with Boot Camp. Is it possible to prevent Mac OS X from changing the audio output automatically every time I start my system?

I have no problems with the audio out (the jack on the back) on my Mac Pro, though I'm not using a high-end stereo and I'm in an office environment so I may not hear subtle noise. If you haven't tried a different cable, you might try that. If your stereo supports it, you can also try the optical output.
As far as it not playing at all, make sure the Output setting in the Sound system preference is set to "line out" (or digital out if you're using the optical jack).

How does the mac mini perform with cs5

Just curious
How does the Intel HD Graphics 4000 in the new mac mini perform with cs5 photoshop cs6 photoshop?
thanks
Ted

Jeff, I appreciate your comment, so you haven't had any problem with using the painttools in CS 6 photoshop and the 3d type etc, in other words all the features that CS6 photoshop has.
I was thinking about buying the mac mini but was concerned how it works with CS 5 (which I have) I will have to take another look at the MiniMac server with the 3000 card. I do a lot of Digital Painting primarily Painter 12.2 but and would like to use the Painter brushes in CS 5 ( have not upgraded to CS 6.) My Imac is 6 years old and really is not fast enough.
Thanks for replying
Ted

How to reset mac os x with no after starting apps?

Hi,
I am getting realy angry with os x becuse all the time when I restart my mac book pro with maverics all currently open apps are getting send to mem, and they start after the restart.
Is there a way to do a full reset of system so that no apps which are not in bashrc or other system staring apps wont start ?

That's the way it is supposed to work.
Try System Prefs, General, Close Windows when quitting apps

ISE - how-to prevent mac spoofing

I've built an ISE lab (1.1.3.124) and have an authorization policy which permits access to profiled Cisco-Access-Points. For the purpose of the lab, these devices have full access.
Profiling is working correctly. I have a 1231 AP which is correctly profiled and placed in an endpoint group, Cisco-Access-Point.
From a Linux laptop, using macchanger, I can successfully spoof the mac of the AP and gain full access - for some reason ISE isn't profile checking the laptop and I'm not sure why. The laptop obtains an IP using DHCP. I have the following profile checks enabled: NetFlow, DHCP, RADIUS, DNS, SNMP.
When I check Live Authentications, apart from the session IDs, there is no difference when comparing the authz between the AP and the spoofed laptop.
I was hoping that ISE would recognise the spoofed attempt and let it fall through to the deny policy.
I'm happy to attach any screenshots if required.
Thanks.

This may or may not be already known, so I'm going to describe how I would expect ISE to work.
Authentications based on profiling The first time a device comes through ISE, it could get the wrong result you would expect the device to get. This is due to the fact that ISE has a bit of a challenge - to identify and authorize new users to its system before the probes can learn anything about these endpoints.
For example, DHCP and HTTP are fairly useless until after the port becomes authorized since no client traffic can flow before an authentication occurs. ISE might apply the catch-all CWA result allowing it on the network, but then the DHCP class identifier could say 'Cisco AP'.
ISE knows that any new profiled information could result in a different AuthZ policy, so it issues a CoA to inform the NAD to re-authenticate that particular session.
The same authentication occurs now, but ISE now already knows the device appears to act like a Cisco AP and hands back the WAP result this time instead of CWA.
Any future authentications that occur for this Cisco AP, we pass back the Cisco AP result since we know he was previously an AP. Our probes would still learn as much as they can about the 'new' authentication, but no data would change from our end since the probes learn redundant information for this legit Cisco AP.
So, what you're describing is you're performing MAB and swapping out the profiled Cisco AP with another device that is spoofing the MAC address. MAB literally stands for 'MAC Address Bypass', so when ISE is presented with the MAC address it checks its internal host store and finds out he does in fact know 'AA-BB-CC-DD-EE-FF'. The spoofed device was previously known to be a Cisco AP, so ISE will hand out the Cisco AP result allowing it on the network infrastructure VLAN with a special DACL if you're getting fancy.
Your point here is that the spoofed PC is allowed on the network, when in fact it isn't a Cisco AP. What should happen at this point is the probes start doing their magic. The only way a device becomes a 'Cisco-Access-Point' is if the CDP entry in the switch contains 'AIR' or the dhcp-class-identifier includes 'Cisco AP'. So what I would expect happen is if you have SNMP Query/Trap probes setup and working, as soon as the linux laptop plugs in with the spoofed MAC the switch would inform ISE that a link came up/up. ISE sends back an SNMP Query asking for more information, which the switch then provides. ISE would then realize that there's no CDP information there (unless your linux test box is utilizing CDP, then this is a mute point anyways) and update the session endpoint in its internal hosts either during or before the actual authentication occurs. If it's during, ISE would trigger a CoA, which would cause the endpoint to reauthenticate then fall into (probably) the Cisco-Devices group based of the OUI of the MAC.
The other way to become a Cisco-Access-Point by default is through the dhcp class identifier. So lets say your linux box authenticates, ISE passes back the AP result, and you're allowed on the network. Once you issue a DHCP Discover from your box, ISE should recieve it and learn that the DHCP class identifier has changed from what it expected ('Cisco AP') to something different and issue a CoA. The linux box will reauthenticate, and get passed back the generic CWA profile.
Ultimately the entire job relies on either the DHCP probe, SNMP Trap/Query Probes, and CoA...unless you've modified the profiling settings from the default. Since you mentioned deleting the MAC address from the internal hosts section forces ISE to send back CWA, i'm thinking that your switch config might be missing the CoA portion.
1. What probes do you have enabled. This by default requires DHCP, DHCP Span, or SNMP Query/Trap.
2. Can you see the successful CoA from the switch?
3. If you wait ~5 minutes after the linux box with the spoofed address authenticates and check the internal host, what does ISE know about that device? If my CoA theory is right I would expect after even a couple minutes we would recognize that the device isn't a Cisco WAP.

How to prevent Mac OS X's Finder not to show search results from other accounts?

Hello.
How do I have Mac OS X 10.8.3 not show searched file results, on Mac, from other accounts with a standard account? I noticed a standard account found files (test.txt in an admin account in a standard account) and can open them! :O
Thank you in advance.

Barney-15E wrote:
If I'm reading your path correctly, it is because you created the folder at the root of your Home directory.
As I stated above, all users can read your home directory, in order to see into the Sites and Public folders.
Other users, including Admin users, cannot see into the default folders in the Home folder, except Sites and Public.
When you create a folder at the root of your home folder, it inherits the permissions of the parent folder, which allows everyone to read that folder.
If you create a folder at the root of your home, you have to set the permissions on it to prevent others from being able to read it.
To do so, Get Info on the folder and unlock the padlock on the Sharing and Permissions section.
Make sure you are the owner of the folder. Select your name from the list, or add it if it is not. Then, click on the gear button and if it is available, select "Make username the owner." If it is not available, you are already the owner. Also make sure you have Read & Write access. Then, select the staff group and delete it. Then, select everyone and set to No access. Then, select Apply to Enclosed from the gear menu.
To avoid all of this, make your folders inside the default folders (Documents, Pictures, Music, etc.), or one you've already change the permissions on. The Sites and Public folders are visible to all.
Interesting. I didn't want to use Apple's default folders. I want to make my own. I tried chmod -R 700 on my account and that seems to work. Is that enough? I don't see Staff anymore through Get Info.

How to prevent changing DNS server address

I work for a public school district. We just purchased our first batch of Win 8.1 PCs, but they are not the Pro version, so there is no gpedit. I want to prevent students from accessing the TCP/IPv4 Properties dialog box in order to ensure that the
DNS server address is always obtained automatically. Can anyone tell me how to do this using regedit, or any other way? Thanks!

Easiest way is to assign these students a standard user account (without admin rights).. They cant change any system setting then.. Other than restricting privileges I don't think you have option here since you don't have group policy editor ..
There could be a possibility to do this using regedit But it is not recommended since there are no any official article for this other than below untested third party article form ehow
http://www.ehow.com/how_8110801_disable-tcpip-properties-regedit.html
Besides it could be tedious.. enabling and disabling it..

How to reinstall Mac OS X with dead hard drive and no DVD drive?

Hey,
I need to reinstall Mac OS X 10.6 on my Mac Mini as my hard drive doesn't appear to be booting. However, I cannot reinstall it through the OS install DVD as the DVD drive is not working either. I don't have any other Macs on hand to help create a boot disk or something so does anyone else have any solutions?
Thanks,

Your going to need a external blank (preferably Firewire 800) drive if your not capable of replacing your Mini's internal drive.
http://eshop.macsales.com/installvideos/
Your going to need a external DVD drive, or use a friends Mac with one and follow these instructions to place 10.6 on a bootable USB thumb drive to install on the external or new internal drive.
http://www.maciverse.com/install-os-x-snow-leopard-from-usb-flash-drive.html
To boot from the external drive, hold the option key down on a wired keyboard and select it to boot from, set it as the Startup disk in System Preferences.
How to erase and install Snow Leopard 10.6

How to upgrade MAC Book Pro with OS X 10.5.8 to OS X 10.6

I have a MAC book Pro (Intel core 2 Duo based) HW Rev 3.1. I am trying to upgrade to OS X 10.6.
When i tried inplace upgrade it errored out with a message that I cannot upgrade. I wiped the disk clean using Disk utility and tried booting with the 10.6 DVD. I start the installation and errors out with the same error "cannnot upgrade". I did not get any further information on why it is not letting me install. I am using the CD from another MAC Book Pro I got few months back. Any help is highly appreciated.

The install DVD from the new model MacBook Pro will not run on your older MacBook Pro. The 10.6 install DVD is machine-specific.
You need to purchase the retail version of Snow Leopard to install OSX10.6 on your older Macbook Pro.

How to configure mac book pro with Logic 9?

I would like to run Logic 9 on a Mac Book Pro (13", 2.9 GHz, 8 GB RAM, 750 GB HD) as a secondary development platform (for composing while away from my primary system), and do it on the cheap. So I would like to do this without having to buy an audio interface or sound card. I need to do only the following:
1. Direct Logic output (both software instrument tracks and audio tracks) to the audio-out jack (NOT built-in speakers), and
2. Record with a USB (or firewire) microphone to an audio track on the same project which is playing software instruments and possibly other audio tracks thru the audio-out jack.
Is it possible to configure mac/logic this way without an additional interface?
Thanks.

1) When you plug speakers into the audio out jack, all audio is automatically routed from the internal speakers to the Audio Out jack...
2) Most USB mics are class compliant and so you just plug them in and they work in Logic without any config in Logic needed.
So, to answer you question, for your needs, you don't need an audio interface.

How to prevent images from loading with google search results?

Since I updated to FireFox 18 I have been getting images (miniature webpages) with my search results with Google. I thought it was a google problem but I don't have the problem in IE.
Please advise.

I think you are using some addons, try in safemode...
'''Try the Firefox Safe Mode''' to see how it works there. The Safe Mode is a troubleshooting mode, which disables most add-ons.''
''(If you're not using it, switch to the Default theme.)''
* You can open the Firefox 4.0+ Safe Mode by holding the '''Shift''' key when you use the Firefox desktop or Start menu shortcut.
* Or use the Help menu item and click on the '''Restart with Add-ons Disabled...''' menu item while Firefox is running.
''Don't select anything right now, just use "'Start in Safe Mode"''
''To exit the Firefox Safe Mode, just close Firefox and wait a few seconds before using the Firefox shortcut (without the Shift key) to open it again.''
'''''If it is good in the Firefox Safe Mode''''', your problem is probably caused by an extension, and you need to figure out which one.
Please follow the [[Troubleshooting extensions and themes]] article for that.
''When you figure out what's causing your issues, please let us know. It might help other users who have the same problem.''

New to Mac. How to use legacy SCSI devices with MBPro?

If I have, say... an older external SCSI tape drive, how could I make it work with my new MBPro?

*My (PC formatted) iPod is set to manual sync already, but will my new Mac know that when I first connect it*
Yes it will, the iPod retains it setting no matter what computer it is connected to.
*The version of iTunes on my Mac is the newest but there's a slightly older version on the iPod. Is this a problem?*
You don't have any version of iTunes on your iPod it has it's own software, you only have iTunes on the computer.
*How can I save the music and video on my Mac while I import my iPod's contents? (Where do I move the file? How do I prevent multiple copies of everything*
You don't need to do anything with the music that is on your iPod, you can select what content you want Senuti to copy back so there's no reason you should get duplicates.
*Will photos and games on iPod transfer too?*
I don't believe Senuti will transfer games, if they were purchased from iTunes the transfer of purchased content from the iPod to authorised computers was introduced with iTunes 7. You'll find details in this article: Copying iTunes Store purchases from your iPod or iPhone to a computer
Senuti will not transfer Photos. There are various programs out there for recovering photos from an iPod, have a look at the ones below. If you search the internet you can find more. Just be aware that what you'll be recovering will be photos optimised for the iPod so they won't be the same quality as the original full resolution versions:
iPod Photo Liberator Mac & Windows
iPodCopy Mac and Windows Versions
Keith's iPod Photo Reader Mac only
If you have full resolution copies of the photos on the iPod have a look here: Apple Knowledge Base article - Use Disk Mode to copy photos from iPod

Mac registration with L2FM failed

My Logfile on Nexus 6K is fiilled with Logs like below:
Nexus Version is: 7.0(3)N1(1)
2014 Sep 12 14:49:11 Nexus-6K %ADJMGR-3-MAC_REG_FAILED: adjmgr [3727] Mac registration with L2FM failed for mac xxxx.xxxx.xxxx, iod Vlan191, phy iod: port-channel169
2014 Sep 12 14:49:24 Nexus-6K %ADJMGR-3-MAC_REG_FAILED: adjmgr [3727] Mac registration with L2FM failed for mac xxxx.xxxx.xxxx, iod Vlan108, phy iod: port-channel91
2014 Sep 12 14:49:36 Nexus-6K %ADJMGR-3-MAC_REG_FAILED: adjmgr [3727] Mac registration with L2FM failed for mac xxxx.xxxx.xxxx, iod Vlan108, phy iod: port-channel91
2014 Sep 12 14:49:58 Nexus-6K %ADJMGR-3-MAC_REG_FAILED: adjmgr [3727] Mac registration with L2FM failed for mac xxxx.xxxx.xxxx, iod Vlan191, phy iod: port-channel169
Cisco's document does not explain what is causing this:
Error Message:     AM-3-MAC_REG_FAILED Format: Mac registration with L2FM failed for mac %s, iod %s, phy iod: %s
Explanation    MAC registration with L2FM failed.
Recommended Action    No action is required.
Here is my Logging Configuration:
logging level aaa 5
logging level cdp 6
logging level copp 6
logging level flogi 5
logging level hsrp 6
logging level interface-vlan 5
logging level lldp 5
logging level monitor 6
logging level radius 5
logging level session-mgr 6
logging level spanning-tree 6
logging level track 6
logging level virtual-service 2
logging level igmp 3
logging event link-status default
logging logfile messages 6
logging server x.x.x.x use-vrf x facility syslog
logging monitor 6
Can anyone tell me what are these and how to stop them from occurring. Also would appreciate suggestions on how can I improve logging configuration.

Hi Saurabh,
The L2FM is Layer2 Feature Manager which manages the mac-address table and mac-address
registrations and deletions from the hardware table. The L2FM component exists on Nexus
7K. In case of Nexus 5500 and Nexus 6K, there is an equivalent component called FWM. Since
most of the code is re-used in Nexus 6K platform, the references to L2FM need to be
removed/resolved on Nexus 6K code. There is a software bug to fix these L2FM references in
the code. Still the bug is in assigned state, hence the fix for this bug is not yet
available. You can safely ignore these messages, they have no impact. The mac-addresses
are registered with FWM and since there is no L2FM these messages have no impact.
========================================
CSCum82485 Nexus 5500/6000: L2FM messages seen
Symptom:
In a Nexus 6000 switch running NX-OS 7.0(0)N1(1), messages such as following can be seen
%ADJMGR-3-MAC_REG_FAILED: adjmgr [3745] Mac registration with L2FM failed for mac
002a.6a35.b341, iod Vlan250, phy iod: Gateway Port-Channel1:186
%ADJMGR-3-MAC_REG_FAILED: adjmgr [3745] Mac registration with L2FM failed for mac
00d0.03eb.2000, iod Vlan60, phy iod: Ethernet131/1/15
Conditions:
Usually seen when a host comes online.
Workaround:
L2FM is not a valid component on Nexus 6000. These are cosmetic messages and can be
ignored.
HTH
Inayath
***Plz rate the post and mark the thread as closed******

How to I get a link with a "Mail to" address to open up a Compose window in my Yahoo mail, rather than in the Mail progrom on my Mac. I do not use the Mac Mail program.

How to I get a link with a "Mail to" address to open up a Compose window in my Yahoo mail, rather than in the Mail progrom on my Mac. I do not use the Mac Mail program.
== This happened ==
Not sure how often
== always

Thank you, "the-edmeister" -- You render a great service, one that lifts my spirits.
Your answer also taught me to be a little more persistent, as I had started looking at Preferences, and just didn't notice the icons (including Applications) at the top of that window that would have led me to my answer.
Dave

How to prevent Mac DNS registration with W2K3 DNS

Similar Messages

Maybe you are looking for