How to use DHCP name protection in dual stack network

Sascha Gerhards 0 Reputation points
2025-03-07T16:52:33.6533333+00:00

Hi,

we are using Windows DHCP server for a dual stack network. Name protection is configured and works well, except for one small thing:

The non-windows machines have only one DNS record either A or AAAA but not both.
If the machine registers first the A reocrd incl. the corresponding DHCID record, the AAAA record is refused with eventid 10025 from DHCP-Server "as there is probably an existing client with same FQDN already registered with DNS." (which obviously is the existing A record).

If it is the other way round, the A record fails with the same error message but event id 1340.

How can I get it done, that also non-windows machines can register both addresses?

Thank you in advance

Windows Server 2019
Windows Server 2019
A Microsoft server operating system that supports enterprise-level management updated to data storage.
3,967 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Zunhui Han 3,810 Reputation points Microsoft External Staff
    2025-03-11T09:00:40.4733333+00:00

    Hello,

    Please test the following method to see if it solves the problem:

    Verify that DHCID records are generated correctly on non-Windows clients, and ensure that IPv4 and IPv6 DHCID records are consistent.

    Adjust the dynamic update Settings for DNS zones to allow for a more relaxed update policy (subject to security risks).

    Configure on a DHCP server to force the handling of DHCID on non-Windows clients, for example through policy or advanced Settings.

    Contact the vendor of non-Windows devices to verify that their DHCP client implementation is RFC compliant, especially for DHCID processing in a dual-stack environment.

    For some critical non-Windows devices, consider manually creating static A records and AAAA records on the DNS server to avoid registration issues caused by DHCP name protection.

    I hope the information above is helpful.

    Best regards

    Zunhui

    ============================================

    If the Answer is helpful, please click "Accept Answer" and upvote it.

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.