[Samba] DC won't update Windows 10 PTR records

Denis Cardon dcardon at tranquil.it
Fri May 25 07:32:57 UTC 2018

Hi Barry,

> 23-May-2018 13:53:09.094 database: info: samba_dlz: disallowing update
> of signer=I7X4-45G-2\$\@TIPPING.LAN name=
> type=PTR error=insufficient access rights

could you check if that entry exist or not in the reverse zone, and if 
it exist what ACE is on that entry (right click/property/security). If 
the entry exists, you should see the computer account name with total 
control on the entry.

With reverse entries, it may have been created by another computer, and 
thus your new win10 cannot change the value. There is no DNS scavenging 
that will cleanup entries currently (I think it should land in 4.9).



> 23-May-2018 13:53:09.094 update: info: client
> I7X4-45G-2\$\@TIPPING.LAN: updating zone
> '254.168.192.in-addr.arpa/NONE': update failed: rejected by secure
> update (REFUSED)
> Any suggestions?

Denis Cardon
Tranquil IT Systems
Les Espaces Jules Verne, bâtiment A
12 avenue Jules Verne
44230 Saint SĂ©bastien sur Loire
tel : +33 (0)

Samba install wiki for Frenchies : https://dev.tranquil.it
WAPT, software deployment made easy : https://wapt.fr

More information about the samba mailing list