3 ms·
A fix for what exactly? Manually visit every DHCP server in existence and do exactly what listed in mitigations? >> The TL;DR version is: Disable DHCP
by justsomehnguy 3y ago
A fix for what exactly?
Manually visit every DHCP server in existence and do exactly what listed in mitigations?
>> The TL;DR version is:
Disable DHCP DNS Dynamic Updates if you don't need them
Client records should be safe if you configure a weak user as the DNS credential
Managed records can’t be protected from spoofing with any configuration; use static DNS records for sensitive non-Windows hosts, if possible
Do not use DNSUpdateProxy; use the same DNS credential across all your DHCP servers instead
Automatically do that with a patch and hear millions of 'M$ broke my shit again, M$ is shit'?