GlobalProtect Clients Home IP's showing up in DNS

[Fr4nk4]

Like many organizations, we have had to enable VPN access for more individuals during the COVID-19 crisis. We recently noticed that about half of the 42 machines display their home's local LAN IP address in our DNS server. This is in addition to the IP address that GlobalProtect issues. One of my sysadmins pointed out a way to fix this is to disable the Register this connection's addresses in DNS feature on the Ethernet or wireless NIC adapter in Windows 10 (not the PANGP adapter). This would stop the adapter from sending the 192.168.x.x IP to our DNS server and adding it to the A record. 

Is there another way to get around this? 

[vathreya]

Hi Fr4nk4,

Please go through this link to remove the local IP from dns record: https://support.microsoft.com/en-us/help/2933537/clearing-the-register-this-connection-s-addresses-i...

I am not sure of another way to do this. What made you select that option in the first place?

[Fr4nk4 · Accepted solution]

I've posted this on a couple forums now, and it seems like this is an issue regardless of which VPN solution you use. That option to register this connection's address in DNS is a default option in our Windows 10 image. We got around it by looking up the GP IP for the user, edit our hosts file entry with the GP IP and the FQDN, and then issuing the following commands to remotely connect to the computer and uncheck that DNS option. We eventually put this into a script, and now a GPO.

#Connect remotely to multiple computers using admin Account
Enter-PSSession –ComputerName mycomputername –Credential domain\username

#Check to see if DNS registry option is checked

Get-NetAdapter Ethernet | Get-DNSClient
Get-NetAdapter Wi-Fi | Get-DNSClient

#Sets the DNS Registry option on Ethernet interface to False (turns off)

Get-NetAdapter Ethernet | Set-DNSClient –RegisterThisConnectionsAddress $False
Get-NetAdapter Wi-Fi| Set-DNSClient –RegisterThisConnectionsAddress $False

#Force ipconfig /registerdns

Register-DnsClient

[MansoorAli]

HiGuys,

I have a client and they want to keep the "Register this connection's addresses in DNS" option enabled as they want to use WIFI provided addresses when workers are in office and use GP provided address when working from home. Is there any other way to fix duplicate IP problem on DNS server.