It is a good security practice to allow only secure dynamic updates on Windows domains. This means that the DNS server only accepts updates from machines that are members of the domain.
Accepting updates from machines that are not members of the domain is a big security risk. An administrative password is required to join a machine to a domain. This provides some level of control to ensure that only safe machines are updating DNS.
Is your Samba machine a server? Would it be okay to use a fixed address for it?
Last edited by jamrock; 09-23-2010 at 02:15 PM.