# This Perl code prevents a DC from registering the resource records
# associated with the Ldap, Gc and GcIpAddress mnemonics and must be run
# directly on the server.
# ---------------------------------------------------------------
# Adapted from VBScript code contained in the book:
#      "Active Directory Cookbook" by Robbie Allen
# ISBN: 0-596-00466-4
# ---------------------------------------------------------------
use Win32::OLE;
$Win32::OLE::Warn = 3;
# Create Registry Value
my $HKLM = 0x80000002;
my $objReg = Win32::OLE->GetObject("winmgmts:root\\default:StdRegProv");
my $strKeyPath = "System\\CurrentControlSet\\Services\\Netlogon\\Parameters";
# prevent Ldap, Gc, and GCIpAddress records from being registered
my @arrValues  = ("Ldap","Gc","GcIpAddress");
if ($objReg->SetMultiStringValue($HKLM,$strKeyPath,"DnsAvoidRegisterRecords",
                                [@arrValues]) != 0) {
   print "Error creating registry value\n";
}
else {
   print "Created registry value successfully\n";
}
# Stop Netlogon service
my $strService = "Netlogon";
my $objService = Win32::OLE->GetObject("WinMgmts:root\\cimv2:Win32_Service.Name='$strService'");
if ($objService->StopService != 0) {
   print "Error stopping $strService service\n";
}
else {
   print "Stopped $strService service successfully\n"
} 
# Delete netlogon.dnb file
my $WshShell = Win32::OLE->CreateObject("WScript.Shell");
my $objFSO = Win32::OLE->CreateObject("Scripting.FileSystemObject");
my $objFile = $objFSO->GetFile(
                      $WshShell->ExpandEnvironmentStrings("%systemroot%")
                      . "\\system32\\config\\netlogon.dnb");
$objFile->Delete;
print "Deleted netlogon.dnb successfully\n";
# Start Netlogon service
if ($objService->StartService != 0) {
   print "Error starting $strService service\n";
}
else {
   print "Started $strService service successfully\n";
} 
print "\nDone\n";