The object has class computer or server (or a subclass of computer or server).

In AD DS, the value of the dNSHostName attribute being written is in the following format: computerName.fullDomainDnsName, where computerName is the current sAMAccountName of the object (without the final "$" character), and the fullDomainDnsName is the DNS name of the domain NC or one of the values of msDS-AllowedDNSSuffixes on the domain NC (if any) where the object that is being modified is located.

The requester must have the Validated-DNS-Host-Name validated write right.