Re: Delegated zones - question for an MCSE or MCSA..

From: Kurt (kurtl_at_olypen.com)
Date: 10/13/04


Date: Tue, 12 Oct 2004 21:25:51 -0700

Agreed. A delegated zone essentially establishes a forwarder, except in the
reverse direction. Just because the higher level server is configured to
proxy requests for the downlevel zone to the delegated server for that zone
does not mean that the delegated server will know to poll the domain parent
server for names in it's zone. If it is a publicly registered zone, the root
servers (from root hints) would point it in the right direction, otherwise I
would think the secondary zone would be required.

...kurt

"Steven L Umbach" <n9rou@n0-spam-for-me-comcast.net> wrote in message
news:JW0bd.354206$mD.44896@attbi_s02...
> That is correct. After you delegate a zone to a child domain the dns
servers
> in the child domain will be authoritative for the child domain, however
they
> may not be able to use recursion to find the parent domain unless the top
> domain in the forest tree is configured to be the root domain and the
child
> domain controllers have their root hints configured with the domain names
> and IP addresses of the dns servers authoritative for it. See the link
below
> to a KB article on AD dns FAQ. With Windows 2003 conditional forwarding
and
> stub zones can often be used in place of secondary zones if you do not
need
> the redundancy or load balancing of secondary zones. --- Steve
>
> http://support.microsoft.com/default.aspx?scid=kb;EN-US;291382
>
>
> Question: How do I set up DNS for a child domain?
>
> Answer: To set up DNS for a child domain, create a delegation record on
the
> parent DNS server for the child DNS server. Create a secondary zone on the
> child DNS server that transfers the parent zone from the parent DNS
server.
> Set the child DNS server to point to itself only.
>
> For additional information, click the article number below to view the
> article in the Microsoft Knowledge Base:
> 255248 How to Create a Child Domain in Active Directory and Delegate the
DNS
> Namespace to the Child Domain
>
> "David Fox" <davidfox789@hotmail.com> wrote in message
> news:77f5a214.0410121553.1a1cc1d8@posting.google.com...
> >A practice test that came with the MS Press 70-291 book says the
> > following, and I'm not really convinced that it is right, so I'd like
> > to hear an mcse's opinion:
> >
> > A dns server that is hosting a delegated zone must also contain a
> > secondary zone for the parent domain, so that computers in the
> > delegated zone can resolve names for hosts in the parent domain.
> > (that's my convoluted wording, not the book's)
> >
> > I don't see why the secondary zone would be necessary. Computers in
> > the delegated domain would just ask their dns server (ie, the one in
> > that delegated zone) for the address of a host, and that dns server
> > should just perform recursion as usual, whether the destination host
> > is in the parent domain or anywhere else in the world. Am I wrong?
> >
> > Thank you!
>
>



Relevant Pages

  • RE: Problem with DC after 2003 SBS to 2003 Std. migration
    ... DNS polled Active Directory during a period that AD was locked for Online ... | The old SBS 2003 server is totally dead and can't be brought online again. ... | The DNS server has encountered a critical error from the Active ... | Directory for this zone and is unable to load the zone without it. ...
    (microsoft.public.windows.server.migration)
  • Re: Some DNS server names will not resolve using internal servers
    ... DNAME do in fact redirect queries from zone A to zone ... Until you can show the actual NSLookup responses ... DNS server (to prove that there is not some weird interaction ... We have not rebooted the DNS server yet. ...
    (microsoft.public.windows.server.dns)
  • Single Server PDC Name Change - Easy?
    ... FQDN by demoting this primary server, ... myregistereddomain.net and reconfiguring Active Directory. ... DNS server was unable to open the mydomain.local zone. ...
    (microsoft.public.windows.server.active_directory)
  • Re: DNS Problem - Please help
    ... We installed Windows 2003 Server a few months ago and we're ... The DNS server was unable to open zone _msdcs.rjs-network in the Acive ... check that the Active Directory is functioning properly ...
    (microsoft.public.win2000.dns)
  • Re: Problem setting of Secondary DNS zones on Win2003 Server
    ... nslookup is definitely using the same DNS server (I'm typing server ... I've deleted and recreated the zone on several occasions to no avail. ... The DNS server is probably not a Windows machine (I have no idea to be ... In an attempt to diagnose what is going on I run nslookup from the ...
    (microsoft.public.windows.server.dns)