Re: Browsing in multiple domains

From: Herb Martin (news_at_LearnQuick.com)
Date: 03/05/04


Date: Fri, 5 Mar 2004 11:27:44 -0600


"Nick" <nickbaker@email.com> wrote in message
news:c1bc8a5.0403050847.f14b35@posting.google.com...
> I'm studying for my MCSE and hit a problem with the domains I work
> with in the office. It is a multimedia company and resource & file
> sharing is important.
>
> There are two child domains and no Parent domain. The children are on
> different subnets. I believe the situation is a non-transitive trust.

No. Trusts have nothing to do with browsing.

It is almost certainly due to the multiple subnets. Broadcasts don't cross
routers (i.e., subnets) and browsing uses NetBIOS names which are
exchange by default using broadcasts.

You will need a WINS server -- WINS doesn't "do browsing" but it
servers a common point of registration so that the "Browse Masters"
(per subnet per domain) can find the "domain master browser" and
perhaps so the two domain master browsers can find each other to
exchange browse lists.

All will need to register with the same "WINS database" -- note this
means EITHER the same WINS server or with multiple WINS servers
which are set up to replicated with each other (i.e., same database.)

> I cannot browse the other network from Network Places but I want too.
> I cannot look up in the Active Directory either but would like to.

That is usually a DNS issue. Browsing uses NetBIOS; AD uses DNS
name resolution.

> I also believe a root or parent domain cannot be created after a
> child.

DNS problems.

> How can I view and access resources from either domain? Is it down to
> trusted domains?

No, in fact, you will need the name resolution to work before trusts can
be created. (Not the other way around.)

> As a relative beginner of the AD and multiple domains, an
> easy-to-follow answer would be fab!

Install a WINS server (or servers) on the machine(s) that is your
DNS server. If more than one, set them up to replicate with each other.
Point ALL clients, including DCs and the WINS servers to these WINS
servers in their NIC-NetBIOS/WINS properties.

The above will fix browsing.

For DNS:
    Make sure DNS is DYNAMIC for the zone that corresponds to your
AD domain (dynamic is the default for WINS).

Point all clients, including DCs and DNS servers -- they are clients too,
at the internal DYNAMIC DNS server set ONLY, i.e., NIC properties.

Do not try to use both internal and external DNS on the internal clients.
If you wish to resolve the Internet, have the internal DNS server "forward"
or do the lookup on the Internet.

There will be a problem if you have a "true tree" of Domains and wish to
resolve the Internet also. (Win2003 makes this much easier to arrange.)

-- 
Herb Martin


Relevant Pages

  • Re: How Secure is ".Local?"
    ... > dozen servers and ~500 websites/public domains. ... Shadow DNS ... Is your DC on the Internet? ... >>It is not going to provide your zone info to anyone ...
    (microsoft.public.win2000.dns)
  • RE: New Forest - Old Domain - Plus DMZ - Help Please
    ... Make sure Windows XP client should use the AD DNS ... The Cert should match the name in Internet. ... New Forest - Old Domain - Plus DMZ - Help Please ... vast majority of our inside production equipment is 2003 servers and XP ...
    (microsoft.public.windows.server.migration)
  • Re: Active Directory and child DNS Zone
    ... > Our internal and external DNS domains are both the same - mycompany.com. ... > hosts our external domain and it only contains entries for our web servers ... >>> but the test bed isn't a true picture (no internet access to test VPN, ...
    (microsoft.public.windows.server.dns)
  • Re: DNS design questions
    ... We're a medium size college campus with about 10,000 users and the CIO wants to have DNS locally housed. ... only a hand full to a few dozen max "Internet servers" while ... how big of a security issue really is allowing the "external" DNS server pull a zone transfer from an internal one? ...
    (microsoft.public.windows.server.dns)
  • Re: How Secure is ".Local?"
    ... dozen servers and ~500 websites/public domains. ... I'm weighing the importance of split-brain DNS ... >It is not going to provide your zone info to anyone ... >on the Internet since local is NOT a zone in the ...
    (microsoft.public.win2000.dns)

Loading