Re: How to set AD and DNS

From: Ulf B. Simon-Weidner [MVP] (nospam2-ulf_at_usw-consulting.com)
Date: 07/13/04


Date: Tue, 13 Jul 2004 04:51:24 -0700

Hello Scott,

inline again

"hrm_admin@news.postalalias" <hrm_admin@news.postalalias> wrote in
message news:ObIvSJGaEHA.808@tk2msftngp13.phx.gbl:
> I will go ahead and remove the secondary zones.
>
> About pointing my yy.xx.com and zz.xx.com DNS forwarders to xx.com should
> it
> be All other DNS domains points to xx.com dns server or do I have to add
> the
> domain in the box and then it IP address? If I try and add the domain
> name
> and point it to xx.com dns server I get this message, "The server
> forwarders
> cannot be updated. The zone already exists." I then have to cancel what
> I did.

You are going to configure it in the All other domains box. Yy and zz
are asking xx, xx is forwarding to your ISP.

> You mean point xx.com to itself for DNS and yy.xx.com and zz.xx.com point
> to
> xx.com DC? Just want to make sure I got that right. . If I have this
> set
> right, which sounds like for the most part what else would I try so that
> yy.xx.com can resolve names in xx.com domain?

I'd set the TCP/IP-Client _in every domain_ to the same machine, so if
you have two dns-servers in any domain have them both use the same
dns-server as primary and the other as secondary.

yy.xx.com will be able to resolve server1.xx.com because you set the
forwarders, and remember that you can't use shortnames for machines in
other dns-domains, so a ping server1.xx.com from a server in yy.xx.com
should work.

> How do you tell if
> replication is working other then by looking at the zones?

AD-Replication: replmon out of the support tools
DNS: If you have secondaries you can try the zone transfer (there's a
load from master or anything like that in the context menu of the
zone), if you don't have secondaries you have either AD-Replication
(see above) or nothing to check.

Get familiar with nslookup - start nslookup without parameters on any
machine:
Use "server %ipadress%" to configure nslookup which server to query
Use "set type=A" to configure nslookup to ask for host records, then
query your servername, e.g. "server1.yy.xx.com"
Use "set type=SOA" to find out if a server has a writeable copy of the
zone, then enter the zone, e.g. "yy.xx.com"
Use "set type=NS" to find out who the nameservers for a specific zone
are (primary and secondary), then enter the zone, e.g. "yy.xx.com".

Try to resolve every domain from every dns-server, it should work if
you have everything configured right.

-- 
Gruesse - Sincerely,
Ulf B. Simon-Weidner


Relevant Pages

  • RE: Problem with DC after 2003 SBS to 2003 Std. migration
    ... DNS polled Active Directory during a period that AD was locked for Online ... | The old SBS 2003 server is totally dead and can't be brought online again. ... | The DNS server has encountered a critical error from the Active ... | Directory for this zone and is unable to load the zone without it. ...
    (microsoft.public.windows.server.migration)
  • RE: Server 2003 Network problems since IP address change
    ... Is there any firewall running on client or server? ... DNS server contacted refused the update request. ... zone WSW.local. ...
    (microsoft.public.windows.server.networking)
  • Re: Proper way to configure DNS for child domain
    ... The Name Servers Tab only exists as Properties of the Zone itself,...what ... Primary server: Child Domain DC1 ... use the parent DNS server as a secondary. ... Test omitted by user request: ...
    (microsoft.public.windows.server.dns)
  • Re: Some DNS server names will not resolve using internal servers
    ... DNAME do in fact redirect queries from zone A to zone ... Until you can show the actual NSLookup responses ... DNS server (to prove that there is not some weird interaction ... We have not rebooted the DNS server yet. ...
    (microsoft.public.windows.server.dns)
  • Re: DNS Problem - Please help
    ... We installed Windows 2003 Server a few months ago and we're ... The DNS server was unable to open zone _msdcs.rjs-network in the Acive ... check that the Active Directory is functioning properly ...
    (microsoft.public.win2000.dns)