Solved

Active Directory Naming, internet name or not.

Posted on 2004-04-29
11
401 Views
Last Modified: 2010-04-13
I'm about to install a new directory into a new business, they own the internet domain name for thier company and will be running an email exchange internally.

My question is, should I name the AD domain as the internet domain or not, ie. peoples logins to the AD will be the same as thier email address.

I heard several people tell me its best to do it both ways, and I'm unsure of the pros and cons of doing it.
0
Comment
Question by:robomonkey
  • 6
  • 4
11 Comments
 
LVL 16

Accepted Solution

by:
JamesDS earned 250 total points
ID: 10947292
robomonkey
DO NOT name the AD domain as the same as your DNS domain.

If you domain is QUANGO.COM then best practice is QUANGO.LOCAL
You then set the exchange server to route email for QUANGO.COM and as long as the MX records are in place for QUANGO.COM then everything will work fine.

The reason for this is to avoid SPLIT HORIZON DNS where you have to resolve machines on the same domain that are not on your local subnets. This is not insumountable, but is a pain in the ass that you don't have if the internal and external domain is different.

Cheers

JamesDS
0
 

Author Comment

by:robomonkey
ID: 10947617
Does it make much difference if I change the AD name completely to QUGO for example, I assum that the .local replaces the .com and its not quango.local.com?
0
 
LVL 16

Expert Comment

by:JamesDS
ID: 10947692
robomonkey
No, as long as the two are different, then there is no issue whatsoever. You ONLY ever see the SPLIT HORIZON DNS issue when the internal and external domain names are exactly the same.

Yes I did mean the .com is replaced by the .local. Actually quango.local.com would work too, but because it's three DNS levels and not 2 like quango.local it would slightly complicate your forward lookup zone heirarchy and forwarded queries would be slightly less efficient if you chose to use the "append suffix of parent domain" option in your TCP settings.

However, you should stick with "something.somethingelse" (like QUANGO.LOCAL) for your internal AD domain as AD has trouble with single name domains (IE just QUANGO)

Cheers

JamesDS
0
 
LVL 16

Expert Comment

by:JamesDS
ID: 10947706
robomonkey
Also it is a good idea to use the .LOCAL moniker as the IETF has said it will never use the .LOCAL as an internet available top level domain name - IE it has been "officialy" reserved as internal use only.

Cheers

JamesDS
0
 

Author Comment

by:robomonkey
ID: 10947801
Brilliant James thankyou,

One last question, If I have an Install CD which says Microsoft Windows 2003 Standard Edition, is that a small business CD or the complete 2003 Server edition???  I'm supposed to have small business install but not too sure.
0
Backup Your Microsoft Windows Server®

Backup all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

 
LVL 4

Expert Comment

by:berni1234
ID: 10947816
i have same names for ad and internet.
the only problem which occured in my situation was, that internal users could not resolve the dns-name for our webpage. so i created a www-entry on the (internal)DNS and all works ...
0
 
LVL 16

Expert Comment

by:JamesDS
ID: 10947828
robomonkey
Microsoft Windows 2003 Standard Edition is NOT the same as Windows Small Business Server 2003 which is a different product.

Microsoft Windows 2003 Standard Edition is suitable for installing places where you don't have to cluster the server with lots of nodes and don't have to have massive (like 8GB+) RAM.

If all you want is an active directory installation on a server (or servers) then this is fine. If you want to run a complete business of a single server with AD, exchange, ISA, IIS and SQL server all installed together then you need SBS 2003

Cheers

JamesDS
0
 
LVL 16

Expert Comment

by:JamesDS
ID: 10947849
berni1234
Yup, that would be the split horizon DNS problem.

You can partially solve it by putting in hosts entries for your web and other servers (hosted externally), which is what you did.

This is fine when you only have a few webservers to deal with, but becomes a serious pain if you have an entire infrastructure externally hosted and with a DNS infrastructure not under your direct control. Hence my advice.

There are other complication around remote access etc, but these do not usually affect the small business and large companies tend to ensure that their internal and external DNS domains are different.

Trust me, I design this stuff for a living :)

Cheers

JamesDS
0
 

Author Comment

by:robomonkey
ID: 10948397
OK, I definetly have server 2003 standard.

Does that mean I have to buy stuff like exchange, ISA,  seperately?

Am I correct in say SBS is a cut down version of server 2003, but with lots of extras like exchange, ISA, included?

I aslo have Office Small Business edition, what effect if any will that have?

Sorry to drift so far from the original question.
0
 

Author Comment

by:robomonkey
ID: 10948450
If I click 'configure your server' I can install 'mail server (pop3, smtp)' whats that and how does it work, does it check internet mail addresses and download the messages to be opened locally?
0
 
LVL 16

Expert Comment

by:JamesDS
ID: 10948521
robomonkey
too many questions, post a new Q on EE!

Yes you will need to buy exchange, ISA if you want them as well
No, Office SBE has no effect and is an unrelated product

Sort of, report into the Windows Server 2003 area and get a better answer there!


Cheers

JamesDS
0

Featured Post

How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

Join & Write a Comment

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
This article explains how to prepare an HTML email signature template file containing dynamic placeholders for users' Azure AD data. Furthermore, it explains how to use this file to remotely set up a department-wide email signature policy in Office …
Internet Business Fax to Email Made Easy - With eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…
Access reports are powerful and flexible. Learn how to create a query and then a grouped report using the wizard. Modify the report design after the wizard is done to make it look better. There will be another video to explain how to put the final p…

706 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now