Solved

Windows 2003 AD DNS best practices

Posted on 2004-08-25
3
1,457 Views
Last Modified: 2013-12-19
We are days away from upgrading our domain to a Windows 2003 Active Directory.  This is how I propose to perform the upgrade

We have the following scenario

1 X NT4 PDC
1 x NT4 BDC

1 x Windows 2003 Server which hosts Pri DNS and which will be the eventual main DC, FSMO master
1 x Windows 2003 Server which hosts Sec DNS and which will be the second DC

I have already created the neccesary zones, namely,
_msdcs.mycompany.co.uk
 _sites.mycompany.co.uk
_tcp.mycompany.co.uk
_udp.mycompany.co.uk
ForestDNSZones.mycompany.co.uk
DomainDNSZones.mycompany.co.uk

all zones support dynamic updates

So, when I upgrade our PDC, DNS setup will complete without a hitch using the existing DNS server.  I will then run dcpromo on the Pri DNS once I am happy with the upgrade.

Anyway, this is my question.  The zones above are all Standard Primary on the Pri DNS server with the Sec DNS Server listed as additional nameserver.  Should I

1) Set up secondary zones on the Sec DNS server then once I have promoted both servers to DCs change the zone types to AD Integrated
2) Leave the zones just residing on the Pri DNS server.  Then, once I have promoted the first server, change the zone type to AD integrated and then promote the second.

I know it probably seems like a very subtle distinction, but I would appreciate some input.
0
Comment
Question by:hstiles
3 Comments
 
LVL 23

Assisted Solution

by:rhandels
rhandels earned 50 total points
Comment Utility
Hi,

I would say use the second option, this will make your live easier. If the first DNS server works and you make it AD integrated, then you're sure the second will also work (because of AD integration). If something goes awire on you in option 1, you have a big problem..

Only thing to take into account (not sure if this is necesarry though), i would delete the secondary DNS zone from the other DC, else you might get conflicts because it has a secondary zone and needs to be AD integrated..
0
 
LVL 37

Accepted Solution

by:
Bing CISM / CISSP earned 75 total points
Comment Utility
agree with rhandels.

FYI, the OFFICIAL bast practice, hehe :)

Best Practice Active Directory Design for Managing Windows Networks
http://www.microsoft.com/technet/prodtechnol/windows2000serv/technologies/activedirectory/plan/bpaddsgn.mspx

Best Practice Methods for Windows 2000 Domain Controller Setup
http://support.microsoft.com/?id=kb;en-us;216899

hope it helps,
bbao
0
 
LVL 13

Author Comment

by:hstiles
Comment Utility
Extra point sfor bbao for those handy links
0

Featured Post

Enabling OSINT in Activity Based Intelligence

Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

Join & Write a Comment

Greetings, Experts! First let me state that this website is top notch. I thoroughly enjoy the community that is shared here; those seeking help and those willing to sacrifice their time to help. It is fantastic. I am writing this article at th…
Enterprise networks where VoIP phones have been deployed frequently use port configurations that allow both a computer and an IP phone to be plugged into the same switch port but use different VLANs. On Cisco equipment I'm referring to the "native V…
It is a freely distributed piece of software for such tasks as photo retouching, image composition and image authoring. It works on many operating systems, in many languages.
You have products, that come in variants and want to set different prices for them? Watch this micro tutorial that describes how to configure prices for Magento super attributes. Assigning simple products to configurable: We assigned simple products…

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

15 Experts available now in Live!

Get 1:1 Help Now