Solved

Windows 2003 AD DNS best practices

Posted on 2004-08-25
3
1,503 Views
Last Modified: 2013-12-19
We are days away from upgrading our domain to a Windows 2003 Active Directory.  This is how I propose to perform the upgrade

We have the following scenario

1 X NT4 PDC
1 x NT4 BDC

1 x Windows 2003 Server which hosts Pri DNS and which will be the eventual main DC, FSMO master
1 x Windows 2003 Server which hosts Sec DNS and which will be the second DC

I have already created the neccesary zones, namely,
_msdcs.mycompany.co.uk
 _sites.mycompany.co.uk
_tcp.mycompany.co.uk
_udp.mycompany.co.uk
ForestDNSZones.mycompany.co.uk
DomainDNSZones.mycompany.co.uk

all zones support dynamic updates

So, when I upgrade our PDC, DNS setup will complete without a hitch using the existing DNS server.  I will then run dcpromo on the Pri DNS once I am happy with the upgrade.

Anyway, this is my question.  The zones above are all Standard Primary on the Pri DNS server with the Sec DNS Server listed as additional nameserver.  Should I

1) Set up secondary zones on the Sec DNS server then once I have promoted both servers to DCs change the zone types to AD Integrated
2) Leave the zones just residing on the Pri DNS server.  Then, once I have promoted the first server, change the zone type to AD integrated and then promote the second.

I know it probably seems like a very subtle distinction, but I would appreciate some input.
0
Comment
Question by:hstiles
3 Comments
 
LVL 23

Assisted Solution

by:rhandels
rhandels earned 50 total points
ID: 11893304
Hi,

I would say use the second option, this will make your live easier. If the first DNS server works and you make it AD integrated, then you're sure the second will also work (because of AD integration). If something goes awire on you in option 1, you have a big problem..

Only thing to take into account (not sure if this is necesarry though), i would delete the secondary DNS zone from the other DC, else you might get conflicts because it has a secondary zone and needs to be AD integrated..
0
 
LVL 37

Accepted Solution

by:
bbao earned 75 total points
ID: 11898639
agree with rhandels.

FYI, the OFFICIAL bast practice, hehe :)

Best Practice Active Directory Design for Managing Windows Networks
http://www.microsoft.com/technet/prodtechnol/windows2000serv/technologies/activedirectory/plan/bpaddsgn.mspx

Best Practice Methods for Windows 2000 Domain Controller Setup
http://support.microsoft.com/?id=kb;en-us;216899

hope it helps,
bbao
0
 
LVL 13

Author Comment

by:hstiles
ID: 11988961
Extra point sfor bbao for those handy links
0

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Sometimes you might need to configure routing based not only on destination IP address, but also on a combination of destination IP address (or hostname) and destination port number. I will describe a method how to accomplish this with free tools. …
Trying to figure out group policy inheritance and which settings apply where can be a chore.  Here's a very simple summary I've written which might help.  Keep in mind, this is just a high-level conceptual overview where I try to avoid getting bogge…
In an interesting question (https://www.experts-exchange.com/questions/29008360/) here at Experts Exchange, a member asked how to split a single image into multiple images. The primary usage for this is to place many photographs on a flatbed scanner…

680 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question