External DNS Servers on a Windows 2003 Server - Where do I input the IP Address?

Posted on 2005-03-03
Medium Priority
Last Modified: 2010-03-18
Hello Experts,

I have a pretty simple setup, two HP servers both with windows 2003 and some other member servers also running windows 2003 & 2000.

Right now I have all the workstations that are in the domain set to DHCP

My main File server is named FS-1 and it has active directory, dns & dhcp configured on it, FS-2 is my exchange server and it's IP is hard coded to and I have pointed the DNS to which is the IP for FS-1

In FS-1 I hard coded the IP to and I pointed the DNS to which is my linksys router.

in my linksys router I have it configured for a static IP that I got from my ISP and two DNS servers of &

Is this the correct way of pointing the servers to my ISP's external DNS servers?

Should I be hard coding the External DNS servers of & someplace else within Windows 2003?

Basically I just want to know what you experts do, Does everybody else do it this way?

TIA for all the info,


Question by:Lasareath
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
LVL 85

Assisted Solution

oBdA earned 668 total points
ID: 13454307
> I pointed the DNS to which is my linksys router.
is a Big No.
Compare this with your current configuration:

*** TCP/IP-Settings ***
* On FS-1, make sure the only DNS listed in the TCP/IP properties is itself (
* If FS-2 is DC/DNS as well, let it point to FS-1 as primary, to itself as secondary.
* On your domain members, enter only your AD DNS server(s) as DNS servers.
* Do NOT enter your ISP's or your router's DNS server in the TCP/IP settings on any domain member. All DNS resolution needs to be done by your internal AD DNS servers *only*.

*** DNS Server Settings ***
* Delete the root zone (if present) in your DNS server's forward lookup zones (the single dot, "."), to enable external lookups.
* Right-click your forward and reverse lookup zones, go to Properties, and make sure that Dynamic Updates are enabled.
* In the properties page of your DNS servers, configure forwarders to point to your ISP's DNS (or your linksys router). The forwarders section is the *only* entry in your network where your ISP's DNS should be listed.
* It's recommended (but not necessary) to set your zones to Active Directory integrated (this can be done in the properties of the zones as well).

if you had to change any DNS server settings, open a command prompt and enter "ipconfig /registerdns", then stop and re-start the netlogon service. Check if the SRV records have been created (see link below).
Here's a bunch of links you might find useful:

10 DNS Errors That Will Kill Your Network

Frequently Asked Questions About Windows 2000 DNS and Windows Server 2003 DNS

Best practices for DNS client settings in Windows 2000 Server and in Windows Server 2003

How to Verify the Creation of SRV Records for a Domain Controller

How Domain Controllers Are Located in Windows

How Domain Controllers Are Located in Windows XP

SRV Resource Records May Not Be Created on Domain Controller

HOW TO: Set Up the Domain Name System for Active Directory in Windows Server 2003

HOW TO: Configure DNS for Internet Access in Windows Server 2003

HOW TO: Troubleshoot DNS Name Resolution on the Internet in Windows Server 2003
LVL 16

Accepted Solution

samccarthy earned 668 total points
ID: 13455935
Down an dirty,

DNS server, point DNS to itself Only.  Other servers and workstations, Point to the Internal DNS server ONLY.  Let that server resolve all queries to the Internet root servers.  Do not use forwarders unless absolutely necessary, like if your ISP requires it.  In you case ALL DNS settings should point to

That's all there is to it.
LVL 14

Assisted Solution

by:Joseph Hornsey
Joseph Hornsey earned 664 total points
ID: 13456521
Holy Web Links, Batman!  Quite a collection up there!

Sometimes the root hints don't resolve correctly in Windows 2000/2003 DNS servers (not often, but I've seen it happen).  An alternative is to go to your DNS Console, right-click on the server and go to "Properties".  Then, click on the "Forwarders" tab and enable forwarders.  Add the two IP addresses ( & to the list of forwarders and click OK a few times.  :)

For the record, samccarthy's way is the best practice.

Simple, centralized multimedia control

Watch and learn to see how ATEN provided an easy and effective way for three jointly-owned pubs to control the 60 televisions located across their three venues utilizing the ATEN Control System, Modular Matrix Switch and HDBaseT extenders.


Author Comment

ID: 13605157
Thanks Alot SplinterCell5894 , samccarthy , oBdA !

I would love to split the 500 points between the three of you's but I can't figure out how.



I think this page needs some updates. Each contributator to the answer should have a check box next to their names, I click the person(s) that should get points and then the next page asks me how to split the points, evenly or to a certian amount for each person.

LVL 85

Expert Comment

ID: 13605915
Well, that's sort of how it works:
More than one Expert helped solve my problem. What do I do?
LVL 16

Expert Comment

ID: 13641110
Thanks, I appreciate it!
LVL 16

Expert Comment

ID: 13907696
Split like the poster said above

Thanks Alot SplinterCell5894 , samccarthy , oBdA !

I would love to split the 500 points between the three of you's but I can't figure out how.

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article offers some helpful and general tips for safe browsing and online shopping. It offers simple and manageable procedures that help to ensure the safety of one's personal information and the security of any devices.
An article on effective troubleshooting
Michael from AdRem Software explains how to view the most utilized and worst performing nodes in your network, by accessing the Top Charts view in NetCrunch network monitor (https://www.adremsoft.com/). Top Charts is a view in which you can set seve…
Have you created a query with information for a calendar? ... and then, abra-cadabra, the calendar is done?! I am going to show you how to make that happen. Visualize your data!  ... really see it To use the code to create a calendar from a q…

752 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question