?
Solved

DNS configuration for AD

Posted on 2006-04-06
4
Medium Priority
?
134 Views
Last Modified: 2010-04-14
Hello -

This is a question about proper configuration of DNS for AD in a multiple site environment.  This is more theortical right now but I want to be sure I am going to do it right.

Here are the basics -

Single domain
Two sites connected via T1
Each site has two DCs and two member servers
All servers are Win2K SP4
Sites are A and B
Domain Controllers are DC1 and DC2
Member servers are MS1 and MS2

Naming convention is site-server name
Thus, A-DC2 is the second DC at site A

All DC are DNS servers (AD integrated)

Ok, Site A is the 'primary' with one DC holding all FSMO roles - that would be A-DC1.

On A-DC1, under TCP/IP properties, it should point to itself for primary DNS server.  Secondary is A-DC2.
On A-DC2, under TCP/IP properties, it should point to A-DC1 for primary DNS server.  Secondary is itself (A-DC2).

On B-DC1, under TCP/IP properties, it should point to itself for primary DNS server.  Secondary is A-DC1.
On B-DC2, under TCP/IP properties, it should point to B-DC1 for primary DNS server.  Secondary is itself (B-DC2).

Member servers -
All member servers and clients in Site A point to A-DC1 as primary and A-DC2 as secondary.
All member servers and clients in Site B point to B-DC1 as primary and B-DC2 as secondary.


Is this right?

Are there any different considerations with a 2K3 AD domain?


Thanks!
0
Comment
Question by:dasmail2000
  • 2
  • 2
4 Comments
 
LVL 71

Accepted Solution

by:
Chris Dent earned 2000 total points
ID: 16393024

That all looks great.

While you're setting it all up it would be a very good idea to have just one Preferred DNS Server for your Domain Controllers, that is:

On A-DC1, under TCP/IP properties, it should point to itself for primary DNS server.  Secondary is A-DC2.
On A-DC2, under TCP/IP properties, it should point to A-DC1 for primary DNS server.  Secondary is itself (A-DC2).

On B-DC1, under TCP/IP properties, it should point to A-DC1 for primary DNS server.  Secondary is itself.
On B-DC2, under TCP/IP properties, it should point to A-DC1 for primary DNS server.  Secondary is itself (B-DC2).

That's just to ensure that replication can begin properly before you start needing it for DNS replication. After replication has started you'll be a lot safer changing it back to how you have it above, just keep an eye out for DNS errors (there shouldn't be any).

The considerations for a 2003 domain are the same as you have above.

Chris
0
 
LVL 1

Author Comment

by:dasmail2000
ID: 16399059
So in the original setup, how does replication between A-DC1 and B-DC1 happen?  I think that since they are both AD integrated then the DNS information is replicated with AD.

What I mean is the following:

I add a new host record to A-DC1.  Since B-DC1 does not look to A-DC1, the only way B-DC1 can get that update is via AD replication.  As they are both DCs, they know about each other and can communicate.  When that happens then the new host would be added to B-DC1.

This right?

Thanks
0
 
LVL 71

Expert Comment

by:Chris Dent
ID: 16399466


> So in the original setup, how does replication between A-DC1 and B-DC1 happen?  I think
> that since they are both AD integrated then the DNS information is replicated with AD.

That's absolutely correct, and provided you already have replication happening there's no real problem with your original setup. There is the possibility of one minor issue which can be caused if the server replication gets out of sync, but replication failures are quite easy to track.

But... When you first set up the servers (i.e. run DCPromo) they must have a way of finding each other, so you must use the same DNS Server until the initial replication has taken place.

Chris
0
 
LVL 1

Author Comment

by:dasmail2000
ID: 16400056
Great - thanks for your input and thoughts.

Brad
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
Tech giants such as Amazon and Google have sold Alexa and Echo to such an extent that they have become household names. And soon they are expected to be used by commoners in their homes, ordering takeout, picking out a song, answering trivia questio…
This Micro Tutorial will teach you how to add a cinematic look to any film or video out there. There are very few simple steps that you will follow to do so. This will be demonstrated using Adobe Premiere Pro CS6.
This lesson discusses how to use a Mainform + Subforms in Microsoft Access to find and enter data for payments on orders. The sample data comes from a custom shop that builds and sells movable storage structures that are delivered to your property. …
Suggested Courses
Course of the Month14 days, 18 hours left to enroll

840 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question