DNS configuration for AD

Hello -

This is a question about proper configuration of DNS for AD in a multiple site environment.  This is more theortical right now but I want to be sure I am going to do it right.

Here are the basics -

Single domain
Two sites connected via T1
Each site has two DCs and two member servers
All servers are Win2K SP4
Sites are A and B
Domain Controllers are DC1 and DC2
Member servers are MS1 and MS2

Naming convention is site-server name
Thus, A-DC2 is the second DC at site A

All DC are DNS servers (AD integrated)

Ok, Site A is the 'primary' with one DC holding all FSMO roles - that would be A-DC1.

On A-DC1, under TCP/IP properties, it should point to itself for primary DNS server.  Secondary is A-DC2.
On A-DC2, under TCP/IP properties, it should point to A-DC1 for primary DNS server.  Secondary is itself (A-DC2).

On B-DC1, under TCP/IP properties, it should point to itself for primary DNS server.  Secondary is A-DC1.
On B-DC2, under TCP/IP properties, it should point to B-DC1 for primary DNS server.  Secondary is itself (B-DC2).

Member servers -
All member servers and clients in Site A point to A-DC1 as primary and A-DC2 as secondary.
All member servers and clients in Site B point to B-DC1 as primary and B-DC2 as secondary.


Is this right?

Are there any different considerations with a 2K3 AD domain?


Thanks!
LVL 1
dasmail2000Asked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Chris DentPowerShell DeveloperCommented:

That all looks great.

While you're setting it all up it would be a very good idea to have just one Preferred DNS Server for your Domain Controllers, that is:

On A-DC1, under TCP/IP properties, it should point to itself for primary DNS server.  Secondary is A-DC2.
On A-DC2, under TCP/IP properties, it should point to A-DC1 for primary DNS server.  Secondary is itself (A-DC2).

On B-DC1, under TCP/IP properties, it should point to A-DC1 for primary DNS server.  Secondary is itself.
On B-DC2, under TCP/IP properties, it should point to A-DC1 for primary DNS server.  Secondary is itself (B-DC2).

That's just to ensure that replication can begin properly before you start needing it for DNS replication. After replication has started you'll be a lot safer changing it back to how you have it above, just keep an eye out for DNS errors (there shouldn't be any).

The considerations for a 2003 domain are the same as you have above.

Chris

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
dasmail2000Author Commented:
So in the original setup, how does replication between A-DC1 and B-DC1 happen?  I think that since they are both AD integrated then the DNS information is replicated with AD.

What I mean is the following:

I add a new host record to A-DC1.  Since B-DC1 does not look to A-DC1, the only way B-DC1 can get that update is via AD replication.  As they are both DCs, they know about each other and can communicate.  When that happens then the new host would be added to B-DC1.

This right?

Thanks
Chris DentPowerShell DeveloperCommented:


> So in the original setup, how does replication between A-DC1 and B-DC1 happen?  I think
> that since they are both AD integrated then the DNS information is replicated with AD.

That's absolutely correct, and provided you already have replication happening there's no real problem with your original setup. There is the possibility of one minor issue which can be caused if the server replication gets out of sync, but replication failures are quite easy to track.

But... When you first set up the servers (i.e. run DCPromo) they must have a way of finding each other, so you must use the same DNS Server until the initial replication has taken place.

Chris
dasmail2000Author Commented:
Great - thanks for your input and thoughts.

Brad
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows 2000

From novice to tech pro — start learning today.