Some DNS questions

Hi,

I have 2 DNS servers, both are AD integrated (single domain), each server is in different site.
Since I'm having some DNS issues, I would like to ask you some questions:

The SOA record should point to the same server? or each SOA should point to it's server?
Since I'm only using AD integrated, may I disable zone transfers?


Thanks.
AbelBAsked:
Who is Participating?
 
Chris DentConnect With a Mentor PowerShell DeveloperCommented:

There's nothing wrong with using Forwarders.

The Root Hints file (that's what's stored in the RootDNSServers bit) is how it resolves requests if you don't use Forwarders. Instead of just handing off the request to another DNS Server (the forwarder) it heads off to find the answer itself.

Chris
0
 
AbelBAuthor Commented:
Oh, and another question I forgot...

In AD, under [domain]\System\MicrosoftDNS\RootDNSServers   there is nothing. is that OK? what should be here?


Thanks again.
0
 
Chris DentPowerShell DeveloperCommented:

> The SOA record should point to the same server? or each SOA should point to it's server?

Because the zone is AD Integrated the SOA record appears differently depending on which server you're looking at it on.

It does that because every server has access to write to the zone file (unlike a standard Primary zone which only one server can write to).

> Since I'm only using AD integrated, may I disable zone transfers?

Yes. Unless you have a specific need to have Secondary DNS Servers then there's no need to allow Zone Transfers.

> In AD, under [domain]\System\MicrosoftDNS\RootDNSServers there is nothing.
> is that OK? what should be here?

Yes that's okay, it should be empty. It's the folder itself that has the things we're interested in bound to it. It contains the list of Root Name Servers which your server will use to answer Public Queries (unless you've set it up to use Forwarders).

What kind of DNS issues are you having?

Chris
0
 
AbelBAuthor Commented:
Thanks for your answers.

I am using forwarders, shouldn't I ?

I can't point to a specific DNS issue right now, I will try to find an example and write it here.


Thanks again.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.