Solved

Installing/Configuring a new DNS server

Posted on 2007-03-30
3
194 Views
Last Modified: 2010-04-18
I have a domain controller that I need to demote. I have built a new DC and I have installed DNS, but it's not configured. Looking at the properties of the DC that I want to demote, I see settings that I don't see on the DC that does not have DNS configured (makes sense). Looking at the properties of my Forward lookup zone on the DC that I need to demote, I see that this AD integrated and that the zone is set up to replicate to all of the domain controllers in the domain (again, that makes sense). Dynamic updates are set to secure and nonsecure (Microsoft Default), and it seems like each DC (I also have 2 W2K DCs that will be demoted as well) are their own SOA server.

After that long description, my question is about the configuration of DNS on my newest DC. If I go the the dnsmgmt.msc and select "action"->"Configure a DNS server", it brings up a wizard and I don't want to complete the wizard if I'm going to mess something up. I'm new to setting up DNS and I want to make sure that I don't do something that will mess up my internal name space.

BTW, our site is hosted off site, so my namespace is used to resolve internal addresses and requests are forwarded to our host. (At least in theory I think that's how it's set up).

I'm also interested in how the forwarders should be set up. I assume the forwarders are servers on my network that direct internet traffic the name servers at my site host.

Please explain this to me like I'm a "4 year old".

Thanks for the reply!!
0
Comment
Question by:punchie123
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 10

Accepted Solution

by:
Sorenson earned 500 total points
ID: 18823764
Was DNS installed before the server had dcpromo run?  If so, uninstall DNS, and reinstall.  It shoud automatically get the AD zone when it replicates with the other DCs.

Forwarders are the reference point for dns lookups.  The client looks to a dns server, if the dns server has the domain (locally) it responds to the query, if it does not have the domain, it looks to a forwarder to an answer.  Forwarders are used to control the "path" that DNS queries take when looking for responses.  This allows admins to control where responses come from, and is important when internal and external dns are used (keep internal clients from getting external addresses for resources, etc).

hope that helps.
0
 

Author Comment

by:punchie123
ID: 18823928
Yes, DNS was installed before DCpromo was run. Funny you ask that question, because I was confused with this rule "DNS needs to be installed before AD can be installed on a server". I took that to be a literal statement in the terms that DNS needed to be installed on that server in order for AD to be installed. To further clarify, I thought it was "server specific" instead of "domain specific".

In short, DNS was configured before I ran dcpromo on the latest DC. The zones seemed to have transferred the the new DC as well (pretty quickly I might add), but the DC that I want to decommision still has the root hints and the listing for the forwarders in the domain. How do I move that to the new DC or will that info be transferred automatically?
0
 
LVL 10

Expert Comment

by:Sorenson
ID: 18824058
The forwarders will need to be set manually, they are server specific.

Any active-directory integrated zone is stored within the AD database, and would be domain specific, however it requires the DNS service installed to be "seen" on that DC.  If DNS is installed before the server is DCPromo'd it seems to lose it's AD integration, uninstalling and reinstalling puts it back.
0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

I will assume you are running a non-server version of some sort of Windows throughout this article. There are many flavors of Windows since Windows Server 2000 - 2008, XP Home & Pro, Vista Home & Pro, and Windows 7 Starter, Home, Pro, Ultimate, etc.…
ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …
Finding and deleting duplicate (picture) files can be a time consuming task. My wife and I, our three kids and their families all share one dilemma: Managing our pictures. Between desktops, laptops, phones, tablets, and cameras; over the last decade…

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question