What happens when client PCs are set up to use a router as an alternate DNS server?

I've got an easy question: we have a small Windows Server 2003 network with a single DNS server (running Windows 2003) integrated into Active Directory. We have all of the client PCs set up to use our router as a alternate DNS server so that if the DNS server fails, at least our employees can still access the internet.

My question is, are there any problems associated with this type of setup? If so why, and can they be averted?
LVL 1
bslorenceAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Lee W, MVPTechnology and Business Process AdvisorCommented:
Yes, there are problems with this.  Your clients should ONLY know about the Windows Server DNS.  Active Directory uses DNS to locate servers and services.  There's NO GUARANTEE that your clients will ALWAYS use the server DNS unless it's down.  As a result, they could sometimes ask your ISP "hey where's the global catalog server?" and your ISP's DNS would say "I have no idea what you're talking about - go $@#& yourself".  And the client would then sit there going... hmmm... what do I do now?  Maybe I'll just keep looking and forget about asking.  Eventually, you'll get through... but misconfigured DNS like this is a major cause of slow logons and problems accessing servers.

To fix it, remove all but the Windows Server from your list of DNS servers.  And if you want to  have a backup DNS server, get another Windows Server (Note: if you're using Small Business Server, you can only have ONE SBS server in a netork - other servers are fine, but ONLY one SBS server.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Chris DentPowerShell DeveloperCommented:

Yes there are.

You can't guarantee that the PCs on your network will always use the Preferred DNS Server for internal name resolution. Because of that you may find that you occasionally suffer excessively long logon times and problems accessing network resources.

It's not a setup I would recommend, the availability of the internet during (hopefully) minimal server downtime is a poor return on the performance costs.

Chris
0
Chris DentPowerShell DeveloperCommented:

Sorry Leew, bit slow typing that.

Chris
0
Newly released Acronis True Image 2019

In announcing the release of the 15th Anniversary Edition of Acronis True Image 2019, the company revealed that its artificial intelligence-based anti-ransomware technology – stopped more than 200,000 ransomware attacks on 150,000 customers last year.

bslorenceAuthor Commented:
Why won't the PCs always use the Preferred DNS server? What are a few common causes for a PC using an alternate DNS server?
0
LauraEHunterMVPCommented:
This will probably be an issue in resolving Active Directory resources, esp. your domain controller(s), if your local DNS server fails. Your router is in all likelihood simply forwarding DNS requests to an ISP DNS server that does not host the zone containing your AD SRV records, which means that if your local DNS server fails, your clients will not be able to log onto Active Directory, browse file shares, etc.  They -will- likely still be able to browse the Internet and other things that don't specifically require the ability to resolve your AD DNS records.

The workaround for this, quite simply, is to install additional DNS servers.  If you have multiple DCs in your environment (and please tell me you do), it's easy enough to simply configure each DC as a DNS server, which will provide you redundancy for both AD as well as DNS.

Hope this helps.

Laura E. Hunter - Windows Server: Networking

0
Lee W, MVPTechnology and Business Process AdvisorCommented:
The preferred server is busy and the client doesn't want to wait.
0
LauraEHunterMVPCommented:
In re: "why won't the PCs always use the Preferred server":  whenever a client needs to resolve a DNS query, it will send the query to its primary DNS server.  If that DNS server doesn't respond within a sufficient time (I believe 5 seconds), the client will re-send the query to its secondary DNS, then its tertiary DNS, and so on.  A simple "blip" in network connectivity could cause a client to send a query to its secondary DNS even if the primary is up and running normally.
0
Chris DentPowerShell DeveloperCommented:

It's all down to the DNS Client, if it doesn't get a fast enough response from your Preferred DNS server it'll use the Alternate.  This isn't an easy issue to quantify.

Bear in mind that each client that accidentally queries the Router for DNS resolution during logon will hang around for up to 10 minutes trying to find what isn't there. It should be noted that a Negative Answer from the Router's DNS Server is still a valid answer. Windows XP caches Negative Responses for 5 minutes which goes towards explaining that 10 minutes hanging around.

You may notice the same kind of problems accessing network resources (file servers, etc) just because it's slipped over once.

Chris
0
bslorenceAuthor Commented:
Thanks guys!

I'm splitting the points because both Leew and Chris-Dent answered at pretty much the same time with... pretty much the same answer. I appreciate the help!
0
Chris DentPowerShell DeveloperCommented:

You're welcome :)

Chris
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2003

From novice to tech pro — start learning today.