• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 175
  • Last Modified:

MS DNS new server

If I add a new DC to my domain and install DNS on it do I have to add a new zone if I want to use it as a backup DNS server? I have 1 DNS server with a zone that is integreated into AD, and I want that same zone on this DC.
0
kevlause
Asked:
kevlause
  • 2
  • 2
1 Solution
 
KCTSCommented:
Just add DNS - If your current DNS is active directory integrated it will replicate automatically. if you are not using AD Integrated DNS then you should - it allows all DCs to hold a primary zone file, gives better integration and security and is more efficient.
0
 
PberSolutions ArchitectCommented:
If that new DNS server is a DC in the same domain, it will automatically get the new zone because it's AD integrated.  It usually takes a while to replicate before the zone will show up, but the zone should just show up in the DNS console all by itself.  You do not need to add it.

You may need to point the new DC's client TCP/IP DNS settings to the first DC.

0
 
bwrighty1Commented:
You should convert you standard zones to active directory integreated zones, some of the benefits are:
1. Multimaster replication (the zone can be eddited on any domain controller).
2. Zones are replicated and synchronized to new domain controllers automatically whenever a new one is added to an Active Directory domain.
3. Directory replication is faster and more efficient than standard DNS replication.
4. Secure dynamic updates.
0
 
KCTSCommented:
The new DC should point TO ITSELF for DNS if it is a DNS server - NOT to the other DNS server.

You can configure the clients with one DNS server as the preferred DNS server and the other as the Alternate DNS server (either in the TCP/IP settings or DHCP options). While you are at it its a good idea to make the new server a global catalog - go to Administrative Tools, Active Directory Sites and Services, Expand ,Sites, Default first site and Servers. Right click on the new server and select properties and tick the ‘Global Catalog’ checkbox. (Global catalog is essential for logon as it needs to be queried to establish Universal Group Membership)
0
 
PberSolutions ArchitectCommented:
KCTS,

I mentioned to point to the first DC for DNS to ensure the zone was transferred and we are dealing with Windows 2000 AD.  I should have clarified a bit.  
As per
http://support.microsoft.com/kb/291382 (Why do I have to point my domain controller to itself for DNS?)
and
http://support.microsoft.com/kb/275278
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Building an Effective Phishing Protection Program

Join Director of Product Management Todd OBoyle on April 26th as he covers the key elements of a phishing protection program. Whether you’re an old hat at phishing education or considering starting a program -- we'll discuss critical components that should be in any program.

  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now