Improve company productivity with a Business Account.Sign Up

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 326
  • Last Modified:

DNS question adding a windows svr03 to sbs

Hi
I have a quick question regarding adding my remote windows 2003 server to my sbs domain.
I know when I add the remote server to the sbs domain I have to set the remote servers Primary DNS to point to the SBS server (10.13.1.10).. does this is always stay the sameall the time? My main concern is that how my users in the remote network are going to connect to the internet, because at the moment I have set the DNS servers that my isp gave me in the forwarders sections in DNS. Also in my remote office my router looks for the server to handle the dns quries. Once I add the remote server to the sbs domain, my remote network wont try to look for sbs domain to handle its internet will it? Sorry for the stupid questions but its my first time in doing this.
0
Dan560
Asked:
Dan560
  • 5
  • 5
  • 3
1 Solution
 
KCTSCommented:
Two options - once you have installed DNS on the new server an set your clients up to use it you can?

1. Set up frowarders on the new DNS server to point directly to the internet servers (as you have with the SBS server

2. 1. Set up frowarders on the new DNS server to point to the SBS server (and then that will use its forwarder to the internet.
0
 
ormerodrutterCommented:
Set primary DNS pointing to your SBS and in SBS setup the forwarders given by your ISP. All internet traffic will be handle by the SBS first and if it fails to resolves the address it will send your requests to the ISP's DNS. Just like what you would do using the SBS server on its own.
0
 
KCTSCommented:
I've just re-red the question:
I am assuming that you are manking the new server an additional domain controller ? If you set up a remote server, then you should initially point it at the SBS server for its DNS.  Once you have made it a DC, then you need to install DNS on it

Once you have installed DNS on the new server, then you should change its settings so that it uses itself as the preferred DNS server and the SBS server as an alternate DNS server. the you should either

1. Set up frowarders on the new DNS server to point directly to the internet servers (as you have with the SBS server
OR
2.  Set up frowarders on the new DNS server to point to the SBS server (and then that will use its forwarder to the internet.


0
Get your problem seen by more experts

Be seen. Boost your question’s priority for more expert views and faster solutions

 
Dan560Author Commented:
Sorry I forget to mention it, yes I do want the remote server to be a 2nd DC..So when I'm adding the server to the domain I need my primary DNS to be pointing to the sbs server? and then when I want to run dcpromo do I need to change the servers DNS to point to itself? And then in DNS setup the forwarders on the remote server that my ISP gave me?
0
 
KCTSCommented:
Yes point the server to the SBS server for its DNS to begin with. DCPROMO it to make it a DC, then add DNS. Once DNS has replicated (it will replicate automatically once installed), then change the preferred DNS server setting to it points at itself (and to the SBS as alternate). then set up the forwarders.
0
 
KCTSCommented:
BTW its also a good idea to make the new DC a global catalog: Go to Administrative Tools, Active Directory Sites and Services, Expand , Sites, Default first site and Servers. Right click on the new server and select properties and tick the Global Catalog checkbox. (Global catalog is essential for logon as it needs to be queried to establish Universal Group Membership)
0
 
Dan560Author Commented:
Thanks KCTS, yep I was going to do that, there are few things with sites and services that I need to configure anyway.
One last question though, I'm going to setup user profiles on the remote server, and use it as a file sharing server for the few users that work under that network. The two servers wont replicate the shared folders will they?
And also do you know from personal experience whether having a 2nd DC accross a vpn uses alot of bandwidth?
0
 
ormerodrutterCommented:
I read articles saying running TS on a DC will seriously compromise security and might have issues. I think thats about allowing user(s) to logon locally on a DC isn't a very good idea. And thats probably why they took TS away from SBS and only allow 2 concurrent admin connections.

http://www.msterminalservices.org/articles/Securing-Windows-Terminal-Services.html

So unless absolute necessary I wouldn't recomment promoting a TS server to a DC, or set a DC to become a TS server.

In answering the last question from Dan - No having 2 DCs across a VPN do not use much bandwidth. AD replication only replicate "changes" and i don't think your AD will be changed that often? Beside you can always schedule the replication windows, i.e. time to replicate. You can only allow replicatioin to be occurred once an hour or even less frequent than that.
0
 
Dan560Author Commented:
Yeah Its not a good idea to have TS on a DC, I agree,I've managed to lock it down quite alot via group polic thanks for your advice.
0
 
KCTSCommented:
I have to agree with the recommendation that you don't make the TS server a DC - the users are effectivly logging on locally to the DC so there is a limit with what you can do with policies and the like (which is why its not recommended  - and actually prohibited on an SBS sever
0
 
Dan560Author Commented:
Terminal server would be running on the 2nd DC..so it would be on the windows 2003 standard which has been running as TS for a while. Its only one user, is this still a problem if I carry on using the windows 2003 server as a TS?
0
 
ormerodrutterCommented:
If you only have ONE user why not set him up RWW on the SBS?
0
 
Dan560Author Commented:
Well we have one of those basic thin client terminals, so she has been using remote desktop, Will it really kick up a fuss if I carry on doing this? I'm not connecting to SBS remotley, but your saying it won't like it?
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Get your problem seen by more experts

Be seen. Boost your question’s priority for more expert views and faster solutions

  • 5
  • 5
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now