2 Primary Servers vs 1 primary 1 Secondary

Posted on 2008-11-19
Last Modified: 2012-05-05
Looking at the 'Properties' on one of my Forward Look-up zones, on the 'General' tab there is a setting to change the 'Zone Type'. When clicking on this, I can choose between Primary Zone, Secondary Zone, or Stub Zone with a brief description of each. My primary DNS/DC server is set as 'Primary Zone,' I have a secondary DNS/DC server also set as 'Primary Zone,' This is all on a single Domain environment with approx. 300 PCs . Should my secondary DNS/DC server be set as 'Secondary Zone' or remain as 'Primary Zone' and what are the implications? I want to have a completely fault tolerant set-up...
Question by:aheckman
    LVL 35

    Accepted Solution

    Usually for Domain controller, you will set as Active Directory-intergrated and it will be primary.

    the benefit of doing this is all your DNS information is replicated as part of your Active Directory

    I won't think about secondary zone and etc. those applicable if you got something more complicated then 2 servers
    LVL 2

    Author Comment

    Take this one step further for me...  we have 4 sites (hub and spoke).  Hub site has the 2 DNS/DC's.  Each spoke has a DC.  Do you think it would be appropriate to change those spoke DC's into DNS servers to lessen the amount of DNS traffic over WAN links.  (Not that i think that traffic is cluttering the lines, but in an overall design aspect).
    LVL 35

    Assisted Solution

    by:Jian An Lim
    one thing you need to take account into is all DC replicated to each other all time. (or spoke to hub). Putting the DNS record into AD replication will not burden the replication (unless we are talking 128KB) here. Further, IT only replicate once .. then keep replicating for the reset of your time. And if you update DNS  on your spoke server, you will get updated in hub.

    If you have only secondary server, everytime u need to change your dns settings, you need to send the request through the link to the hub DNS and it then replicated back to spoke DNS..

    even you put in sencondary dns, it still need to do a zone transfer from the HUB server, it is either make the changes now or later compare to secondary dns..

    Unless you got a great concern about the security in your spoke server, i wont think much of putting a secondary out there.

    LVL 2

    Author Closing Comment

    There's really no finite solution here.  I looked for more opinions than answers, however only one person responded.  I'm grateful for their response so i gave them the points.  Thanks you!

    Featured Post

    PRTG Network Monitor: Intuitive Network Monitoring

    Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

    Join & Write a Comment

    I've always wanted to allow a user to have a printer no matter where they login. The steps below will show you how to achieve just that. In this Article I'll show how to deploy printers automatically with group policy and then using security fil…
    Find out how to use Active Directory data for email signature management in Microsoft Exchange and Office 365.
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
    This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

    733 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    17 Experts available now in Live!

    Get 1:1 Help Now