Installing DNS on the additional DC???

Dears,

I need to have a redundancy to my DNS. I have 2 DC's as follow:

One act as the main DC and DNS configured on it and the another DC act as its additional but without DNS.
Dears,

I need to have a redundancy to my DNS. I have 2 DC's as follow:

One act as the main DC and DNS configured on it and the another DC act as its additional but without DNS.

I need to configure a secondary DNS on the additional DC. Is it recommended to create
I need to configure a secondary DNS on the additional DC. Is it recommended to create it as an active directory integrated or secondary zone pointing to the primary one only?

Please recommend a solution for me?
bategAsked:
Who is Participating?
 
Brian PierceConnect With a Mentor PhotographerCommented:
No need to get boggged don in "Primary" and "Secondary". If you are using AD Integrated DNS (the default), then all you have to do is add the DNS server service on the second DC, DNS will rplicate along with AD and tou will in essence have multiple primary DNS servers.

You will of course need to configure the clients to use on DNS server as the preferred DNS server and the other as the alternate DNS server. - The DCs should use themselves as their own preferred DNS server and each other as alternate.
0
 
AmericomCommented:
In addition to install DNS service on your second DC, you need to create the exact same zone name(s) on your secondary DNS and configure them as Active Directory-Integrated zone(s). Before you even do the configuration, you should double check and make sure your current DNZ zone is configured as Active Directory-Integrated zone first.
Since you have only two DCs, one other thing you may want to do is make your second DC also a GC, if it is currently not a GC.
0
 
bluntTonyConnect With a Mentor Commented:
As KCTS has said, just install DNS and either initiate replication, or wait for it to occur. You will see the DNS zones drop into the console of the new DNS server. Once replication has occurred you can change the new DC's primary and secondary DNS servers.

While setting a DC to use itself as primary DNS I think is the generally accepted rule, there are arguments for and against this. For example, if you do get each DC to look at itself for DNS primarily, and for some reason you change one of the DCs IP address, that change will never replicate, causing a 'DNS Island' - a catch 22 where the other DC needs the other's IP to replicate, but it won't know it until it replicates.

This is just an example really, and probably unlikely. I personally configure my DCs as KCTS has said. Have a look at this for the MS best practices for DNS : http://support.microsoft.com/kb/825036
0
Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

 
bluntTonyCommented:
Americom - I have to respectfully disagree. Providing that the DC is in the replication scope of the ADI DNS zone (being in the same domain it should be, whether it's the domain NC or DomainDNSZones), the zone will replicate and drop into the console automatically. It'll take a few minutes but it does come in by itself. At least in does in my W2K3 test environment.
I can't help thinking that manually creating a duplicate zone in the directory might cause some problems.
0
 
Chris DentPowerShell DeveloperCommented:

> I can't help thinking that manually creating a duplicate zone in the directory might
> cause some problems.

You'd be right.

If it's in the same partition it can overwrite an existing copy (sometimes, not always, depends which has the "latest" version). If it's in a different partition it can cause the DNS server to become rather upset about finding multiple copies of the same zone.

Install the DNS service, wait for replication. The data is there, nothing needs to be created, it just needs time to think about loading it.

Chris
0
 
AmericomCommented:
I totally agree that install the dns services and wait for replication or just force replicaiton manually would get the data, afterall, this is active directory-integrated zone and I have personally done it many times. What was I thinking or writing, primary/secondary zone??....no excuse! Thanks for pointing out the mistake, wish I can grant some point to you :)
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.