Solved

DNS Corect Setup on Active Directory

Posted on 2009-05-08
6
218 Views
Last Modified: 2012-05-06
I recently started experiencing some problems after one of my DNS server crashed. I have a network with 500 worskstations and I have 8 DC servers running at each of my subnets.
When my Primary DC crashed at my main site, all workstations stoped resolving when trying to get to my internet.
All of our internet traffic goes out from our main site and since that DC had the Forward Pointers to external DNS all the rest of my DNS servers could not rsolve for them
All my DNS are active-directory integrated.
My question is ; do I have to setup Forwarders on all my DNS to use external ISP dns?
Also I noticed that even thought all my workstations had a secondary DNS they did not use it to resolve.
Any help is greatly appreciated
0
Comment
Question by:sammydlc
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
6 Comments
 

Expert Comment

by:dpm2009
ID: 24338299
You should just need to setup your Primary DC's DNS settings to your external DNS.  While all local dns requests can point to the primary DC....
0
 
LVL 84

Expert Comment

by:oBdA
ID: 24338332
Yes, it's best to setup the forwarders to your ISP's DNS on all DNS servers; otherwise the servers will by default use the root hints to resolve external lookups. Were your additional DCs pointing to your main DC as forwarder, and/or could there be any firewall issues on the additional DCs?
And how did you check whether your machines weren't using the secondary DNS?
Are your additional DCs Global Catalogs?
0
 

Author Comment

by:sammydlc
ID: 24338432
Ok, I just modified that. Now all my Dcs have Forwarders to External ISP DNS.
Yes some of my DNS servers had only my Main DNS listed on theyr external forwarders. They had not external DNS. i do not think we have a firewall issue because I was able to ping fine internally if I did it manually. All my remaining DNS servers responded fine when I pinged them.

As for the workstations not able to use the secondary DNS i verified that the workstation had a DHCP address assigned. when I did an ipconfig I saw that my primary DNs was the server that had crased.
My secondary DNS was a server that was operational except it was on a different subnet than where my stations were. When I pinged an internal name I got a response. When I pinged an external name I did not get a response.
0
Visualize your virtual and backup environments

Create well-organized and polished visualizations of your virtual and backup environments when planning VMware vSphere, Microsoft Hyper-V or Veeam deployments. It helps you to gain better visibility and valuable business insights.

 
LVL 84

Accepted Solution

by:
oBdA earned 250 total points
ID: 24338470
If your other DNS servers were set to forward to your main DNS server, then that's simply why.
This should work flawlessly with the external forwarders on all DNS servers.
0
 

Author Comment

by:sammydlc
ID: 24338774
OK everything is working ok except that my secondary DNs is still not resolving.
I tested because one of my stations has the Crashed DNS as primary DNS and my Working DNS as 2nd.

If I ping by name I am still  not resolving.

If I move my working DNS to primary and ping by name, I get a response.
Am I missing something on DNs configuration>?
0
 

Author Comment

by:sammydlc
ID: 24338807
Secondary DNS is now responding. I guess it just needed some time to start responding. Now if I have my working DNs as Secondary Even 3rd I can resolve without problems.
0

Featured Post

Free Tool: Port Scanner

Check which ports are open to the outside world. Helps make sure that your firewall rules are working as intended.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Cannot Change Local DNS 9 71
Internal users cannot browse external corporate website 4 30
analyzing possible malicious link 8 26
Windows Deployment Services 6 49
Scenerio: You have a server running Server 2003 and have applied a retail pack of Terminal Server Licenses.  You want to change servers or your server has crashed and you need to reapply the Terminal Server Licenses. When you enter the 16-digit lic…
While rebooting windows server 2003 server , it's showing "active directory rebuilding indices please wait" at startup. It took a little while for this process to complete and once we logged on not all the services were started so another reboot is …
In a recent question (https://www.experts-exchange.com/questions/29004105/Run-AutoHotkey-script-directly-from-Notepad.html) here at Experts Exchange, a member asked how to run an AutoHotkey script (.AHK) directly from Notepad++ (aka NPP). This video…
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …

735 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question