Solved

How do I set up DNS on a simple 2008 R2 Server for a 35 computer network?

Posted on 2011-03-18
9
1,739 Views
Last Modified: 2013-12-02
I have a small network of 35 computers all in one location.  We have a comcast cable modem that acts as our Gateway, DHCP, and I assume our DNS since I'm using a Novell 5.1 file server only.
I would like to migrate to a Windows Server 2008 R2 and use active directory which would require us to have the server run DNS.  This server will not be accessible on the web.  It will be a LAN only.  
Since I won't be putting this server on the WEB do I have to use a registered domain name?  Can I just use:  corp.buisnessname.org? (as an example).  Do I need to do anything with the comcast cable modem?  It currently points to a static IP address and 2 DNS addresses.  Does my DNS once active on the 2008 R2 Server take over for this?  Do I point the server to the modem/router?
Is there a simple step by step guide out there?  I would think with this being the most basic of setups for server 2008 R2 there would be a nice step by step guide out there.  Do I need forward look up zones with this simple a setup?  Would really appreciate someone directing me to a simple and plan instruction manual on this type of setup.  Once setup up I plan on using this as a simple file server only.  Nothing else.  I don't like the delays with workgroups...we need the security of active directory.

Thanks
Scott McDonald
0
Comment
Question by:SMcDonald666
  • 2
  • 2
  • 2
  • +3
9 Comments
 
LVL 59

Accepted Solution

by:
Darius Ghassem earned 250 total points
ID: 35166279
Installing Active Directory is really easy. Here are some guide below.
http://www.youtube.com/watch?v=8UfBJG4daKk
http://technet.microsoft.com/en-us/library/cc755258(WS.10).aspx
http://www.windowsnetworking.com/articles_tutorials/Running-Windows-Server-2008-R2-Installing-Creating-Lab-Domain-Controller-Part1.html

When you install AD you can allow dcpromo to install DNS for you now this will create your DNS Zones.

On your client computers they should be pointing to the Windows 2008 Server for DNS in their TCP\IP properties

Your DNS server should be using DNS Forwarders to resolve external DNS requests.

http://technet.microsoft.com/en-us/library/cc773370(WS.10).aspx

Your internal Domain has nothing to do with your external domain you don't have to register internal domains
0
 
LVL 4

Expert Comment

by:needleboy
ID: 35166307
Hi there,

This is a basic step by step guide:

1. Turn off DHCP Server on Comcast (Windows 2008 R2 has much better options like client reservation and secure dynamic updates in DNS zones)
2. Install Windows 2008 R2 server, and point primary DNS server on NIC tcp/ip v4 properties to itself ( this is required for AD to work)
3. Install Active Directory domain services and choose name for new domain (you can also use corp.local or whatever you want)
4. Install DHCP Server role and create new DHCP scope for your clients. (make sure that DNS server address in your scope is IP address of AD server not router)
5. Join computers to domain.
0
 
LVL 3

Expert Comment

by:vervenetworks
ID: 35166312
Do you already have a Microsoft Active Directory Domain internally?  You will need this for DNS to work properly.  You will want to use an internal FQDN such as businessname.local rather than a .org.  There are certificate ramifications to using a top level domain internally, and changing is tougher than making it right in the first place.  That being said...

Run the Add Role wizard and select AD DS.  This will create a new domain in a new forest named what you give it.  Then it will launch the DCPROMO wizard.  It will automatically install DNS as well.  Make sure that the server has a static IP address, and once installed, point its NIC to itself as DNS server.  You will likely want to install DHCP as well, and create a scope option for DNS to point at the Windows server.  

Hope this helps.
0
 
LVL 95

Assisted Solution

by:Lee W, MVP
Lee W, MVP earned 250 total points
ID: 35166416
>  This server will not be accessible on the web.  It will be a LAN only.  
What do you mean?  It will not have internet access?  It won't be a web server?  You won't run any publicly accessible services?  You don't want to run VPN?  Please clarify what you mean by this statement.

> Can I just use:  corp.buisnessname.org? (as an example).  
Assuming your most conservative meaning above, then you COULD name it whatever you like... HOWEVER, because needs and expectations change, I would recommend sticking to one of the two accepted standards - either use WhateverYouWant.local or use a sub domain of whatever domain you have registered - for example, if you're e-mail goes to Scott@McDonaldCorp.com, then use corp.McDonaldCorp.com - DO NOT use McDonaldCorp.com (My preference is the .local domain)

> Do I need to do anything with the comcast cable modem?  
Shouldn't have to do anything at all.

> It currently points to a static IP address and 2 DNS addresses.  
If you are not hosting any services than a static address is an unnecessary expense.

> Does my DNS once active on the 2008 R2 Server take over for this?  
Assuming your server WILL have internet access (not necessarily serving anything externally), then yes.

> Do I point the server to the modem/router?
For DNS? You could.  Some argue that using a third party DNS server would provide faster resolution... to me, an extra quarter second is unimportant. I usually let Windows handle DNS directly.

> Do I need forward look up zones with this simple a setup?  
See my previous point.

As for a guide, http://www.petri.co.il/installing-active-directory-windows-server-2008.htm is one of the better places to start.... but I would STRONGLY recommend if you want to get this right, hire a consultant to setup - YOU maintain, but the consultant should install.  Otherwise, may sure you install this a couple of times in a test environment to get familiar with the proper setup and configuration.  It's never a good idea to make the first time you've done something your actual production environment even if you think you've got it right.

Finally, while you are within the use limits of SBS (Small Business Server 2011), if you do not plan on using exchange, I would not recommend it.  The CALs are considerably more expensive.
0
Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

 
LVL 3

Expert Comment

by:dtrance
ID: 35166441
Your scenario is pretty simple.  
Install Server OS
Configure it with a static IP
Run dcpromo
*You don't need a real FQDN.  Setup your AD domain with mycompany.local
*Later, configure DNS to forward all other lookups to comcast.
Finally, create user accounts and join workstations to the new ad domain
0
 

Author Comment

by:SMcDonald666
ID: 35166503
I've not added this server to the network yet.  We are still on the Novell 5.1 server and login system.  My plan is to get this new 2008 R2 up and running with my machine connecting to it and then role it out.  When you say point my clients in there TCPIP properties, does this mean I turn off automatically obtain IP address etc?  I know I'll need to change all the clients from workgroup to domain, but wasn't sure if I'd need to change IP addressing.  Pointing the DNS server to itself is 127.0.0.1 correct?  Can I get DNS running without also going with DHCP?  Or should I do both at the same time.  So I keep the router the same unless I move DHCP role to the new DNS server?  I use 192.168.0.1 as the gateway for printers etc.  No changes there correct?
0
 

Author Comment

by:SMcDonald666
ID: 35166528
My server will be connected to the internet.  We have no plans at this time for a VPN.  So outside the office access is done by Radmin.
0
 
LVL 3

Expert Comment

by:dtrance
ID: 35166595
You don't need to change anything IP wise.  Just make sure you give the new server a static IP and make sure DHCP is ready to run before you disable DHCP service on the router.

The gateway wont change - you will need to specify the same gateway address in your dhcp pool.
0
 
LVL 59

Expert Comment

by:Darius Ghassem
ID: 35166879
Point the clients however you do it but usually DHCP you need to make sure clients are going to Server for DNS not external DNS servers.

You should use the actual IP address of the server not 127.0.0.1 loopback address.

Keep the router the same you can use DNS without DHCP but I recommend that you disable DHCP on router and allow Windows to be your DHCP server
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
Possible fixes for Windows 7 and Windows Server 2008 updating problem. Solutions mentioned are from Microsoft themselves. I started a case with them from our Microsoft Silver Partner option to open a case and get direct support from Microsoft. If s…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…

920 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now