2008 DNS Server

Posted on 2011-05-12
Last Modified: 2012-05-11
I have installed 3 new 2008 DCs DNS servers in my domain and I am getting rid of the 2003 DC's DNS servers. For the 2008 Servers should I point each of them to themselves in the preferred DNS server setting on the NIC and as alternate DNS server I'll point ot another 2008 DNS?

Or should each 2008 DNS server preferred DNS server IP point to one of the other 2008 DNS servers?
What about the member servers, should they all preferably point to the same DNS or should I mix them up?

Question by:tolinrome
    LVL 14

    Expert Comment

    Yes, the DNS server should point to itself for resolution,
    LVL 12

    Expert Comment

    The better is to view best practices from MS for Windows Server 2008.

    Here is the info.
    LVL 12

    Expert Comment

    You need to know the best practice of DNS configuration in AD network with
    several DNS servers.

    Issue Analysis:
    Firstly, DNS server's best setting is determined by environment. Such as
    network structure, client number, frequency of records changing and so on.
    However, Microsoft has set the default setting that suitable for most
    scenario. That you need to decide is:
    1. Replication scope.
    2. AD integrated or not.
    3. Secure update or not.
    4. Forwarding or using Root hint

    About four choice above, we usually use:
    1. Replication scope.
    a) For domain zone, we use "replicate to all dns server in this domain"
    b) For forest root zone, we use "replicate to all dns server in this forest"
    2. Zone storage.
    a) AD integrated zone.
    3. Update type.
    a) Secure update only
    4. Forwarding.
    a) Forward name query outside of your domain to external dns server.
    Information related:
    1. DNS Server configuration

    2. Managing DNS Server Configuration and Security

    3. Best Practice Active Directory Design for Managing Windows Networks
    (DNS part)

    4. Best practices for DNS client settings in Windows 2000 Server and in
    Windows Server 2003;en-us;825036
    LVL 7

    Author Comment

    Thanks but I didnt see anywhere that it shoudl or shouldnt point to its self. One of the links mentions not to create islands but that article refers to 2000&2003 DNS servers.
    We have a small environemnt. 100 clients
    LVL 14

    Accepted Solution

    it is Microsoft best practice for a DC with DNS to point to it self first for resolution.  This was not the case with Win2k though.
    LVL 26

    Assisted Solution

    by:Leon Fester

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Why You Should Analyze Threat Actor TTPs

    After years of analyzing threat actor behavior, it’s become clear that at any given time there are specific tactics, techniques, and procedures (TTPs) that are particularly prevalent. By analyzing and understanding these TTPs, you can dramatically enhance your security program.

    I was asked if I could set up a fax machine so that incoming faxes were delivered to people's Exchange inboxes and so that they could send faxes from their desktops without needing to print the document first.  I knew it was possible but I had no id…
    Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
    This tutorial will give a an overview on how to deploy remote agents in Backup Exec 2012 to new servers. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as connecting to a remote Back…
    This tutorial will walk an individual through the steps necessary to install and configure the Windows Server Backup Utility. Directly connect an external storage device such as a USB drive, or CD\DVD burner: If the device is a USB drive, ensure i…

    759 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    13 Experts available now in Live!

    Get 1:1 Help Now