Solved

Best practice on how to create a DNS sub domain in windows server 2008 r2

Posted on 2011-09-08
3
2,040 Views
Last Modified: 2012-05-12
I work for a large scale company and we are cleaning up our DNS in addition to implementing new Windows Server 2008 R2 systems. We have multiple domains that have been created throughout the years. I have noticed a sub-domain that is giving us an error with the DNS Best Practice Analyzer. It appears they originally clicked on the zone and selected "New Domain" instead of just creating a separate zone. I have not seen this method used before. I have been searching for the Microsoft Best Practice method to prove of disprove this configuration should be changed to it's own new zone. Can anyone help me answer this?

Your help is greatly appreciated.

ProBSD
0
Comment
Question by:ProBSD
  • 2
3 Comments
 
LVL 20

Accepted Solution

by:
wolfcamel earned 500 total points
ID: 36507959
As best as I can explain ..it is an issue because..
for example two domains
domain.local
sub.domain.local

domain.local will have properly created subdomains such as server.domain.local, www.domain.local

the risk/issue is that if a workstation looks up sub.domain.local that the server may lookup domain.local and notice that there is no a record for sub.domain.local and then reply that it doesnt exist without noticing that there is a completely seperate domain.
It "SHOULD" notice the second domain exists, but the risk that it doesnt is the issue
0
 

Assisted Solution

by:ProBSD
ProBSD earned 0 total points
ID: 36598910
I finally broke down and contacted Microsoft to see what is best practice. In Server 2003 you could use this method even though it is not best practice, however in 2008 they recommend only creating a separate zone for each sub-domain. The only time it is recommended to create a domain under a zone is if the domain points to another domain in a different forest. In my situation this is not the case so we removed the domains, created new zones and then created delegations under the original zone to point to the new sub-domain's new zone.

Wolfcamel, thank you for your input however I feel this does not answer my original question, only why it may not work. But since you are the only person that has try to assist me I will still give you credit for assisting solution.

Thank you
ProBSD
0
 

Author Closing Comment

by:ProBSD
ID: 36895817
Wolfcamel, thank you for your input however I feel this does not answer my original question, only why it may not work. But since you are the only person that has try to assist me I will still give you credit for assisting solution.
0

Featured Post

Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This article runs through the process of deploying a single EXE application selectively to a group of user.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

776 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question