Link to home
Start Free TrialLog in
Avatar of robanom
robanomFlag for United States of America

asked on

DNS Replication between DC and Non-DC

I have two DNS Servers one Win2k the Other Win2k3.  Both were domain controllers with DNS.  I DCPROMO demoted the Win2k server and the DNS zones went with it.  I am looking to retain the Win2k machine as a DNS Server just not a DC.  How can I get the Win2k machine to be part of the DNS replication?  There are currently no Zones Showing on the Win2k DNS.  
ASKER CERTIFIED SOLUTION
Avatar of Wonko_the_Sane
Wonko_the_Sane
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of arnold
On your DC make sure that the AD zone is not limited to domain controllers. Properties of the Domain Zone change the Replication to make sure it replicates to all DNS servers in the AD domain.
Make sure that you have an AD-Integrated zone.
on the win2k it should appear once refreshed.
Though not sure why you chose to demote the win2k perhaps your only DC backup. You should have at least two DCs since that is where user/computer/gpo/etc is.  If you only have one and it experiences hw failure, you will be in a ......
Avatar of robanom

ASKER

I have two win2k3 domain controllers however the other win2k3 dc I do not want to be a DNS Server.  
You will need to use secondary zones. AD replication only works to domain controllers. This is by design, since it's stored in the directory. A member server has no directory, and therefore you can't replicate to it.
And really, your best choice would be to make your second DC a DNS server, it's just easier. Please note that AD does not function without DNS at all, and not making your second DC a DNS server could affect your redundancy. Of course I don't know your reasoning about not making it a DNS server, but I would advice you to do this only if you have really good reasons for that.
Avatar of robanom

ASKER

This was exactly what I was looking for
Avatar of robanom

ASKER

The other DC is also an Exchange box, I know against best practice.  that is the reason I do not want to setup DNS on that machine as well.
DNS is such a leight-weight, stable and low-footprint service that it woulnd't hurt. Your big issue is Exchange & AD on the same box as you already mentioned, and adding DNS is really harmless. Ultimately your decision, but IMHO you are better off with just adding DNS as well. And it can be removed with the click of a button.