Can you have both AD Integrated and Standard Primary servers for the same domain?

I know it isn't the ideal configuration but is it possible to have a couple Active Directory DNS servers on DCs and a member server hosting Standard Primary zones? Does the member server have to host secondary zones only?
LVL 1
stevegoldmanAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Lee W, MVPTechnology and Business Process AdvisorCommented:
The key is that the Windows clients (and servers) must be configured to use a DNS server that supports dynamic updates.  You can configure any number of other DNS servers on the network and replicate the DNS information, PROVIDED the clients and servers don't use them for name resolution (and assuming they are not updating dynamicallly with AD's services).
stevegoldmanAuthor Commented:
My clients are using dynamic updates. So does that mean I have to allow insecure dynamic updates on the member server hosting DNS if clients use it as their primary server? Would this then allow me to set it as a Standard Primary server?
Lee W, MVPTechnology and Business Process AdvisorCommented:
Lets step back... WHY are you wanting to do this?  Perhaps there's a better way...
Protecting & Securing Your Critical Data

Considering 93 percent of companies file for bankruptcy within 12 months of a disaster that blocked access to their data for 10 days or more, planning for the worst is just smart business. Learn how Acronis Backup integrates security at every stage

stevegoldmanAuthor Commented:
Why is not important. Let's just say for argument sake that I am going to end up with one DNS server that's running on a member server and two running on DC's. The DC's already host AD integrated zones. The only thing I'm trying to figure out is if it's safe to, or if I'm even able to, configure the forward lookup zones on the member server as Standard Primary zones or if they need to be Secondary zones.
Lee W, MVPTechnology and Business Process AdvisorCommented:
I see... so you're not interested in helping me out, you just want to take advice and leave.  If you told me WHY I might be able to offer a better solution but since I'm now going to have to GUESS at your motives, I'm not willing to keep playing a game since I feel I'm blind to your needs.

Bottom line DNS MUST be able to update for all systems.  A Dynamically updating DNS system is required.  That's MOST commonly (by far) done using DNS services on an Active Directory domain controller... however, strictly speaking you don't need AD to run DNS - you could use third party DNS servers provided they support Service Records and dynamic updates.  The zone that is used MUST be updated for ALL clients.  Replicating between each other.

If you're willing to explain why and help me and anyone else who comes along so we can know you're not trying to do something because you don't know any better, I might be able to offer further, more detailed suggestions.  If not, best of luck with whatever your trying to do.
stevegoldmanAuthor Commented:
The network I'm working on is fairly complex. There are systems in place that are hard coded to look to the server currently being decommissioned as a DC. The server is currently on old hardware. It is going to be virtualized and converted to member server only to run it's essential duties. Once of which, unfortunately, is a DNS server. The systems hard coded to use this server do not necessarily have secondary DNS servers configured in some cases. They need to be able to connect to this server for name resolution. This is one of the reasons this server is being virtualized. We have VMware environment with HA which will provide the stability it needs.

All other clients on the network use dynamically assigned IP addresses and dynamically update DNS.

I did not mean to be short with you, nor do I mean to be dismissive of the help you're offering. I just didn't want to waste your time or mine with needless "what if" scenarios. I appreciate any help you can offer.
Sigurdur HaraldssonSystem AdministratorCommented:
If the zone on the member server is the same as the one in the AD integrated DNS, then you can't have it as a primary zone. They need to be secondary.
stevegoldmanAuthor Commented:
@sighar: So the AD integrated DNS servers won't recognize updates to DNS from the member server?
Sigurdur HaraldssonSystem AdministratorCommented:
If you've got a standard (non AD integrated) primary zone, it is the only zone writeable. All others must be secondary or slave zones.

Only with a AD integrated primary DNZ zone is it possible to have a zone that is a) primary and b) also writeable on other DNS servers.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
stevegoldmanAuthor Commented:
Thank you for your assistance.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
DNS

From novice to tech pro — start learning today.