Windows Server 2008 DNS Secondary Zones

Posted on 2012-09-07
Last Modified: 2012-10-17
Our company has multiple domains with trusted forests between them. Every sites DC currently is running Server 2003. We opened a new site with a DC running Server 2008 at 2003 functional level.

I was able to setup the trusts successfully, but when I try to add the secondary zones for the other networks in DNS it just keeps failing.

Any ideas what I'm doing wrong?

Question by:mightyquinn889
    LVL 7

    Accepted Solution

    Are all your other DNS sites AD-Integrated?  Because if that's the case, then there are no primary/secondary zones.  You'd want to create your new site with AD-Integrated zones.  It's been a while since I've setup a Windows primary/secondary DNS structure, but I'm pretty certain you should have a primary DNS in each AD site.
    LVL 9

    Assisted Solution

    LVL 20

    Assisted Solution

    couldn't you just use conditional forwarders and avoid the hassle of zone xfers?
    LVL 7

    Expert Comment

    I re-read your post, and brwwiggins is correct.  I was thinking in terms of AD-sites, but you're talking company sites (and separate domains).  With that in mind, conditional forwarding makes more sense.  If someone requests a server from one of the other DNS zones, your 2008 server will forward those requests to DNS servers that host that zone.  As brwwiggins said, that saves on troubleshooting zone xfers, and also reduces the complexity in general.
    LVL 3

    Author Comment

    Yes each site has there own AD.. separate from each other..

    what is the best way to set this up?


    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Shouldn't all users have the same email signature?

    You wouldn't let your users design their own business cards, would you? So, why do you let them design their own email signatures? Think of the damage they could be doing to your brand reputation! Choose the easy way to manage set up and add email signatures for all users.

    Normally after a failure of Domain Controller, when promoting new DC the DC is renamed, we will discuss the options in Dcpromo to re-create the DC with the same name. Scenario: You are a small IT shop with two Domain Controllers (Domain Contr…
    To effectively work with Diskpart on a Server Core, it is necessary to write some small batch script's, because you can't execute diskpart in a remote powershell session. To get startet, place the Diskpart batch script's into a share on your loca…
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
    This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…

    760 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    15 Experts available now in Live!

    Get 1:1 Help Now