• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 459
  • Last Modified:

Windows 2003 server domain controllers and dns issue

I have inherited a multi-office win2k3 server set up.
There are domain controllers at both offices.

The problem is if the vpn connection from officeA to officeB goes down, then I loose my DNS in officeB.

There are actually 2 DCs running in officeA and one DC in officeB.
DC in officeB has reverse lookup zone pointing to officeA.

I need to break whatever dependency is causing this issue and get officeB DNS working without needing to have vpn client running on officeA server.

I believe there is a Cisco ASA at each office.  Could this be a configuration issue with the Cisco devices?  

Any suggestions?


3 Solutions
If you make a DC at both offices a DNS server, then you should be fine if you make the DNS server at Office B the primary DNS server for the Office B workstations. Also, make sure that the DNS server at Office A is the primary DNS server on the workstations at Office A.
Leon FesterCommented:
Firstly, make sure that your DNS zone is configure as Active Directory integrated.
This will ensure that the DNS zones are copied into AD and stored on each server.
It removes the dependancy of one DC holding the ZONE and when that DC dies, your zone is gone.

Check this out by viewing the properties of the zone in DNS manager.

Next step, make sure that your primary DNS for each site points to the local DC.
Update your DHCP scope options if needed
In addition, make sure that each DNS server either has root hints configured, or has forwarders configured pointing to public DNS servers (e.g. your ISP's DNS servers, Google's public DNS, OpenDNS).

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now