WellingtonIS
asked on
DNS Domain Controller Setup
There seems to be for lack of better works a difference of opinion as to the best practice for DNS settings on a DC. We have a large corp many sites one domain, lots of DCs. My thinking is to set up each DC as a DNS server and forward the requests out to my Corp DCs - I think this will give us faster results internally - we have programs that are internal, over the WAN to our Corp office and out to the internet. So I think DC01 should point to DC02 and then itself and then forward the request to The corp DC. And DC02 should point to DC01 then itself and then forward the request to my Corp server. Can someone please offer an opinion - Of course you set up zone also - but I'm just talking about the server requests.
ASKER
Yes I realize they all must point to a primary DNS server, however, don't they need to point to each other in the same domain? and shouldn't the zones then replicate to the "Primary" DNS server? So If you have the zone transfers they will get the information from the primary and filter down to the DC on the Forest?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
thanks!
Also all DCs that are DNS servers also, you must point their primary DNS IP pointing to them self only and secondary you may point to ADC in same site or if its not there then point it to PDC
For internal name resolution you don't have to do anything other than setting up AD integrated DNS zones in DNS, eventually they will get replicated to all DCs in domain \ forest.
For internet access, if you have centralized proxy server \ firewall that controls the internet traffic, then no need to setup DNS on remote locations for internet name resolution.
However if your main site DNS server is the single point for resolving queries to internet (it has forwarder to public DNS servers) then you need to set default forwarder on remote location DCs and that default forwarder should point to main DC for internet name resolution
If you have multiple hub locations then you can set multiple DNS servers for internet name resolution by putting up ISP DNS in default forwarders list in DNS server properties for that Hub location.
let me know if this is what you are looking for and if i understand it correctly.
Mahesh