Solved

Creating a new child domain (in a new tree), DNS questions

Posted on 2014-02-13
4
996 Views
Last Modified: 2014-02-14
Hi

Currently we have a single forest / single domain model, ABC.com, i need to create a new domain in the forest but it needs to have an entirely separate name, 123.com

I am planning on creating a new domain in a new tree however i have some questions.

Does the server i promote to the 1st DC in this child domain need to be a member server in the existing domain first, or can i go straight from a workgroup to a DC in the new child domain

DNS

Currently we use AD integrated zones on our existing domain ABC.com,

Before promoting the server the the 1st child DC do we need to configure it to use the DNS servers in our current domain.

If the above is Yes, Once we install DNS on the server and its fully functional as a DC / DNS server in the new domain do we then change it back use itself as a DNS server

Do we need to create a conditional forwarder for each of the domains, so on domain abc.com a forwarder to 123.com and visa versa.

Thanks
0
Comment
Question by:ncomper
  • 2
  • 2
4 Comments
 
LVL 19

Accepted Solution

by:
Peter Hutchison earned 500 total points
ID: 39856411
1. No you do not need to make it a member first. In fact you shouldn't. You can promote it from a workgroup to a DC .

2. Since it is a new Active Directory domain, it will install the DNS service for the 123.com domain when you run dcpromo and it will be the main name server for that new domain.

3. Yes, you will need to create forwarders up to enable each domain to resolve names in the other domain.
0
 
LVL 5

Author Comment

by:ncomper
ID: 39856460
Thanks, am i correct in thinking that because its going to be a new domain tree therefore have a completely different DNS name to by existing domain i don't need to worry about doing any delegation on the existing domains DNS, that's more relevant when creating a child domain in the same tree

Thanks
0
 
LVL 19

Expert Comment

by:Peter Hutchison
ID: 39856520
Yes, that is exactly correct.
0
 
LVL 5

Author Closing Comment

by:ncomper
ID: 39858757
Thanks
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Introduction You may have a need to setup a group of users to allow local administrative access on workstations.  In a domain environment this can easily be achieved with Restricted Groups and Group Policies. This article will demonstrate how to…
Is your Office 365 signature not working the way you want it to? Are signature updates taking up too much of your time? Let's run through the most common problems that an IT administrator can encounter when dealing with Office 365 email signatures.
This tutorial will show how to push an installation of Backup Exec to an additional server in both 2012 and 2014 versions of the software. Click on the Backup Exec button in the upper left corner. From here, select Installation and Licensing, then I…
This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…

920 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now