Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win


Need some help with split DNS

Posted on 2014-03-05
Medium Priority
Last Modified: 2014-04-21
I am not the best at DNS, but here goes. In our gateway I specify the DNS as to use and My first question is, is this best practice? I have a Windows environment, and one of my servers has DNS installed for local lookups.

I am asking this question because while on the office wifi, corporate e-mail doesnt work. My DNS is not set up as .local, it is set up as the external domain name. While researching a fix for this issue, it recommends setting up split DNS. To do this, I would need to set up a new forward primary zone that is not AD integrated. My second question is what effect(s) will this have on my domain PC's?
Question by:j_crow1
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions

Expert Comment

by:Jason Ryberg
ID: 39907968
Why is the office wifi set to point to your mail's external domain?  If it's connected to your LAN, it should use the internal DNS server.

Author Comment

ID: 39908061
It's not; the Aps use the same DNS setup as the internal office machines. It's the phones that look at the external mail address.
LVL 10

Expert Comment

by:Pramod Ubhe
ID: 39908995
try using your office dns server's IP as primary dns and keep / as alternate dns on one of the computer to see if it works.

Expert Comment

by:Jason Ryberg
ID: 39909650
In our gateway I specify the DNS as to use and

On your DNS servers, do you have forwarders pointing to the gateway as a DNS source?  Otherwise you could set forwarders to the and IP addresses.  Is there a reason you're not using your ISP's DNS?
LVL 27

Accepted Solution

DrDave242 earned 1500 total points
ID: 39912869
In our gateway I specify the DNS as to use and
Is that gateway also the DHCP server for your network? If so, then it's likely giving those DNS server addresses out to DHCP clients, which isn't good if you've got an AD domain in place (and it sounds like you probably do).

All machines in an AD domain need to use only internal DNS servers (DNS servers in your domain, which are typically going to be domain controllers), because those are the only DNS servers that know anything about the machines in your domain. Using external DNS servers such as and will result in machines in your domain not being able to contact other machines in your domain.

I am asking this question because while on the office wifi, corporate e-mail doesnt work. My DNS is not set up as .local, it is set up as the external domain name.
Can you be more specific about this? What do you use for corporate email, and does your AD domain have the same name as your registered internet domain? If so, that's not ideal, but there's probably still a way to make everything work like it should.

Featured Post

Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Occasionally you run into the website or two that will not resolve properly using your own DNS servers.  Some people simply set up global forwarders for their DNS server.  I don’t recommend doing this because it can cause problems resolving addresse…
I was prompted to write this article after the recent World-Wide Ransomware outbreak. For years now, System Administrators around the world have used the excuse of "Waiting a Bit" before applying Security Patch Updates. This type of reasoning to me …
To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…

618 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question