Go Premium for a chance to win a PS4. Enter to Win

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 345
  • Last Modified:

DNS - Can a DNS zone share an AD Domain

Hello

I'm reading some documentation/e-mails from a client that stipulated the following :-

Domain.com is the AD Domain.  This DNS zones for this are domain.com and anotherdomain.com dns zones.  Is this possible ?

I thought that the DNS zone anotherdomain.com would have to have its own AD Domain ? anotherdomain.com hasn't been delegated.

Thanks in advance
0
nico-
Asked:
nico-
  • 6
  • 3
1 Solution
 
SvenIACommented:
If anotherdomain.com has it's own DNS server, you can create a trust relationship between the 2 domains, and after that you can create a secondary dns zone in the domain.com domain.

http://technet.microsoft.com/en-us/library/cc775736(v=ws.10).aspx
0
 
Santosh GuptaCommented:
Hi,

What i understand, you have Active directory integrated DNS for Domain.com and you want a another new Zone for anotherdomain.com.

then yes, it is possible and very simple.
0
 
nico-Author Commented:
Hi Sven

I'm not sure if I explained this very well.  The correspondence I've read and I'm not sure I agree with states

There is only one AD Domain - domain.com
It has two DNS zones - domain.com and anotherdomain.com

anotherdomain.com does not have an associated AD Domain.

my question is that - is this possible.  Can a DNS zone exist without an associated AD Domain ?

Cheers
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 
nico-Author Commented:
Hi Sanosh

So you can have a DNS zone without an associated - that is - related AD Domain.?

anotherdomain.com does not have to have a anotherdomain.com AD domain ?

Cheers
0
 
nico-Author Commented:
I was reading in Minasi that every AD Domain needed a related DNS zone and assumed that worked in reverse.

Can you point to some articles that show what you mentioned please for my further knowledge and understanding

Cheers
0
 
Santosh GuptaCommented:
Yes, Go to DNS management console, Right click on server name and select new forward lookup zone and follow the wizard.

OR

if you want to create a Zone for External DNS then, you should set up split DNS (sometimes referred to as split horizon DNS).
 On your internal DNS servers, add the domain.com as a new zone.  The new zone should be a primary zone, not a secondary zone because you want the ability for the external and internal zones to contain slightly different records (for some hostnames).

•Add all existing external DNS records on domain.com (external) to your domain.com (internal zone).  This allows you to resolve all names from inside or outside.

•The internal side can point to your internal IP addresses while the external side can point to your public IP addresses (and in some cases, internal will also point to public IP addresses).
0
 
nico-Author Commented:
so the domain.com AD domain looks after domain.com and anotherdomain.com just by adding anotherdomain.com as a forward lookup zone ? .. this will then be replicated around by the AD Integrated DNS ?
0
 
Santosh GuptaCommented:
yes.

In addition, you can create reverse lookup zone as well if you want to resolve IP to host name of anotherdomain.com
0
 
nico-Author Commented:
Not sure if I need to add another question for this, but this leads me on to thinking about when a user logs into a machine that is in the domain.com AD Domain but has its DNS name/ip in the anotherdomain.com dns zone.  I wonder what the point of this could be?
0
 
nico-Author Commented:
Superbly quick.  And then validated at my end.
Cheers
0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 6
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now