Solved

Branch Office

Posted on 2014-03-17
2
220 Views
Last Modified: 2014-03-17
Hello,

I have a couple of branch offices (5-10 users each) connected back to HQ (AD Integrated DNS) via IPSEC tunnels. Each of these offices do not have a local AD/DNS server.

To perform lookups what would be required to be configured at the branch office and HQ?

I have setup the local DHCP to assign the primary DNS address as one of the DNS servers in HQ. Though browsing by name still fails (ping mail1). Browsing by the FQN (ping mail1.food.local) and IP Works. There are no restrictions on the IPSSEC tunnel to prevent DNS.
0
Comment
Question by:lebz29
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 22

Expert Comment

by:David Atkin
ID: 39934380
Hello,

Are the machines at the remote site connected to the domain?  If its only a few users then I would suggest adding the Server name into the client machines host files as its normally more reliable.
0
 
LVL 26

Accepted Solution

by:
DrDave242 earned 500 total points
ID: 39934988
If browsing by FQDN works, then DNS is functioning as it should. If browsing by hostname only isn't working properly, run ipconfig /all on an affected client and check the Primary DNS Suffix and DNS Suffix Search List. Both of these will appear near the top of the output.

Domain members should almost always have a primary DNS suffix that is identical to the domain name, though there can be exceptions to this, and the domain name should definitely appear in the DNS suffix search list.
0

Featured Post

What is SQL Server and how does it work?

The purpose of this paper is to provide you background on SQL Server. It’s your self-study guide for learning fundamentals. It includes both the history of SQL and its technical basics. Concepts and definitions will form the solid foundation of your future DBA expertise.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article demonstrates probably the easiest way to configure domain-wide tier isolation within Active Directory. If you do not know tier isolation read https://technet.microsoft.com/en-us/windows-server-docs/security/securing-privileged-access/s…
Here's a look at newsworthy articles and community happenings during the last month.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

695 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question