• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 847
  • Last Modified:

Domain Controllers & DNS

I currently have 2 domain controllers.  One is physical Server 2008 SP2 and holds all 5 FSMO roles.  The other is also Server 2008 SP2 and is virtual.

I just installed Server 2012 R2 domain controller and performed the necessary forestprep, and domainprep functions.

My goal is to move the FSMO roles to the new physical Server 2012 R2 domain controller, and decomission the physical Server 2008 DC.

Regarding DNS - Currently while all 3 DC's are up and running what DNS servers should they be pointing to?  

Should their Primary DNS server be themselves and the secondary be the DC holding the FSMO roles?  Or should they be pointing primary to FSMO Server and secondary to themselves?

Thank you in advance.
0
BSModlin
Asked:
BSModlin
2 Solutions
 
Andy MIT Systems ManagerCommented:
Providing DNS is replicating correctly between all three servers I don't think it really matters which dns each server has assigned. Personally I would point each server to use the 2012 server and virtual 2008 server for both primary and secondary.

The only thing to look out for is once the old 2008 server is removed that no server (and DHCP) is set to use it for DNS otherwise you may start having some issues.
0
 
MaheshArchitectCommented:
It does matter
If you have DNS role installed on domain controller, you must point its own IP (not 127.0.0.1) to itself in preferred DNS settings and alternate you can point to another server in same site (ADC) or if you don't have another in same site you could point it to PDC

Because since all domain controllers are authoritative for that domain and domain dns zone, each must be point to itself in primary dns configuration
So that DNS server will try to resolve query with itself own DNS entries and if he do not found any thing then it will look for other options
There are other  options for resolving those queries which he cannot resolve
such as entering another DNS in secondary, setting up forwarders, conditional forwarders, secondary zones etc

There is no point to route queries to another DC by setting up another DNS server address in his network card preferred dns entry

Mahesh.
0
 
Mohammed KhawajaCommented:
Each server should be pointing to itself for primary DNS and to a different server for secondary DNS.  This will ensure DC functionality even if other DC is not available.  At one point, this was considered DNS island and was not recommended but now this is the recommendation from MS.
0
 
Ken StokesCommented:
Excellent Comments.  I have seen many opinions on this matter, but this seems to be the correct one.   Thank you.
0

Featured Post

Veeam and MySQL: How to Perform Backup & Recovery

MySQL and the MariaDB variant are among the most used databases in Linux environments, and many critical applications support their data on them. Watch this recorded webinar to find out how Veeam Backup & Replication allows you to get consistent backups of MySQL databases.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now