Link to home
Start Free TrialLog in
Avatar of solac
solac

asked on

Confusion over Windows DNS Zones

I have three domain controllers running Win 2008 R2 with DNS.  For some reasons, there are two sub zones under the Forward Lookup Zone.  I dont think they belong there.  Please refer to the diagram for explanation.

As you can see from the diagram, there are two sub zones, little.xyzsb.org  and super.xyzsb.org under each DNS server.  Both zones have entries for nameservers and SOA.

Are there any reasons I should not keep them?
dnszones.png
Avatar of Delete
Delete
Flag of United States of America image

Honestly you and/or you admins are the only ones that can determine if those zones are needed.  Are teh nameservers for those zones different than your three DNS servers?  If so are the zones valid (in other words do records resolve for those zones i.e. www.little.xyzsb.org)?

You can look in your DNS logs (assuming you have logging enabled) to see if anyone is actually querying your DNS servers for those zones, or you can use netmon or wireshark to watch DNS traffic based on those zones.

The last thing you want to do is delete a zone that you don't think is in use only to find out that it is in use resulting in a service outage.
ASKER CERTIFIED SOLUTION
Avatar of Pramod Ubhe
Pramod Ubhe
Flag of India image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial