DNS issue Windows Server 2008

Posted on 2014-08-02
Last Modified: 2014-08-03
We have a simple configuration.
Server 2008 R2, File Server, Domain Controller, DHCP Server.
Terminal Server (Citrix), Server 2008 R2.
Exchange Server 2007.
Print Server.
We changed ISP recently, and now internet connection on the File Server is extremely slow, but ok after connecting.
The workstations on the LAN appeared to lose internet connection unless I changed their DNS Primary & Secondary to the DNS server of the new ISP provider, then all is well. Before IP & DNS were obtained automatically.
The primary DNS on the Files Server is, Secondary is the IP of the new ISP DNS server.
The DNS cache on the file server has been cleared.
Any ideas as to how to resolve this
Question by:josephwalsh
    LVL 9

    Expert Comment

    File server needs static ip address, and its preferable not to use the loop back address, which is built in into every computer.
    LVL 5

    Author Comment

    The File server has a static IP address.
    Should I use the DNS server IPs of the new ISP for both Primary & Secondary DNSs ?
    LVL 9

    Expert Comment

    The primary dns should be your local dns, and the secondary should be that of the isp, reason you want local look ups to your local dns and if the lockup requires external help it will go through the isp dns
    LVL 7

    Expert Comment

    It depends on how many the domain controllers that you have ,your primary and secondary static IP's should be those of your internal DNS servers. Then your DNS servers should have as their forwarding IP's the address of the ISP DNS servers
    LVL 5

    Accepted Solution

    Since your file server is the same machine as your DC... (and I assume you only have one DC.)

    The primary DNS server setting of the LAN adapter should be the private IP of the file server/DC (they are the same machine.) Using usually works, but it's private IP (e.g. is better practice.

    The secondary DNS server setting of the LAN adapter should be blank. (And of course no additional DNS servers in the advanced settings of the LAN adapter.)

    On the "DNS server" settings on your DC (DNS management console), make sure you update the forwarding IPs to the new ISP DNS servers. (Some people say to use root hints rather than forwarders in a setup like your's, but I prefer using forwarders.)

    On the "DHCP server" setting on your DC, check the options of your DHCP scope. The first listed DNS server should be the private IP of your DC/file server. Optionally you can add the new ISP's DNS servers as second and/or third in the list--or use your ISP's as the second entry and as your third entry.**

    **Optionally adding these "public" DNS servers to the options of your DHCP scope means that workstations (not the DC/file server) will have them available as secondary/3rd DNS servers so they can continue to access the internet if your DC isn't responding for some reason. (But that also means they may occasionally not have access to internal resources if the DNS on your DC is running slow for some reason.--Somewhat rare, I usually add the 2nd and/or 3rd "public" DNS servers to DHCP options, but it's something that's good to be aware of.)

    **Likewise, on other (non-domain controller) devices on your network that use static IPs: The primary DNS server of the LAN adapter settings should be the private IP of the DC. With the same option of adding secondary and/or tertiary "public" DNS servers.
    LVL 5

    Author Closing Comment

    Excellent clear answer.
    LVL 34

    Expert Comment

    Remove ISP DNS server IP from lan card properties on DC, since it is the culprit
    Point DC server to its own IP in DNS (not and restart netlogon service and dns service
    Put public dns server IP as forwarder
    On domain controllers, to get internet name resolution you must use either forwarders OR root hints

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Promote certifications in your email signature

    Has your company recently won an award or achieved a certification? They'll no doubt want to show it off. Email signature images used to promote certifications & awards can instantly establish credibility with a recipient and provide you with numerous benefits.

    Normally after a failure of Domain Controller, when promoting new DC the DC is renamed, we will discuss the options in Dcpromo to re-create the DC with the same name. Scenario: You are a small IT shop with two Domain Controllers (Domain Contr…
    Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
    This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…
    This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…

    779 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    12 Experts available now in Live!

    Get 1:1 Help Now