DNS Conditional forwarders. How to forward some domains externally, some subdomains internally.

I have remote site where users are logged into a windows domain. This site is not part of our main company. Say our main company is Microsoft.

Issue is, I want this remote site's DNS, to forward some DNS requests to our DNS servers for local resolution, and some DNS request on our domain to be resolved on the remote site DNS, which will get forwarded to the root server, AKA external websites.

So, by default I want ALL microsoft.com requests to forward on to our DNS server. However, there are some exceptions to that same domain, that need to resolve on that DNS/root dns servers, for public DNS resolution.

Only catch is our local DNS servers do NOT resolve externally domains at all.

AKA lets say mail.microsoft.com, remote.microsoft.com and login.microsoft.com I want to resolve externally, so those need to stay at the remote site. But ALL other microsoft.com subdomains need to get forwarded to our main company's DNS.

How would I do this on windows server 2003/2008?
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

setup conditional forwarding on dns servers http://technet.microsoft.com/en-us/library/cc757172%28v=ws.10%29.aspx
LIBBBAuthor Commented:
Thanks. Any idea about the wildcards though? If I setup a forward for microsoft.com, will example.microsoft.com fall under that forward? Or can I setup *.microsoft.com forward?
U cannot add *.domain.com as conditioanal forwarder

However if you add conditional forwarder to microsoft.com, then  query to example.microsoft.com will get forwarded to microsoft.com conditional forwarder

However if your forwarding domain is microsoft.com and you trying to resolve webcast.example.microsoft.com, it will not resolve that.

If you created contoso.com as dns forwader and corp.contoso.com as dns zone in local dns, then ur all queires like server1.corp.contoso.com will be resolved internally
If you trying to resolve server.contoso.com, queries will get forwarded to conditional forwarder contoso.com
Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

Pramod UbheCommented:
configure conditional forwarder for microsoft.com and create a forward lookup zone for example.microsoft.com on your internal dns (with @ record to the target IP). this will ensure that example.microsoft.com queries will be routed to @ record IP address and microsoft.com will go to the IP configured in conditional forwarder.
LIBBBAuthor Commented:
Hmm so far I don't know if I've found a solution. Because a good point has been brought up. There are other internal domains that multiple subdomains.


How would I send domains that end with microsoft.com over to the other DNS server, with multiple subdomains?
Pramod UbheCommented:
That is why you configure entire subdomain as forward lookup zone so that any queries to Microsoft.com will not resolve internally. It's up to you to have it resolved by Internet or conditional forwarder.

I had a setup in one of my prev org. Where we intentionally created zones for subdomains to avoid DNS resolution of main domain by internal DNS.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2003

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.