Avatar of Segulus
SegulusFlag for United States of America

asked on 

Active Directory Domain Name with On-Premisis Exchange Server: Split-Brain DNS (split DNS)

Searching the Web produces many articles offering Best Practices for naming the Active Directory Domain on a local LAN.

The prevailing sentiment seems to be to use a subdomain of the entity's primary FQDN.  For example, the company widget.com might have an AD domain of ad.widget.com or corp.widget.com.  The LAN AD would use a unique subdomain of the primary FQDN.

My question has to do with Exchange in the above setting.  It seems that the recommended configuration for Exchange is to use  Split-Brain DNS (split DNS).  Unless I am misunderstanding this, that would suggest that I should name the local LAN widget.com (rather than ad.widget.com or corp.widget.com).

I would like to better understand the pro's and cons of choosing to configure my AD Domain as a subdomain (e.g. ad.widget.com), and the impact on deploying an on-premisis Exchange server in that environment.

Please advise.

Thank You.
Windows NetworkingActive DirectoryExchange

Avatar of undefined
Last Comment
Simon Butler (Sembee)
ASKER CERTIFIED SOLUTION
Avatar of Simon Butler (Sembee)
Simon Butler (Sembee)
Flag of United Kingdom of Great Britain and Northern Ireland image

Blurred text
THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
See Pricing Options
Start Free Trial
Avatar of biaselectronics
biaselectronics

Don't forget that if you want to use a UCC certificate (e.g. for activesync) then the naming will be important (e.g. .local is no longer supported)
Avatar of Segulus
Segulus
Flag of United States of America image

ASKER

I though .local was being discouraged due to recent changes changes with SSL Certificates.?
Avatar of Segulus
Segulus
Flag of United States of America image

ASKER

Simon,

Are suggesting that I could have an Exchange server name exg.widget.com both internal and external to the LAN, and that server can be joined to an AD that is ad.widget.com?

I though joining the exchange server to the above mentioned domain would automatically make it exg.ad.widget.com (rather than exg.widget.com).  This would give it a different name internal to the LAN as compared to externally.

Am I overlooking something?
Avatar of biaselectronics
biaselectronics

yes that's right, but also bear in mind the 5 names you will use - e.g. exchange.widget.com, autodiscover.widget.com, exchange, mail.widget.com, exchange.ad.widget.com etc
Avatar of Segulus
Segulus
Flag of United States of America image

ASKER

So, if I were to use ad.widget.com as my AD Domain would the following be true?

exchange.widget.com - this would be used external to the LAN
autodiscover.widget.com - would not work from within the LAN but would externally
exchange - I'm not sure what this one is for (just the server name)
mail.widget.com - for ?
exchange.ad.widget.com - for use inside the LAN

Your help is much appreciated.
Avatar of biaselectronics
biaselectronics

exchange.widget.com - this would be used external to the LAN - correct
autodiscover.widget.com - would not work from within the LAN but would externally - correct, you may want to consider autodiscover.ad.widget.com as another name in the UCC
exchange - I'm not sure what this one is for (just the server name) - sometimes inside the domain Outlook can try to connect to the server without a domain - not strictly necessary but useful
mail.widget.com - for - external access depending on your DNS setup - e.g. you may have clients trying to access https://mail.widget.com/owa
exchange.ad.widget.com - for use inside the LAN - correct
so exchange and mail.widget.com are not strictly necessary but you will need to consider your external DNS and exchange settings
You usually get 5 domain names when getting a UCC so in that case I would include the exchange name without a domain...
SOLUTION
THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
Exchange
Exchange

Exchange is the server side of a collaborative application product that is part of the Microsoft Server infrastructure. Exchange's major features include email, calendaring, contacts and tasks, support for mobile and web-based access to information, and support for data storage.

213K
Questions
--
Followers
--
Top Experts
Get a personalized solution from industry experts
Ask the experts
Read over 600 more reviews

TRUSTED BY

IBM logoIntel logoMicrosoft logoUbisoft logoSAP logo
Qualcomm logoCitrix Systems logoWorkday logoErnst & Young logo
High performer badgeUsers love us badge
LinkedIn logoFacebook logoX logoInstagram logoTikTok logoYouTube logo