• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 567
  • Last Modified:

DNS delegation option?? when promoting DC

Hello,
Do we need to say Yes to "createDNSDelegation" option  when promoting 2012 DC? We want it to be DNS as well and we have DNS integrated zones. Do we need to say yes or no to CreateDNSDelegation?

THank you.

#
# Windows PowerShell script for AD DS Deployment
#

Import-Module ADDSDeployment
Install-ADDSDomainController `
-CreateDnsDelegation:$false `
0
creative555
Asked:
creative555
1 Solution
 
Cliff GaliherCommented:
If there was a straight answer then it wouldn't be a choice. They include the option because you may or may not need it, depending on your unique environment. We can't answer that in a void.
0
 
JeffG2583Commented:
Do you have a single domain under a single forest? How many DCs in the forest? You are fine answering No to creating a DNS delegation if you aren't interested in load balancing a lot of DNS requests. Here is a better description of it.

https://technet.microsoft.com/en-us/library/cc771640.aspx
0
 
MaheshArchitectCommented:
If you are promoting DC in root domain (single domain) \ Tree Root Domain then you would select No ($false) because domain.com is the authoritative zone for that DC for which delegation is not required

However if you are creating DC in child domain (child.domain.com), child domain by default is not authoritative for domain.com zone and hence delegation is required.
in that case you would select Yes ($true), in that case DNS delegation will be created on parent DNS server
If you have already logged on server with domain admins of parent domain the delegation will be automatically created OR you would be prompted for parent domain "domain admins" credentials so that delegation can be created in parent zone on parent dns server with the name of child domain (child)
This delegation contains NS record of child domain DNS server
The purpose of this delegation is to resolve queries related to child domain from parent domain
When you deploy 1st DC in child domain, delegation would be created in parent dns zone, when you add new DC in child domain, it will update that delegation by adding new NS record in existing delegation in parent zone
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Tackle projects and never again get stuck behind a technical roadblock.
Join Now