Domain controller and multiple DNS
I have a domaincontroller in my network that also acts as a DNS server for my clients. DNS server is given out by the DHCP server.
Of course when the DNS server is down, our clients can't connect to the internet anymore.
I tried in the past to add a second google DNS to the DHCP, but that caused more problems than solutions.
Is there a way to enable a setting so the clients only connect to the internal DNS server when needed (like logging in) and use the google DNS for internet only?
Of course when the DNS server is down, our clients can't connect to the internet anymore.
I tried in the past to add a second google DNS to the DHCP, but that caused more problems than solutions.
Is there a way to enable a setting so the clients only connect to the internal DNS server when needed (like logging in) and use the google DNS for internet only?
You should have additional DC with a DNS as commented above.
And add external DNS as a forwarder in your internal DNS.
https://technet.microsoft.com/en-us/library/cc753720(v=ws.10).aspx
https://technet.microsoft.com/en-us/library/cc754941(v=ws.11).aspx
-->I tried in the past to add a second google DNS to the DHCP, but that caused more problems than solutions.
What are the problems faced.
And add external DNS as a forwarder in your internal DNS.
https://technet.microsoft.com/en-us/library/cc753720(v=ws.10).aspx
https://technet.microsoft.com/en-us/library/cc754941(v=ws.11).aspx
-->I tried in the past to add a second google DNS to the DHCP, but that caused more problems than solutions.
What are the problems faced.
ASKER
The idea I had in mind:
I want to make my router the DHCP server, and have my DC controller as first DNS and google as second.
If our server needs to get down for maintenance, like in this case HP is replacing a motherboard next week, I want the users still be able to surf the internet.
When I tried to add a second DNS to my DHCP, users where getting slower logon times and network shares worked slower. It's like their pc is trying to connect to google's DNS first, even when it is set as second DNS.
I want to make my router the DHCP server, and have my DC controller as first DNS and google as second.
If our server needs to get down for maintenance, like in this case HP is replacing a motherboard next week, I want the users still be able to surf the internet.
When I tried to add a second DNS to my DHCP, users where getting slower logon times and network shares worked slower. It's like their pc is trying to connect to google's DNS first, even when it is set as second DNS.
Is there a way to enable a setting so the clients only connect to the internal DNS server when needed (like logging in) and use the google DNS for internet only?
No.
As we have already cited, you're best served with a second DC. That would at least be running when the first one is down. If you implement your idea, then you have to accept the issues it causes as well.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
LearnCTX is ABSOLUTELY CORRECT. You CANNOT do that without causing problems in your network. Why is your server going down? I've managed dozens of servers over the years. Servers do not go down with regularity. Even with maintenance. (This is why you plan maintenance, do it after business hours, or on weekends. ONCE OR TWICE per year on average.
The alternative, as others have said is to get a second server. If the interruption one server causes is great enough it's causing lost productivity measurable over thousands of dollars, you get a second server that service requests while the other server is down.
TECHNICALLY, you can setup a NON-Windows DNS server (such as one running on Linux) but it has to support service records and good luck figuring out how to do that. The simple answer for anyone who isn't a linux AND AD expert is DON'T. Setup two DCs.
But even setting up two DCs isn't necessarily the best answer unless you FULLY UNDERSTAND how to properly restore a DC. If you don't, you run the risk of corrupting the entire domain. So if this isn't your area of expertise (and you don't have weeks worth of time to spend dedicated to learning... months and years would be better), I suggest partnering with a consultant/firm that can assist you with your technology issues.
The alternative, as others have said is to get a second server. If the interruption one server causes is great enough it's causing lost productivity measurable over thousands of dollars, you get a second server that service requests while the other server is down.
TECHNICALLY, you can setup a NON-Windows DNS server (such as one running on Linux) but it has to support service records and good luck figuring out how to do that. The simple answer for anyone who isn't a linux AND AD expert is DON'T. Setup two DCs.
But even setting up two DCs isn't necessarily the best answer unless you FULLY UNDERSTAND how to properly restore a DC. If you don't, you run the risk of corrupting the entire domain. So if this isn't your area of expertise (and you don't have weeks worth of time to spend dedicated to learning... months and years would be better), I suggest partnering with a consultant/firm that can assist you with your technology issues.
Leev is correct.
Partner with consultant/firm will make your systems safe and you save time.
Partner with consultant/firm will make your systems safe and you save time.
No comment has been added to this question in more than 21 days, so it is now classified as abandoned.
I have recommended this question be closed as follows:
Accept: Learnctx (https:#a42337926)
If you feel this question should be closed differently, post an objection and the moderators will review all objections and close it as they feel fit. If no one objects, this question will be closed automatically the way described above.
seth2740
Experts-Exchange Cleanup Volunteer
I have recommended this question be closed as follows:
Accept: Learnctx (https:#a42337926)
If you feel this question should be closed differently, post an objection and the moderators will review all objections and close it as they feel fit. If no one objects, this question will be closed automatically the way described above.
seth2740
Experts-Exchange Cleanup Volunteer
But I would also be concerned about the fact it sounds like your DNS server keeps going down.