dns replication in a single forest w/ multiple child domains

-

hi,

i'm trying find out what's best practice and/or suggestions replicating dns zones in ad environment.  in our environment, root domain set replicate "all dns servers in forest" while child domains configured replicate "to domain controllers in active directory domain child.domain.local. dns servers configured forwarders forward "all other dns domains" requests respective isp's dns servers.

1.  should root dns zone replicating dns servers in forest.  allow child domain admin edit, delete or add records in root dns zone since it's being replicated dns server under control?

2.  should child domains "change zone replication scope" changed "to domain controllers in active directory domain child.domain.local" "to dns servers in active directory domain child.domain.local."  i've read "to domain controllers in active directroy domain.." legacy compatibility , shouldn't used if of domain controllers 2003/2008 case us.

in advance suggestions or links documents might give me better understanding on how should proceed.  thanks.

hi

configuring dns zone replications depends upon requirements. if child domain contains editable copies of root dns zone(ad integrated primary zones) admin child domain can make changes root dns zone.

you can 1 thing create secondary zone  or stub zone of root dns zone on child dns server. make sure wont have editable copies of dns records on child dns servers. or can use conditional forwarder.

change zone replication scope dns servers in active directory domain in child domain.

thanks

dinesh

please vote if answer helped you.


Windows Server  >  Network Infrastructure Servers



Comments

Post a Comment

Popular posts from this blog

Indexing Server

-
just quick question - 2008 have indexing server? can't see option - , want setup web based search engine using indexing server catalogs , asp.net....   it availble? does not based on - http://technet2.microsoft.com/windowsserver2008/en/library/82bac070-bee4-452e-a783-3ce31b5e1d0f1033.mspx?mfr=true Windows Server  >  Management
Read more

Schannel Issue

-
hello there, i have windows 2008 r2 machine. , have hosted sharepoint 2010 on it. i have site have published on internet. i don't know whether it's related , getting error unable resolve or come conclusion. it's pretty frequent. my server patched latest updates. log name:      system source:        schannel date:          8/12/2011 3:49:43 pm event id:      36887 task category: none level:         error keywords:      user:          system computer:      mycomp.domain.com description: following fatal alert received: 42.   the above error doesn't provide info . could please me identify issue , possible solution ? there have been lot of posts one. i believe can safely ignored...
Read more

oclist /xml or /?

-
oclist have qualifiers? can behaviour changed, example output xml?   given previous comments andrew m , comments in forums , blogs think answer no, it’s simple app calling underlying api, thought i'd ask can't seem find anything.   why asking question? i'd @ least 2 things oclist (apart nicer looking output [which i'm not going get], dependances listed [dicussed in forum , ruled out], , refrushing add ad componets , telling use dcpromo [which in banner know]): - whether installing component cuase / require reboot (currently believe qwave , printing services require reboot)   - xml output, can't justify team looking see if can commality with full server   fwiw :j   hi,   oclist not have qualifiers or ways change output. when iis came in late, make oclist output longer, unfortunately late make significant changes.   i'll take feedback , add our list next version.   thanks,   andrew   ...
Read more