location of DNS zones in in Win 2003 Active Dir issue Moondoggy 11/14/2008 3:46:18 PM I'm a bit confused and hoping that someone can enlighten me. We were looking at KB 867464 and it talks about using ADSI edit and that in Active Directory 2003 full native mode, Active Directory integrated zones should all be in DC=DomainDNSZones,DC=contoso,DC=Com. When I look at my AD domain in active directory I find that naming context but not all of my AD zones are in there. A bit of snooping around I found the rest in cn=microsoftdns,cn=system,dc=contose,dc=com. As a test we create a new AD integreated zone and in the wizard we specified that the zone was only to be created on domain controllers in the contose.com domain. After creating the zone we expected the zone to be in dc=domaindnszones,dc=contoso,dc=com but found it in cn=microsoftdns,cn=system,dc=contose,dc=com. So.... What is right or are both locations right? What criteria determines where the zone should be?

Re: location of DNS zones in in Win 2003 Active Dir issue "Ace Fekay [Microsoft Certified Trainer]" <firstnamelastname[ at ]hotmail.com> 11/15/2008 5:44:54 PM In news:0207CF9C-2DB0-4A4F-A23A-DF37C220841E[ at ]microsoft.com, Moondoggy <Moondoggy[ at ]discussions.microsoft.com> requesting assistance, typed the following: [Quoted Text] > I'm a bit confused and hoping that someone can enlighten me. We were > looking at KB 867464 and it talks about using ADSI edit and that in > Active Directory 2003 full native mode, Active Directory integrated > zones should all be in DC=DomainDNSZones,DC=contoso,DC=Com. When I > look at my AD domain in active directory I find that naming context > but not all of my AD zones are in there. A bit of snooping around I > found the rest in cn=microsoftdns,cn=system,dc=contose,dc=com. As a > test we create a new AD integreated zone and in the wizard we > specified that the zone was only to be created on domain controllers > in the contose.com domain. After creating the zone we expected the > zone to be in dc=domaindnszones,dc=contoso,dc=com but found it in > cn=microsoftdns,cn=system,dc=contose,dc=com. So.... What is right or > are both locations right? What criteria determines where the zone > should be? If you selected the middle button in the zone properties under Replication scope, then it will be in the DomainDnsZones partition. If the top button, which is Windows 2000 compatible, it will be in the DomainNC partition, wihch will be in "cn=microsoftdns,cn=system,dc=contose,dc=com." If you mix these between DCs in a domain, you will have MAJOR issues to contend with due to dupe zones. The forest zone, _msdc.contoso.com zone is by default in the ForestDnsZones partition. This makes it available throughout a forest, especially if you have a delegated zone design. Make sure that replication scope is set the same on ALL DCs in a domain. If you have more than one domain, you can select a zone to be in a specific replication scope based on your delegation or non-delegation design. -- Ace This posting is provided "AS-IS" with no warranties or guarantees and confers no rights. Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCT Microsoft Certified Trainer For urgent issues, you may want to contact Microsoft PSS directly. Please check http://support.microsoft.com for regional support phone numbers.