DNS Setup "Pete" <discussions[ at ]microsoft.com> 12/17/2008 5:48:23 AM A Question on DNS Setup; Most of my DNS servers are also DC's and they are AD integrated. I am planning of creating a DNS server on a member server. Is this configuration recommended? How? Thanks Pete

Re: DNS Setup "kj [SBS MVP]" <KevinJ.SBS[ at ]SPAMFREE.gmail.com> 12/17/2008 6:02:25 AM Pete wrote: [Quoted Text] > A Question on DNS Setup; > > Most of my DNS servers are also DC's and they are AD integrated. I am > planning of creating a DNS server on a member server. Is this > configuration recommended? How? > > Thanks > Pete Why? You really want to deal with a standard secondary, zone transfers, lack of dynamic updates, etc? -- /kj

Re: DNS Setup "Juergen Kluth" <jkluth-newskonto[ at ]dokom.net> 12/17/2008 3:59:38 PM Hi, if you have more dns servers in your network than clients at all, i would not recommend it. jk

Re: DNS Setup "Pete" <discussions[ at ]microsoft.com> 12/17/2008 6:34:34 PM The real reason of this thought was avoiding the possibility of clients accessing the internet on the subnet where DNS is located. There are two subnets here and each subnet has it's own internet access. Subnet1 has the AD+WINS+DNS and Subnet2 has Member+WINS. It seems WINS is not enough on Subnet2 and I am unwilling to install AD on the same WINS machine because of hardware limitations. So, if the client is configured with WINS in subnet2 and DNS in subnet1, the internet access maybe going via subnet1?. Pete "kj [SBS MVP]" <KevinJ.SBS[ at ]SPAMFREE.gmail.com> wrote in message news:%23rCwK0AYJHA.5064[ at ]TK2MSFTNGP02.phx.gbl... [Quoted Text] > Pete wrote: >> A Question on DNS Setup; >> >> Most of my DNS servers are also DC's and they are AD integrated. I am >> planning of creating a DNS server on a member server. Is this >> configuration recommended? How? >> >> Thanks >> Pete > > Why? You really want to deal with a standard secondary, zone transfers, > lack of dynamic updates, etc? > > -- > /kj >

Re: DNS Setup "kj [SBS MVP]" <KevinJ.SBS[ at ]SPAMFREE.gmail.com> 12/17/2008 6:49:41 PM Pete wrote: [Quoted Text] > The real reason of this thought was avoiding the possibility of > clients accessing the internet on the subnet where DNS is located. > There are two subnets here and each subnet has it's own internet > access. Subnet1 has the AD+WINS+DNS and Subnet2 has Member+WINS. It > seems WINS is not enough on Subnet2 and I am unwilling to install AD > on the same WINS machine because of hardware limitations. So, if the > client is configured with WINS in subnet2 and DNS in subnet1, the > internet access maybe going via subnet1?. Sounds more like you want to control the default gateway for the subnets more so than the DNS servers. Maybe I'm misreadding this though. > > Pete > > "kj [SBS MVP]" <KevinJ.SBS[ at ]SPAMFREE.gmail.com> wrote in message > news:%23rCwK0AYJHA.5064[ at ]TK2MSFTNGP02.phx.gbl... >> Pete wrote: >>> A Question on DNS Setup; >>> >>> Most of my DNS servers are also DC's and they are AD integrated. I >>> am planning of creating a DNS server on a member server. Is this >>> configuration recommended? How? >>> >>> Thanks >>> Pete >> >> Why? You really want to deal with a standard secondary, zone >> transfers, lack of dynamic updates, etc? >> >> -- >> /kj -- /kj

Re: DNS Setup "Pete" <discussions[ at ]microsoft.com> 12/17/2008 8:52:39 PM My goal is still subnet2 to resolve xxx.domain.local in subnet1. In order to achieve this clients in subnet2 will have the primary DNS pointing to the dns server in subnet1. Doing this i believe the internet traffic is goig out via subnet1 internet isn't it? Pete "kj [SBS MVP]" <KevinJ.SBS[ at ]SPAMFREE.gmail.com> wrote in message news:OK2j6gHYJHA.552[ at ]TK2MSFTNGP06.phx.gbl... [Quoted Text] > Pete wrote: >> The real reason of this thought was avoiding the possibility of >> clients accessing the internet on the subnet where DNS is located. >> There are two subnets here and each subnet has it's own internet >> access. Subnet1 has the AD+WINS+DNS and Subnet2 has Member+WINS. It >> seems WINS is not enough on Subnet2 and I am unwilling to install AD >> on the same WINS machine because of hardware limitations. So, if the >> client is configured with WINS in subnet2 and DNS in subnet1, the >> internet access maybe going via subnet1?. > > Sounds more like you want to control the default gateway for the subnets > more so than the DNS servers. > > Maybe I'm misreadding this though. > >> >> Pete >> >> "kj [SBS MVP]" <KevinJ.SBS[ at ]SPAMFREE.gmail.com> wrote in message >> news:%23rCwK0AYJHA.5064[ at ]TK2MSFTNGP02.phx.gbl... >>> Pete wrote: >>>> A Question on DNS Setup; >>>> >>>> Most of my DNS servers are also DC's and they are AD integrated. I >>>> am planning of creating a DNS server on a member server. Is this >>>> configuration recommended? How? >>>> >>>> Thanks >>>> Pete >>> >>> Why? You really want to deal with a standard secondary, zone >>> transfers, lack of dynamic updates, etc? >>> >>> -- >>> /kj > > -- > /kj >

Re: DNS Setup "kj [SBS MVP]" <KevinJ.SBS[ at ]SPAMFREE.gmail.com> 12/17/2008 9:03:53 PM Pete wrote: [Quoted Text] > My goal is still subnet2 to resolve xxx.domain.local in subnet1. In > order to achieve this clients in subnet2 will have the primary DNS > pointing to the dns server in subnet1. Doing this i believe the > internet traffic is goig out via subnet1 internet isn't it? > > Pete DNS ( domain name resolutoin ) and Routing are two different things. subnet2 name resolution would still traverse the network to the AD/DNS server and back, but after that routing would define the path the Internet bound traffic takes. > > "kj [SBS MVP]" <KevinJ.SBS[ at ]SPAMFREE.gmail.com> wrote in message > news:OK2j6gHYJHA.552[ at ]TK2MSFTNGP06.phx.gbl... >> Pete wrote: >>> The real reason of this thought was avoiding the possibility of >>> clients accessing the internet on the subnet where DNS is located. >>> There are two subnets here and each subnet has it's own internet >>> access. Subnet1 has the AD+WINS+DNS and Subnet2 has Member+WINS. It >>> seems WINS is not enough on Subnet2 and I am unwilling to install AD >>> on the same WINS machine because of hardware limitations. So, if the >>> client is configured with WINS in subnet2 and DNS in subnet1, the >>> internet access maybe going via subnet1?. >> >> Sounds more like you want to control the default gateway for the >> subnets more so than the DNS servers. >> >> Maybe I'm misreadding this though. >> >>> >>> Pete >>> >>> "kj [SBS MVP]" <KevinJ.SBS[ at ]SPAMFREE.gmail.com> wrote in message >>> news:%23rCwK0AYJHA.5064[ at ]TK2MSFTNGP02.phx.gbl... >>>> Pete wrote: >>>>> A Question on DNS Setup; >>>>> >>>>> Most of my DNS servers are also DC's and they are AD integrated. I >>>>> am planning of creating a DNS server on a member server. Is this >>>>> configuration recommended? How? >>>>> >>>>> Thanks >>>>> Pete >>>> >>>> Why? You really want to deal with a standard secondary, zone >>>> transfers, lack of dynamic updates, etc? >>>> >>>> -- >>>> /kj >> >> -- >> /kj -- /kj

Re: DNS Setup "Pete" <discussions[ at ]microsoft.com> 12/17/2008 9:32:36 PM Thanks for clarifying that routing part. As for the dns resolution part, i am confused. If there are 3 dns server assigned to the client with dns1 and 2 belongs to the isp and dns3 is for my dns in subnet1, i can't seem to resolve xxx.domain.local. The only thing to do is put the dns in subnet 1 as primary with the isp as secondary and trertiary. I thought that if the first dns can't resolve, it will go the next in the list. Is it not? Thanks "kj [SBS MVP]" <KevinJ.SBS[ at ]SPAMFREE.gmail.com> wrote in message news:O9Y$5rIYJHA.2444[ at ]TK2MSFTNGP02.phx.gbl.. [Quoted Text] > > Pete wrote: >> My goal is still subnet2 to resolve xxx.domain.local in subnet1. In >> order to achieve this clients in subnet2 will have the primary DNS >> pointing to the dns server in subnet1. Doing this i believe the >> internet traffic is goig out via subnet1 internet isn't it? >> >> Pete > > DNS ( domain name resolutoin ) and Routing are two different things. > subnet2 name resolution would still traverse the network to the AD/DNS > server and back, but after that routing would define the path the Internet > bound traffic takes. > > >> >> "kj [SBS MVP]" <KevinJ.SBS[ at ]SPAMFREE.gmail.com> wrote in message >> news:OK2j6gHYJHA.552[ at ]TK2MSFTNGP06.phx.gbl... >>> Pete wrote: >>>> The real reason of this thought was avoiding the possibility of >>>> clients accessing the internet on the subnet where DNS is located. >>>> There are two subnets here and each subnet has it's own internet >>>> access. Subnet1 has the AD+WINS+DNS and Subnet2 has Member+WINS. It >>>> seems WINS is not enough on Subnet2 and I am unwilling to install AD >>>> on the same WINS machine because of hardware limitations. So, if the >>>> client is configured with WINS in subnet2 and DNS in subnet1, the >>>> internet access maybe going via subnet1?. >>> >>> Sounds more like you want to control the default gateway for the >>> subnets more so than the DNS servers. >>> >>> Maybe I'm misreadding this though. >>> >>>> >>>> Pete >>>> >>>> "kj [SBS MVP]" <KevinJ.SBS[ at ]SPAMFREE.gmail.com> wrote in message >>>> news:%23rCwK0AYJHA.5064[ at ]TK2MSFTNGP02.phx.gbl... >>>>> Pete wrote: >>>>>> A Question on DNS Setup; >>>>>> >>>>>> Most of my DNS servers are also DC's and they are AD integrated. I >>>>>> am planning of creating a DNS server on a member server. Is this >>>>>> configuration recommended? How? >>>>>> >>>>>> Thanks >>>>>> Pete >>>>> >>>>> Why? You really want to deal with a standard secondary, zone >>>>> transfers, lack of dynamic updates, etc? >>>>> >>>>> -- >>>>> /kj >>> >>> -- >>> /kj > > -- > /kj >

Re: DNS Setup "kj [SBS MVP]" <KevinJ.SBS[ at ]SPAMFREE.gmail.com> 12/17/2008 9:44:35 PM Pete wrote: [Quoted Text] > Thanks for clarifying that routing part. > > As for the dns resolution part, i am confused. If there are 3 dns > server assigned to the client with dns1 and 2 belongs to the isp and > dns3 is for my dns in subnet1, i can't seem to resolve > xxx.domain.local. The only thing to do is put the dns in subnet 1 as > primary with the isp as secondary and trertiary. I thought that if > the first dns can't resolve, it will go the next in the list. Is it > not? > Thanks First, all AD domain members should only have an AD DNS server hosting the AD domain zone defined in the client settings. The AD / DNS server should forward resolutions to your ISP DNS server or be configured for root hints. As for the client DNS settings, it will not "ask DNS1, then DNS2, then DNS3. It will choose a DNS server starting at the top and working down. But if the DNS server responds in any way the client will not look (recurse) any further. This is why forewarders or root hints are defined at the DNS server level. ( The server will make the referal to the correct DNS server and return the client the correct resolution) If the client selects your ISP DNS server it will not be able to locate a domain controller and will not be able to resolve AD objects including group policy. DNS does not define the path, only resolves the names to an IP address. Routing takes over from there. > > "kj [SBS MVP]" <KevinJ.SBS[ at ]SPAMFREE.gmail.com> wrote in message > news:O9Y$5rIYJHA.2444[ at ]TK2MSFTNGP02.phx.gbl.. >> >> Pete wrote: >>> My goal is still subnet2 to resolve xxx.domain.local in subnet1. In >>> order to achieve this clients in subnet2 will have the primary DNS >>> pointing to the dns server in subnet1. Doing this i believe the >>> internet traffic is goig out via subnet1 internet isn't it? >>> >>> Pete >> >> DNS ( domain name resolutoin ) and Routing are two different things. >> subnet2 name resolution would still traverse the network to the >> AD/DNS server and back, but after that routing would define the path >> the Internet bound traffic takes. >> >> >>> >>> "kj [SBS MVP]" <KevinJ.SBS[ at ]SPAMFREE.gmail.com> wrote in message >>> news:OK2j6gHYJHA.552[ at ]TK2MSFTNGP06.phx.gbl... >>>> Pete wrote: >>>>> The real reason of this thought was avoiding the possibility of >>>>> clients accessing the internet on the subnet where DNS is located. >>>>> There are two subnets here and each subnet has it's own internet >>>>> access. Subnet1 has the AD+WINS+DNS and Subnet2 has Member+WINS. >>>>> It seems WINS is not enough on Subnet2 and I am unwilling to >>>>> install AD on the same WINS machine because of hardware >>>>> limitations. So, if the client is configured with WINS in subnet2 >>>>> and DNS in subnet1, the internet access maybe going via subnet1?. >>>> >>>> Sounds more like you want to control the default gateway for the >>>> subnets more so than the DNS servers. >>>> >>>> Maybe I'm misreadding this though. >>>> >>>>> >>>>> Pete >>>>> >>>>> "kj [SBS MVP]" <KevinJ.SBS[ at ]SPAMFREE.gmail.com> wrote in message >>>>> news:%23rCwK0AYJHA.5064[ at ]TK2MSFTNGP02.phx.gbl... >>>>>> Pete wrote: >>>>>>> A Question on DNS Setup; >>>>>>> >>>>>>> Most of my DNS servers are also DC's and they are AD >>>>>>> integrated. I am planning of creating a DNS server on a member >>>>>>> server. Is this configuration recommended? How? >>>>>>> >>>>>>> Thanks >>>>>>> Pete >>>>>> >>>>>> Why? You really want to deal with a standard secondary, zone >>>>>> transfers, lack of dynamic updates, etc? >>>>>> >>>>>> -- >>>>>> /kj >>>> >>>> -- >>>> /kj >> >> -- >> /kj -- /kj

Re: DNS Setup "Pete" <discussions[ at ]microsoft.com> 12/17/2008 10:45:32 PM Thanks again KJ "kj [SBS MVP]" <KevinJ.SBS[ at ]SPAMFREE.gmail.com> wrote in message news:OV0RpCJYJHA.2068[ at ]TK2MSFTNGP03.phx.gbl... [Quoted Text] > Pete wrote: >> Thanks for clarifying that routing part. >> >> As for the dns resolution part, i am confused. If there are 3 dns >> server assigned to the client with dns1 and 2 belongs to the isp and >> dns3 is for my dns in subnet1, i can't seem to resolve >> xxx.domain.local. The only thing to do is put the dns in subnet 1 as >> primary with the isp as secondary and trertiary. I thought that if >> the first dns can't resolve, it will go the next in the list. Is it >> not? >> Thanks > > First, all AD domain members should only have an AD DNS server hosting the > AD domain zone defined in the client settings. The AD / DNS server should > forward resolutions to your ISP DNS server or be configured for root > hints. > > As for the client DNS settings, it will not "ask DNS1, then DNS2, then > DNS3. It will choose a DNS server starting at the top and working down. > But if the DNS server responds in any way the client will not look > (recurse) any further. This is why forewarders or root hints are defined > at the DNS server level. ( The server will make the referal to the correct > DNS server and return the client the correct resolution) > > If the client selects your ISP DNS server it will not be able to locate a > domain controller and will not be able to resolve AD objects including > group policy. > > DNS does not define the path, only resolves the names to an IP address. > Routing takes over from there. > > >> >> "kj [SBS MVP]" <KevinJ.SBS[ at ]SPAMFREE.gmail.com> wrote in message >> news:O9Y$5rIYJHA.2444[ at ]TK2MSFTNGP02.phx.gbl.. >>> >>> Pete wrote: >>>> My goal is still subnet2 to resolve xxx.domain.local in subnet1. In >>>> order to achieve this clients in subnet2 will have the primary DNS >>>> pointing to the dns server in subnet1. Doing this i believe the >>>> internet traffic is goig out via subnet1 internet isn't it? >>>> >>>> Pete >>> >>> DNS ( domain name resolutoin ) and Routing are two different things. >>> subnet2 name resolution would still traverse the network to the >>> AD/DNS server and back, but after that routing would define the path >>> the Internet bound traffic takes. >>> >>> >>>> >>>> "kj [SBS MVP]" <KevinJ.SBS[ at ]SPAMFREE.gmail.com> wrote in message >>>> news:OK2j6gHYJHA.552[ at ]TK2MSFTNGP06.phx.gbl... >>>>> Pete wrote: >>>>>> The real reason of this thought was avoiding the possibility of >>>>>> clients accessing the internet on the subnet where DNS is located. >>>>>> There are two subnets here and each subnet has it's own internet >>>>>> access. Subnet1 has the AD+WINS+DNS and Subnet2 has Member+WINS. >>>>>> It seems WINS is not enough on Subnet2 and I am unwilling to >>>>>> install AD on the same WINS machine because of hardware >>>>>> limitations. So, if the client is configured with WINS in subnet2 >>>>>> and DNS in subnet1, the internet access maybe going via subnet1?. >>>>> >>>>> Sounds more like you want to control the default gateway for the >>>>> subnets more so than the DNS servers. >>>>> >>>>> Maybe I'm misreadding this though. >>>>> >>>>>> >>>>>> Pete >>>>>> >>>>>> "kj [SBS MVP]" <KevinJ.SBS[ at ]SPAMFREE.gmail.com> wrote in message >>>>>> news:%23rCwK0AYJHA.5064[ at ]TK2MSFTNGP02.phx.gbl... >>>>>>> Pete wrote: >>>>>>>> A Question on DNS Setup; >>>>>>>> >>>>>>>> Most of my DNS servers are also DC's and they are AD >>>>>>>> integrated. I am planning of creating a DNS server on a member >>>>>>>> server. Is this configuration recommended? How? >>>>>>>> >>>>>>>> Thanks >>>>>>>> Pete >>>>>>> >>>>>>> Why? You really want to deal with a standard secondary, zone >>>>>>> transfers, lack of dynamic updates, etc? >>>>>>> >>>>>>> -- >>>>>>> /kj >>>>> >>>>> -- >>>>> /kj >>> >>> -- >>> /kj > > -- > /kj >

Re: DNS Setup "kj [SBS MVP]" <KevinJ.SBS[ at ]SPAMFREE.gmail.com> 12/18/2008 5:32:18 AM Pete wrote: [Quoted Text] > Thanks again KJ Anytime Pete. > > "kj [SBS MVP]" <KevinJ.SBS[ at ]SPAMFREE.gmail.com> wrote in message > news:OV0RpCJYJHA.2068[ at ]TK2MSFTNGP03.phx.gbl... >> Pete wrote: >>> Thanks for clarifying that routing part. >>> >>> As for the dns resolution part, i am confused. If there are 3 dns >>> server assigned to the client with dns1 and 2 belongs to the isp and >>> dns3 is for my dns in subnet1, i can't seem to resolve >>> xxx.domain.local. The only thing to do is put the dns in subnet 1 as >>> primary with the isp as secondary and trertiary. I thought that if >>> the first dns can't resolve, it will go the next in the list. Is it >>> not? >>> Thanks >> >> First, all AD domain members should only have an AD DNS server >> hosting the AD domain zone defined in the client settings. The AD / >> DNS server should forward resolutions to your ISP DNS server or be >> configured for root hints. >> >> As for the client DNS settings, it will not "ask DNS1, then DNS2, >> then DNS3. It will choose a DNS server starting at the top and >> working down. But if the DNS server responds in any way the client >> will not look (recurse) any further. This is why forewarders or root >> hints are defined at the DNS server level. ( The server will make >> the referal to the correct DNS server and return the client the >> correct resolution) If the client selects your ISP DNS server it will not >> be able to >> locate a domain controller and will not be able to resolve AD >> objects including group policy. >> >> DNS does not define the path, only resolves the names to an IP >> address. Routing takes over from there. >> >> >>> >>> "kj [SBS MVP]" <KevinJ.SBS[ at ]SPAMFREE.gmail.com> wrote in message >>> news:O9Y$5rIYJHA.2444[ at ]TK2MSFTNGP02.phx.gbl.. >>>> >>>> Pete wrote: >>>>> My goal is still subnet2 to resolve xxx.domain.local in subnet1. >>>>> In order to achieve this clients in subnet2 will have the primary >>>>> DNS pointing to the dns server in subnet1. Doing this i believe >>>>> the internet traffic is goig out via subnet1 internet isn't it? >>>>> >>>>> Pete >>>> >>>> DNS ( domain name resolutoin ) and Routing are two different >>>> things. subnet2 name resolution would still traverse the network >>>> to the AD/DNS server and back, but after that routing would define >>>> the path the Internet bound traffic takes. >>>> >>>> >>>>> >>>>> "kj [SBS MVP]" <KevinJ.SBS[ at ]SPAMFREE.gmail.com> wrote in message >>>>> news:OK2j6gHYJHA.552[ at ]TK2MSFTNGP06.phx.gbl... >>>>>> Pete wrote: >>>>>>> The real reason of this thought was avoiding the possibility of >>>>>>> clients accessing the internet on the subnet where DNS is >>>>>>> located. There are two subnets here and each subnet has it's >>>>>>> own internet access. Subnet1 has the AD+WINS+DNS and Subnet2 >>>>>>> has Member+WINS. It seems WINS is not enough on Subnet2 and I >>>>>>> am unwilling to install AD on the same WINS machine because of >>>>>>> hardware limitations. So, if the client is configured with WINS >>>>>>> in subnet2 and DNS in subnet1, the internet access maybe going >>>>>>> via subnet1?. >>>>>> >>>>>> Sounds more like you want to control the default gateway for the >>>>>> subnets more so than the DNS servers. >>>>>> >>>>>> Maybe I'm misreadding this though. >>>>>> >>>>>>> >>>>>>> Pete >>>>>>> >>>>>>> "kj [SBS MVP]" <KevinJ.SBS[ at ]SPAMFREE.gmail.com> wrote in message >>>>>>> news:%23rCwK0AYJHA.5064[ at ]TK2MSFTNGP02.phx.gbl... >>>>>>>> Pete wrote: >>>>>>>>> A Question on DNS Setup; >>>>>>>>> >>>>>>>>> Most of my DNS servers are also DC's and they are AD >>>>>>>>> integrated. I am planning of creating a DNS server on a member >>>>>>>>> server. Is this configuration recommended? How? >>>>>>>>> >>>>>>>>> Thanks >>>>>>>>> Pete >>>>>>>> >>>>>>>> Why? You really want to deal with a standard secondary, zone >>>>>>>> transfers, lack of dynamic updates, etc? >>>>>>>> >>>>>>>> -- >>>>>>>> /kj >>>>>> >>>>>> -- >>>>>> /kj >>>> >>>> -- >>>> /kj >> >> -- >> /kj -- /kj