DNS Advice

Hi
I have a quick questions:

If I have a AD forest as follows:
Contoso.com
DC1
DC2
South.Contoco.com
DC3
DC4

Each DC also is a DNS server (AD-Integrated Zones). Under this scenario what
would be the way to configure the DNS settings under the TCP/IP Properties
for each server. For contoso.com: Should DC1 be pointing to its IP and have
DC2's IP as the secondary server and the same configuration for DC2? For
south.contoso.com: Should DC3 be pointing to its IP and have DC4's IP as
the secondary server and the same configuration for DC4?

Shoudl DC1 and DC2 be the forwarders for both DC3 and DC4?

What would be the best practice in this type of scenario?

Thank you in advance.

Jorge

"Jorge R" <> wrote in message news:3B0731AC-F78A-43F7-A972-...
> Hi
> I have a quick questions:
>
> If I have a AD forest as follows:
> Contoso.com
> DC1
> DC2
> South.Contoco.com
> DC3
> DC4
>
> Each DC also is a DNS server (AD-Integrated Zones). Under this scenario what
> would be the way to configure the DNS settings under the TCP/IP Properties
> for each server. For contoso.com: Should DC1 be pointing to its IP and have
> DC2's IP as the secondary server and the same configuration for DC2? For
> south.contoso.com: Should DC3 be pointing to its IP and have DC4's IP as
> the secondary server and the same configuration for DC4?
>
> Shoudl DC1 and DC2 be the forwarders for both DC3 and DC4?
>
> What would be the best practice in this type of scenario?
>
> Thank you in advance.
>
> Jorge
>
>
>


As for the forwarding, that depends. Did you create a DNS delegation from the parent domain's DNS servers (contoso.com) to the DNS servers in the child domain (south.contoso.com)? This also assumes that each zone's replication scope (except the _msdcs.contoso.com zone), is set to Domain wide only (the center button).

If so, yes, then you would configure a Forwarder on the two child domain DNS servers to both the parent domain's DNS servers. In tihs case, the parent domain DCs would point to themsleves as first, and the partner DC as second. Same with the DCs in the child domain.

If there is no delegation, and the zone contoso.com is set to Forest wide, meaning that the 'south' name shows up as a folder under contoso.com, then you should still point to itself first, then you can choose any as the second, preferrably the partner in its own domain or site. In tihs scenario, do not configure a fowarder to any other internal DNS or you will create a forwarding loop.

If you've set each domain's replication scope to its own domain, and you do not have conditional forwarding, you may be facing resolution issues.



--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and confers no rights.

Please reply back to the newsgroup or forum for collaboration benefit among responding engineers, and to help others benefit from your resolution.

Ace Fekay, MVP, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE & MCSA 2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer
Microsoft MVP - Directory Services

If you feel this is an urgent issue and require immediate assistance, please contact Microsoft PSS directly. Please check http://support.microsoft.com for regional support phone numbers.

Yes, Dcpromo created the delegation.
Thank you for your answer it helped me understand this scenario better.

Jorge

"Ace Fekay [MVP-DS, MCT]" <> wrote in message
news:...
"Jorge R" <> wrote in message
news:3B0731AC-F78A-43F7-A972-...
> Hi
> I have a quick questions:
>
> If I have a AD forest as follows:
> Contoso.com
> DC1
> DC2
> South.Contoco.com
> DC3
> DC4
>
> Each DC also is a DNS server (AD-Integrated Zones). Under this scenario
> what
> would be the way to configure the DNS settings under the TCP/IP Properties
> for each server. For contoso.com: Should DC1 be pointing to its IP and
> have
> DC2's IP as the secondary server and the same configuration for DC2? For
> south.contoso.com: Should DC3 be pointing to its IP and have DC4's IP as
> the secondary server and the same configuration for DC4?
>
> Shoudl DC1 and DC2 be the forwarders for both DC3 and DC4?
>
> What would be the best practice in this type of scenario?
>
> Thank you in advance.
>
> Jorge
>
>
>


As for the forwarding, that depends. Did you create a DNS delegation from
the parent domain's DNS servers (contoso.com) to the DNS servers in the
child domain (south.contoso.com)? This also assumes that each zone's
replication scope (except the _msdcs.contoso.com zone), is set to Domain
wide only (the center button).

If so, yes, then you would configure a Forwarder on the two child domain DNS
servers to both the parent domain's DNS servers. In tihs case, the parent
domain DCs would point to themsleves as first, and the partner DC as second.
Same with the DCs in the child domain.

If there is no delegation, and the zone contoso.com is set to Forest wide,
meaning that the 'south' name shows up as a folder under contoso.com, then
you should still point to itself first, then you can choose any as the
second, preferrably the partner in its own domain or site. In tihs scenario,
do not configure a fowarder to any other internal DNS or you will create a
forwarding loop.

If you've set each domain's replication scope to its own domain, and you do
not have conditional forwarding, you may be facing resolution issues.



--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Please reply back to the newsgroup or forum for collaboration benefit among
responding engineers, and to help others benefit from your resolution.

Ace Fekay, MVP, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE &
MCSA 2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer
Microsoft MVP - Directory Services

If you feel this is an urgent issue and require immediate assistance, please
contact Microsoft PSS directly. Please check http://support.microsoft.com
for regional support phone numbers.

"Jorge Riva" <> wrote in message news6D73E2B-E284-4A19-BC14-...
> Yes, Dcpromo created the delegation.
> Thank you for your answer it helped me understand this scenario better.
>
> Jorge
>

You are welcome.

Ace



--