_msdcs delegation

Discussion in 'DNS Server' started by R Stovall, Aug 28, 2005.

  1. R Stovall

    R Stovall Guest

    Good morning all,

    I have a quick question about the _msdcs delegation in the forest root zone
    of a 2003 environment with a couple of child domains. This forest root
    domain has two domain controllers. I've noticed that the delegation only
    points to one of these DCs, the original DC in the forest.

    Shouldn't the delegation point to all the DCs in the domain that are also
    DNS servers? I'm in a lab environment at the moment and have added the
    second DC to the delegation with no ill effects.

    Also, any thoughts on the exact role of this delegation would be appreciated.

    Thanks,

    RS
     
    R Stovall, Aug 28, 2005
    #1
    1. Advertisements


  2. Hello RS,

    it usually should, but you need to configure delegations manually. On the
    other hand, if every Windows DC runs DNS (dsintegrated and holds a copy of
    the _msdcs.forest.root) and all Clients and Servers are querying the Windows
    Servers it is not necessary to configure the delegation, since every
    DNS-Server knows the Content of _msdcs and does not need to ask other system
    he would find via the delegation.

    --
    Gruesse - Sincerely,

    Ulf B. Simon-Weidner

    MVP-Book "Windows XP - Die Expertentipps": http://tinyurl.com/44zcz
    Weblog: http://msmvps.org/UlfBSimonWeidner
    Website: http://www.windowsserverfaq.org
     
    Ulf B. Simon-Weidner [MVP], Aug 28, 2005
    #2
    1. Advertisements

  3. R Stovall

    R Stovall Guest

    Super. That's pretty much what I thought, and it makes perfect sense.

    Thanks for the ultra fast reply.

    RS
     
    R Stovall, Aug 28, 2005
    #3
  4. Ulf B. Simon-Weidner [MVP], Aug 28, 2005
    #4
  5. Actually the _msdcs.forestroot zone is usually forest wide replication and
    should replicate to all DNS servers in the forest, even the child domain's
    DCs. So the Child DCs should be in the delegation, too.



    --
    Best regards,
    Kevin D4 Dad Goodknecht Sr. [MVP]
    Hope This Helps
    ===================================
    When responding to posts, please "Reply to Group"
    via your newsreader so that others may learn and
    benefit from your issue, to respond directly to
    me remove the nospam. from my email address.
    ===================================
    http://www.lonestaramerica.com/
    ===================================
    Use Outlook Express?... Get OE_Quotefix:
    It will strip signature out and more
    http://home.in.tum.de/~jain/software/oe-quotefix/
    ===================================
    Keep a back up of your OE settings and folders
    with OEBackup:
    http://www.oehelp.com/OEBackup/Default.aspx
    ===================================
     
    Kevin D. Goodknecht Sr. [MVP], Aug 29, 2005
    #5
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.