PC Review


Reply
Thread Tools Rate Thread

DNS Delegation

 
 
Ronan Daly
Guest
Posts: n/a
 
      4th May 2004
Hi,
I've got an AD child domain and when I created it I made an AD integrated
dns zone on the child domain with the same zone as the parent (domain.com).
I'm having a problem with the replication between the two domains and I've
read an article on the microsoft site that says you should delegate the
child dns zone to the child servers:

http://support.microsoft.com/support...NoWebContent=1

On the parent servers I deleted the child.domain.com section and created
delegations to the two child DCs instead. On the two child DCs I want to
create a zone child.domain.com and put all of the existing records into that
zone. Is there an easy way to extract all of the data from the current zone
and import it when I've recreated the new child.domain.com zone?

Thanks,
Ronan


 
Reply With Quote
 
 
 
 
Kevin D. Goodknecht [MVP]
Guest
Posts: n/a
 
      4th May 2004
In news:%(E-Mail Removed),
Ronan Daly <ronan#NOSPAM#@72ndstreet.com> posted a question
Then Kevin replied below:
> Hi,
> I've got an AD child domain and when I created it I made an AD
> integrated
> dns zone on the child domain with the same zone as the parent
> (domain.com).
> I'm having a problem with the replication between the two domains and
> I've
> read an article on the microsoft site that says you should delegate
> the
> child dns zone to the child servers:
>
>

http://support.microsoft.com/support...NoWebContent=1
>
> On the parent servers I deleted the child.domain.com section and
> created
> delegations to the two child DCs instead. On the two child DCs I want
> to
> create a zone child.domain.com and put all of the existing records
> into that
> zone. Is there an easy way to extract all of the data from the
> current zone
> and import it when I've recreated the new child.domain.com zone?
>
> Thanks,
> Ronan


You will have to recreate all manually created records, the Dynamic records
will be automatically created by the netlogon service if you allow dynamic
updates on the zone.
You may have to run netdiag /fix to complete DNS registration.

--
Best regards,
Kevin D4 Dad Goodknecht Sr. [MVP]
Hope This Helps
============================
--
When responding to posts, please "Reply to Group" via your
newsreader so that others may learn and benefit from your issue.
To respond directly to me remove the nospam. from my email.
==========================================
http://www.lonestaramerica.com/
==========================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
==========================================
Keep a back up of your OE settings and folders with
OEBackup:
http://www.oehelp.com/OEBackup/Default.aspx
==========================================


 
Reply With Quote
 
Ronan Daly
Guest
Posts: n/a
 
      4th May 2004
> You will have to recreate all manually created records, the Dynamic
records
> will be automatically created by the netlogon service if you allow dynamic
> updates on the zone.
> You may have to run netdiag /fix to complete DNS registration.
>


Thanks Kevin, not the answer I was hoping for though - I've about 500
entries I'll have to manually create.

Regards,
Ronan


 
Reply With Quote
 
Kevin D. Goodknecht [MVP]
Guest
Posts: n/a
 
      4th May 2004
In news:(E-Mail Removed),
Ronan Daly <ronan#NOSPAM#@72ndstreet.com> posted a question
Then Kevin replied below:
>> You will have to recreate all manually created records, the Dynamic
>> records will be automatically created by the netlogon service if you
>> allow dynamic updates on the zone.
>> You may have to run netdiag /fix to complete DNS registration.
>>

>
> Thanks Kevin, not the answer I was hoping for though - I've about 500
> entries I'll have to manually create.
>
> Regards,
> Ronan


That is a lot of manual records, were you not using DDNS?

--
Best regards,
Kevin D4 Dad Goodknecht Sr. [MVP]
Hope This Helps
============================
--
When responding to posts, please "Reply to Group" via your
newsreader so that others may learn and benefit from your issue.
To respond directly to me remove the nospam. from my email.
==========================================
http://www.lonestaramerica.com/
==========================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
==========================================
Keep a back up of your OE settings and folders with
OEBackup:
http://www.oehelp.com/OEBackup/Default.aspx
==========================================


 
Reply With Quote
 
Ronan Daly
Guest
Posts: n/a
 
      4th May 2004
> That is a lot of manual records, were you not using DDNS?
>


They're all unix boxes and domains for testing mail servers.

I've figured out a quick way to do it. In the DNS change the type of domain
from Active Directory integrated to a Primary Domain. This creates a file in
c:\windows\system32\dns called domain.com.dns. Save this file somewhere.
Delete the old domain and create a new domain called child.domain.com as a
Primary domain.

Open up the old domain.com.dns file and find the child section. Copy it all
and paste it into the end of the new child.domain.com.dns file. Then you'll
need a copy of vi for windows (http://www.winvi.de/en/). Open up the file in
vi and type:

:%s/.child//g

This removes all of the entries for .child (or whatever your domain is
called). Save the file. Open up your DNS server, right click on your new
zone and click on "All Tasks", then click on "Reload". Then go into the
properties of your zone and change it to Active-Directory integrated.

Happy Days

Regards,
Ronan


 
Reply With Quote
 
Ronan Daly
Guest
Posts: n/a
 
      6th May 2004
> They're all unix boxes and domains for testing mail servers.
>
> I've figured out a quick way to do it. In the DNS change the type of

domain
> from Active Directory integrated to a Primary Domain. This creates a file

in
> c:\windows\system32\dns called domain.com.dns. Save this file somewhere.
> Delete the old domain and create a new domain called child.domain.com as a
> Primary domain.
>
> Open up the old domain.com.dns file and find the child section. Copy it

all
> and paste it into the end of the new child.domain.com.dns file. Then

you'll
> need a copy of vi for windows (http://www.winvi.de/en/). Open up the file

in
> vi and type:
>
> :%s/.child//g
>
> This removes all of the entries for .child (or whatever your domain is
> called). Save the file. Open up your DNS server, right click on your new
> zone and click on "All Tasks", then click on "Reload". Then go into the
> properties of your zone and change it to Active-Directory integrated.


One thing that quick fix didn't work for was mx records or aliases, when I
removed the .child from the dns file my mx records changed from
mx1.testdomain.child.domain.com to mx1.testdomain.domain.com and I had to
manually change them back.

Regards,
Ronan


 
Reply With Quote
 
 
 
Reply

Thread Tools
Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
delegation =?Utf-8?B?Q2hyaXM=?= Microsoft Outlook Discussion 2 3rd May 2007 04:21 PM
AD Delegation Mark Scott Microsoft Windows 2000 Active Directory 7 13th Dec 2005 05:34 AM
DNS delegation Chris Burdette Microsoft Windows 2000 DNS 3 30th Sep 2004 02:35 PM
delegation Bill Microsoft Windows 2000 DNS 1 28th Feb 2004 09:45 PM
Delegation Darren Jones Microsoft Windows 2000 Active Directory 6 28th Dec 2003 02:18 PM


Features
 

Advertising
 

Newsgroups
 


All times are GMT +1. The time now is 02:54 PM.