client dns?

[pk]

We just installed a new domain controller with Windows 2003 server. We
are using active directory.

All clients are Windows 2000 Professional.

During the long process of joining the client computers to the new
domain, we noted the following:

We could not add any domain user accounts to the local administrative
group on the desktops unless we configured DNS on the desktops with
the AD server's IP address. Until we did this, the domain controller
was "not available" to the workstation, even after the desktop had
been joined to the domain.

I thought we could leave the DNS set to automatic on the clients. Are
we missing something here?

Thanks!

PK

 

[Marc Reynolds [MSFT]]

The clients need to be configured to use the DNS server that contains the AD
DNS records for the domain (your Windows 2000 DNS server). You can configure
the clients manually to use this DNS server or you can configure the scope
in your DHCP server to hand out the this DNS server when the client
get/renew their IP addresses.

--

Thanks,
Marc Reynolds
Microsoft Technical Support

This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Danny Sanders]

I thought we could leave the DNS set to automatic on the clients. Are

we missing something here?

All AD clients MUST be pointed to the DNS server set up for AD, in order to
"find" *anything*.

The AD DNS server should point to itself for DNS and configured to forward
requests and your ISP's DNS server listed as the forwarder.
See:
How to: Configure DNS for Internet Access In Windows 2000

http://support.microsoft.com/default.aspx?scid=kb;en-us;300202

Setting Up the Domain Name System for Active Directory

http://support.microsoft.com/default.aspx?scid=kb;en-us;237675



hth

DDS W 2k MVP MCSE

 

[Matt Hickman]

We could not add any domain user accounts to the local administrative
group on the desktops unless we configured DNS on the desktops with
the AD server's IP address. Until we did this, the domain controller
was "not available" to the workstation, even after the desktop had
been joined to the domain.

The workstations need to access a DNS server that has the LDAP SRV
records pointing to the DCs that they can use to log into the domain.

I thought we could leave the DNS set to automatic on the clients. Are
we missing something here?

The "obtain DNS server address automatically" relies on several things:
1. That the workstation is getting its IP address from DHCP
2. that DHCP for that scope is also configured to give the
workstations DNS server address(es)
3. That the DNS servers whose addesses are given out support SRV
records.
4. The DNS server(s) have the SRV records of the domain controllers.