DNS issue...

[Arxitektwn]

Hello all!





I am implementing a new win2k infrastructure in my company. The network will
have one parent domain and several child domains. The parent domain will be
the schema master and it will contain the dns forwarder to ISP. At the
moment I am using to offline servers, one is the parent domain and one child
domain. Both are using the same subnet number. I did a config that it seems
that works, but I would like to have your advice.



*Create the forward lookup zone to the parent dsn.

*Create a delegation for the child domain, on the parent dns.

*Create the forward lookup zone on the child.



Then I wanted to install exchange on the child domain. So I run forestprep
at the parent (delegate permission on domain admin group). But when I tried
to install exchange to the child it didn't let met (I was using an account
with domain admin permissions) - I was getting an error : that it can't
reach the parent domain.



But when I install a forwarder to the child pointing to the parent, it
worked.



I am bit lost with what exactly the delegation to the child domain does. I
though by creating that delegation the child will be able to reach the
parent. But on the contrary I had to put a forwarder.



Is that config the best that I can have? Or there is another way without
using a forwarder?



And what about the reverse lookup zone? I create it in the parent (ie
10.53.0.0/19), but I don't realy know what I have to do on the child, since
they are both on the same subnet.



And one last thing, how the forwarder actually works? First resolves
internally and if no match sent it through the forwarder?



Any help, will be really appreciated.



Thank you


M.

 

[Ace Fekay [MVP]]

In

Hello all!





I am implementing a new win2k infrastructure in my company. The
network will have one parent domain and several child domains. The
parent domain will be the schema master and it will contain the dns
forwarder to ISP. At the moment I am using to offline servers, one is
the parent domain and one child domain. Both are using the same
subnet number. I did a config that it seems that works, but I would
like to have your advice.



*Create the forward lookup zone to the parent dsn.

*Create a delegation for the child domain, on the parent dns.

*Create the forward lookup zone on the child.



Then I wanted to install exchange on the child domain. So I run
forestprep at the parent (delegate permission on domain admin group).
But when I tried to install exchange to the child it didn't let met
(I was using an account with domain admin permissions) - I was
getting an error : that it can't reach the parent domain.



But when I install a forwarder to the child pointing to the parent, it
worked.



I am bit lost with what exactly the delegation to the child domain
does. I though by creating that delegation the child will be able to
reach the parent. But on the contrary I had to put a forwarder.



Is that config the best that I can have? Or there is another way
without using a forwarder?



And what about the reverse lookup zone? I create it in the parent (ie
10.53.0.0/19), but I don't realy know what I have to do on the child,
since they are both on the same subnet.



And one last thing, how the forwarder actually works? First resolves
internally and if no match sent it through the forwarder?



Any help, will be really appreciated.



Thank you


M.

A Forwarder is recommended from the child back to the parent so the child
knows where the parent is.

255248 - HOW TO Create a Child Domain in Active Directory and Delegate the
DNS Namespace to the Child Domain: http://support.microsoft.com/?id=255248

(Delegation and Forwarding) - Directing queries through forwarders:
http://www.microsoft.com/technet/tr...DNS_imp_DirectingQueriesThroughForwarders.asp

You could also use Root Hints (little more manual config there) or you can
use glue records:

Delegating zones - Glue records and glue chasing:
http://www.microsoft.com/technet/tr...oddocs/server/sag_DNS_imp_DelegatingZones.asp



--
Regards,
Ace

Please direct all replies to the newsgroup so all can benefit.

Ace Fekay, MCSE 2000, MCSE+I, MCSA, MCT, MVP
Microsoft Windows MVP - Active Directory