Child Domain DNS

[Dan]

I have set up a child domain and am just wondering how I should run the DNS
configuration. My child domain has DCs that point to DNS in the parent
domain. Is this best practice?

Or is the other way to get the DCs in the child domain to point to
themselves for DNS? I guess then I would need to configure forwarding to the
parent domain as well

What is best practice please?

 

[Herb Martin]

I have set up a child domain and am just wondering how I should run the DNS
configuration. My child domain has DCs that point to DNS in the parent
domain. Is this best practice?

Probably not, but the KEY is that the CHILD machines (DCs and
every client) must be able to resolve BOTH the child and the parent
(and siblings etc. too) DNS.

If that works -- you can setup DNS in any way that is efficient and
reliable.

Most people have the "child DNS" handled by "child domain
servers" but that is NOT a rule.

Or is the other way to get the DCs in the child domain to point to
themselves for DNS? I guess then I would need to configure forwarding to
the
parent domain as well

Probably not "forwarding" but that is SOMETIMES a good choice.
(forwarding is usually used to resolve the Internet, and unless you
want the child to forward to the parent to the Internet you will lose
that.)

In Win2003 you might use "conditional forwarding" to the parent.
Or you might hold a "Secondary" for the parent on the child DNS
servers.

What is best practice please?

To make DNS resolution WORK, and work efficiently. (Seriously)

Most COMMON (but not the only way that works):

DNS clients in the CHILD Domain point to DNS servers OF
the child Domain

Child Domain DNS servers have the zone for the parent as
well -- OR some other way to resolve the parent AND
anything else (e.g., the Internet) needed by the client.

DCs are DNS Clients too.

Generally the DCs should point to the local (e.g., child) DNS.

Generally they should point to THEMSELVES if they are child
DNS servers.

 

[Paul Bergson]

In a large domain you can reduce traffic by having the child handle its own
dns traffic. It also can provide fault tolerance, since the child becomes
dependent on the parent. In smaller networks the traffic probably isn't
much of an issue. If you create a new zone for the child you will need to
point the parent to the new zone of the child.

http://support.microsoft.com/kb/255248/en-us

FAQ DNS
http://support.microsoft.com/kb/291382/en-us