DNS Question

[kokousam]

We have 2 domains with trust relationship (Domain.com & Domain.org),
we share the Firewall & Router which are located in (Doamin.com) in
another building also DHCP & Wins services. I am planning to install a
router and firewall on (Domain.org) to remove the trust relationship
between the 2 Domains. My question is that the DHCP server which is
located in (Domain.com)uses the 10.0.0.0 and I want to install DHCP on
my side (Doamin.org)to use ClassB 172.16.0.0, Also I want to kill the
DNS in my side (Domain.org)and create new Zones for the
(Domain.org)to update the DNS database with the new IP range
(172.16.0.0).Old DNS layout is that both Domains have their primary
DNS (my side is Active directory integrated) and each Domain holds
the secondary DNS for the other Domain. First question what (.DNS)
Files should I delete to complete the deletion of the old zones. What
Kind of problems I may face that somebody may know about? and what is
the best way to approach it?

Environment (Domain.org): 2DC win2k in mixed Mode. 1st DC which is
Global catalog is an exchange 2000 and DNS right now.My Goal is to
install DNS active integrated but will be in the 2DC which is not
global catalog.

Any help will be appreciate it.

 

[Jeff Cochran]

We have 2 domains with trust relationship (Domain.com & Domain.org),
we share the Firewall & Router which are located in (Doamin.com) in
another building also DHCP & Wins services. I am planning to install a
router and firewall on (Domain.org) to remove the trust relationship
between the 2 Domains. My question is that the DHCP server which is
located in (Domain.com)uses the 10.0.0.0 and I want to install DHCP on
my side (Doamin.org)to use ClassB 172.16.0.0, Also I want to kill the
DNS in my side (Domain.org)and create new Zones for the
(Domain.org)to update the DNS database with the new IP range
(172.16.0.0).Old DNS layout is that both Domains have their primary
DNS (my side is Active directory integrated) and each Domain holds
the secondary DNS for the other Domain. First question what (.DNS)
Files should I delete to complete the deletion of the old zones.

You shouldn't. Use the GUI and delete the zone there.

What
Kind of problems I may face that somebody may know about?

Besides you just plain screwing up when recreating the new zone, you
have to ensure that your router/firewall doesn't relay DHCP to the
opposite network. Naturally, you have to deal with the secuirty
implications of not being trusted anymore as well.

and what is
the best way to approach it?

Usually from down wind. That way the DNS servers can't smell your
cologne until it's too late...

Personally, I'd test this with a few systems first, if all goes well,
I'd change the DHCP scopes to a much quicker expiration, create the
new zone/blow away the old one, then reset the DHCP to a longer lease
after the systems have picked up the new info. Any way you slice it,
there will be glitches, so make sure you have adequate backups.

Jeff