Going to AD Integrated DNS

[Allison Wright]

I will be making a change for our domain controllers to
use AD Integrated DNS. Right now, one of our non domain
contoller servers, named WS1, is the primary DNS server.
I loaded DNS on our domain controllers, named DC1 and DC2,
and they are currently set as secondary servers. I will
point all of our static IP clients to use DC1 and DC2 as
DNS servers. What steps do I do to complete the AD
Integrated process?

I have the following mapped out...is this correct?

1. Switch DC1 to a primary server
2. Make WS1 a secondary server
3. Remove DNS from WS1
4. Convert DC1 to AD Integrated
5. Convert DC2 to AD Integrated

We have one domain, we use W2K w/SP4 on all servers and
will be upgrading to W2K3 in a few weeks with our Exchange
roll-out.

Your help is appreciated. -Allison

 

[Kevin D. Goodknecht [MVP]]

In Allison Wright <[email protected]> posted a question
Then Kevin replied below:
: I will be making a change for our domain controllers to
: use AD Integrated DNS. Right now, one of our non domain
: contoller servers, named WS1, is the primary DNS server.
: I loaded DNS on our domain controllers, named DC1 and DC2,
: and they are currently set as secondary servers. I will
: point all of our static IP clients to use DC1 and DC2 as
: DNS servers. What steps do I do to complete the AD
: Integrated process?
:
: I have the following mapped out...is this correct?
:
: 1. Switch DC1 to a primary server
: 2. Make WS1 a secondary server
: 3. Remove DNS from WS1
: 4. Convert DC1 to AD Integrated
: 5. Convert DC2 to AD Integrated
:
: We have one domain, we use W2K w/SP4 on all servers and
: will be upgrading to W2K3 in a few weeks with our Exchange
: roll-out.
:
: Your help is appreciated. -Allison

You have two DCs?

All you need to do is to delete the secondary zone off of one DC, then on
the other DC just change it from Standard Secondary to Active Directory
integrated, when you do that the zone will be replicated to the other DC
with no further action on your part, It should take no more than fifteen
minutes to replicate the zone if replication is working good.

 

[Allison Wright]

Yes, two DCs- sounds easy enough! Thanks!

 

[Herb Martin]

All you need to do is to delete the secondary zone off of one DC, then on

the other DC just change it from Standard Secondary to Active Directory
integrated, when you do that the zone will be replicated to the other DC
with no further action on your part, It should take no more than fifteen
minutes to replicate the zone if replication is working good.

Mistake above: Don't "Delete" the zone from the second but rather CHANGE
it to "AD Integrated" along with the other one.

Although both DCs will have the records they will not USE (or make them
available)
unless set to be AD integrated for that zone.

Also the original poster needs to recognize that "DNS clients" INCLUDE the
DCs
themselves. Change their NICs to point to the correct (new) DNS servers,
and just
to be safe restart "NetLogon" service after such changes.

One other thing: Don't do any of this unless your DCs are already
replicating
correctly. (Check DCDiag, Event Logs, or RepAdmin/RemlMon )