How to setup DNS in a tree

  • Thread starter Thread starter Johan
  • Start date Start date
J

Johan

I have multiple domains in the same tree but in different sites.
How should DNS be configured? Should all DCs always use themselves as DNS?

Should the DNSes in the childdomains have the same info regarding their
parentdomain as the parent DNSes have?

What should it look like??
 
This is the design of the DNS structure. For Security reasons you may should
keep child domain controllers with a replica of there own domain or place
DNS Servers in the top at the root domain as you may know Active Directory
are depend on DNS I recommend at least one DNS in each site. This is of
course unique to each scenario and we don't know your environment, but feel
free to post back.

Have a nice day!
 
I have multiple domains in the same tree but in different sites.
How should DNS be configured? Should all DCs always use themselves
as DNS?

Should the DNSes in the childdomains have the same info regarding
their parentdomain as the parent DNSes have?

What should it look like??
Click to expand...
It's not *DCs* that should use themselves as DNS, but *DNS* servers.
In most organisations the DNS servers are on the DCs, so this
distinction is not important. But DNS servers do not have to be on the
DCs.

It's useful to realise that while the DNS system is *USED* by AD, it
is not *PART* of AD. DNS domains and sub-domains are not exactly the
same as AD domains and subdomains, but obviously there is usually a
correspondance between them. However if the DNS server is installed on
a DC, then it can use AD's replication facilities instead of its
normal zone transfer facilities.

Since DNS is not part of AD, it could be located anywhere. In the
network containing the AD forest is usual, but not obligatory. Outside
of the AD forest is possible but not usual. Imagine for a minute that
your DNS is on the moon. Would you build a DNS setup up there that
mirrored your Domain set up down here with a server for each Domain in
your AD network? Or would you have two or more servers holding all
Domain information for the whole tree? Only you can tell, depending on
your organisational needs for central control versus distributed
control of DNS.

Cheers,

Cliff

{MVP - Directory Services}
 
Back
Top