Moving to AD integrated DNS

[Jan]

Hello,

I have a AD with a mix of Windows 2000 and Windows 2003 DC's.
I currently have 2 Window 2000 DNS servers running as primary and
secondary.

- Do i risk anything if i change the zones to AD integrated zones ?.

Thanks,
Jan -

 

[Guest]

You stand to benefit, rather than run risks

A little, light reading is needed, I suspect

http://www.microsoft.com/technet/prodtechnol/windows2000serv/plan/w2kdns2.mspx

neil

 

[Kevin D. Goodknecht Sr. [MVP]]

Hello,

I have a AD with a mix of Windows 2000 and Windows 2003 DC's.
I currently have 2 Window 2000 DNS servers running as primary and
secondary.

- Do i risk anything if i change the zones to AD integrated zones ?.

You will need to delete the secondary zone first. After you change the
standard primary zone to AD integrated, the zone will replicate to all
Domain Controllers in the domain, if a DC has a secondary zone in place, it
won't be able to load both the AD integrated and secondary zones.
It can also be problematic mixing Win2k and Win2k3 DNS servers in a multiple
domain forest. Win2k zones will replicate to Win2k3 DCs in the same domain
but will not replicate to Win2k3 DCs in other domains. Win2k3 supports
replication partitions that will replicate to Win2k3 DNS servers in other
domain, as long as they are in the same forest. However, these partitions
don't replicate to Win2k DCs, so moving the zone to one of these Win2k3
partitions will remove the zone from Win2k DCs. If this is done, the only
way you can get the zones on Win2k DCs is to create them as secondary zones.

 

[Jan]

Thanks,

So removing the secondary DNS server + zone and then changing
the primary to AD integrated would do the job.

And after that i could add a Windows 2003 DNS server (i only have one
domain forest).

/Jan -

 

[Kevin D. Goodknecht Sr. [MVP]]

Thanks,

So removing the secondary DNS server + zone and then changing
the primary to AD integrated would do the job.

I don't know exactly what you mean by removing the "secondary DNS server",
this is a misnomer, there really is no such thing as a secondary DNS server.
You need to remove the secondary zone from the DNS server, that should allow
the zone in AD to replicate to the DNS server. It should take 30 min or less
for the zone in AD to replicate.

 

[Jan]

Your right. Its just because i have 2 DNS servers i call it
the "secondary DNS server".

Thanks for your help,
Jan -