setup of second dns server

P

paul

On our 2000 network we have just one DNS server which is
active directory integrated. Although it has been working
well I would like to install DNS on another server for
fault tolerance and load balancing. I have found a KB
article http://support.microsoft.com/default.aspx?
scid=kb;en-us;313563 which describes how to set up a
secondary server. Is this what I need to do and will this
be active directory integrated also or will it create a
text file.

Many Thanks
Paul
 
K

Kevin D. Goodknecht Sr. [MVP]

In
paul said:
On our 2000 network we have just one DNS server which is
active directory integrated. Although it has been working
well I would like to install DNS on another server for
fault tolerance and load balancing. I have found a KB
article http://support.microsoft.com/default.aspx?
scid=kb;en-us;313563 which describes how to set up a
secondary server. Is this what I need to do and will this
be active directory integrated also or will it create a
text file.

Many Thanks
Paul

Hello Paul,
Is there only one DC?
Having more than one DNS server does little for load balancing, the
alternate DNS is only used if the Primary fails to answer.
IMO if your Primary fails and you only have one DC load balancing or even
having another DNS will be the least of your problems, especially if the DC
goes down or is not available. I would highly recommend adding a second DC
even if the DC only meets minimum hardware reqirements, which I believe is
something like 300Mhz 128MB memory You should be able to aquire one of these
for under $300 then you will have a backup of all domain accounts and can
still logon, JIC the main DC takes a vacation on you. Remember the DC
Athenticates users, if you have no DC available your network resources won't
be available to anyone.
 
W

William Stacey

redundancy for dns is good, however I would do it more for redundancy of the
AD which could be a much bigger issue if your ad goes on vacation as Kevin
said. Having two AD and now two DNS primaries will allow (in theory) one to
go down and your users will keep working (directed maps to shared resources
may still be an issue.) The netlogin protocol does offer some load
balancing (and closest one first) and switch over in case of failure. Your
clients will need to point to both for this to work. Make sure both DNSs
contain only the same zones and can resolve the same namespaces (i.e. don't
have one using conditional forwarding to somewhere and not the other, or one
forwarding to an ISP while the other is forwarding to a partner or
something.) Cheers!
 
P

Paul

Hi Kevin,

I have three DCs but only one is running DNS, if I want to
add a second DNS server is it a secondary as indicated in
the KB article 313563. I am mainly thinking about if the
DC that has DNS installed is unavailable that DNS will
still work. But also if the DNS server failed can a
secondary DNS server be converted to a primary or will it
still function while the DNS server is being restored.

Many Thanks
Paul
 
S

Steven Liu [MSFT]

Hi Paul,

Yes, you can follow the 313563 to setup the second DNS server.

The client will request for the name resolution from the second DNS server
if the first DNS server is down.

The second DNS server will not be upgraded to the primary automatically.

Thanks for using Microsoft News Group!

Sincerely,

Steven Liu

Microsoft Online Partner Support

MCSE 2000

Get Secure! ¨C www.microsoft.com/security

This posting is provided ¡°as is¡± with no warranties and confers no rights.
--------------------
| Content-Class: urn:content-classes:message
| From: "Paul" <[email protected]>
| Sender: "Paul" <[email protected]>
| References: <[email protected]>
<O0pt#[email protected]>
| Subject: Re: setup of second dns server
| Date: Wed, 17 Sep 2003 02:14:40 -0700
| Lines: 80
| Message-ID: <[email protected]>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="iso-8859-1"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Thread-Index: AcN8/CAf1r121IabTou6G6VkhkKWmQ==
| X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4910.0300
| Newsgroups: microsoft.public.win2000.dns
| Path: cpmsftngxa06.phx.gbl
| Xref: cpmsftngxa06.phx.gbl microsoft.public.win2000.dns:26049
| NNTP-Posting-Host: TK2MSFTNGXA13 10.40.1.165
| X-Tomcat-NG: microsoft.public.win2000.dns
|
| Hi Kevin,
|
| I have three DCs but only one is running DNS, if I want to
| add a second DNS server is it a secondary as indicated in
| the KB article 313563. I am mainly thinking about if the
| DC that has DNS installed is unavailable that DNS will
| still work. But also if the DNS server failed can a
| secondary DNS server be converted to a primary or will it
| still function while the DNS server is being restored.
|
| Many Thanks
| Paul
|
|
| >-----Original Message-----
| >In | >paul <[email protected]> posted their concerns
| >Then Kevin made his reply below:
| >> On our 2000 network we have just one DNS server which is
| >> active directory integrated. Although it has been
| working
| >> well I would like to install DNS on another server for
| >> fault tolerance and load balancing. I have found a KB
| >> article http://support.microsoft.com/default.aspx?
| >> scid=kb;en-us;313563 which describes how to set up a
| >> secondary server. Is this what I need to do and will
| this
| >> be active directory integrated also or will it create a
| >> text file.
| >>
| >> Many Thanks
| >> Paul
| >
| >Hello Paul,
| >Is there only one DC?
| >Having more than one DNS server does little for load
| balancing, the
| >alternate DNS is only used if the Primary fails to answer.
| >IMO if your Primary fails and you only have one DC load
| balancing or even
| >having another DNS will be the least of your problems,
| especially if the DC
| >goes down or is not available. I would highly recommend
| adding a second DC
| >even if the DC only meets minimum hardware reqirements,
| which I believe is
| >something like 300Mhz 128MB memory You should be able to
| aquire one of these
| >for under $300 then you will have a backup of all domain
| accounts and can
| >still logon, JIC the main DC takes a vacation on you.
| Remember the DC
| >Athenticates users, if you have no DC available your
| network resources won't
| >be available to anyone.
| >
| >--
| >Best regards,
| >Kevin D4 Dad Goodknecht Sr. [MVP]
| >Hope This Helps
| >============================
| >http://www.lonestaramerica.com/
| >============================
| >--
| >When responding to posts, please "Reply to Group" or
| >"Reply All" via your newsreader so that others may learn
| >and benefit from your issue
| >==========================================
| >Use Outlook Express?... Get OE_Quotefix:
| >It will strip signature out and more
| >http://home.in.tum.de/~jain/software/oe-quotefix/
| >==========================================
| >Keep a back up of your OE settings and folders with
| >OEBackup:
| > http://www.oehelp.com/OEBackup/Default.aspx
| >==========================================
| >
| >
| >.
| >
|
 
K

Kevin D. Goodknecht Sr. [MVP]

In
Paul said:
Hi Kevin,

I have three DCs but only one is running DNS, if I want to
add a second DNS server is it a secondary as indicated in
the KB article 313563. I am mainly thinking about if the
DC that has DNS installed is unavailable that DNS will
still work. But also if the DNS server failed can a
secondary DNS server be converted to a primary or will it
still function while the DNS server is being restored.

Many Thanks
Paul
Actually Paul, Since you have three DCs you can run DNS on all of them and
make then AD integrated, then your zones will be replicated to all DCs with
DNS and all will have a writable copy. Secondary zones are read only
therefore you won't be able to use them for your DDNS clients because the
DDNS client cannot register in a read only zone and it will cause
registration errors.
 
P

paul

Thanks for the replies

I would like to set up at least one more active directory
integrated DNS server which would save transferring zone
information to a secondary and allow updates to either
controller. Do you know of a KB article that expains the
process the one I quoted 313563 only expains setting up a
secondary. Or is it a case of installing DNS and then
replicating all the information from the original DNS
server. I assume that you would also have to tell both
servers that there was a second DNS server and make
changes to all clients.

Regards
Paul
 
S

Steven Liu [MSFT]

Hi Paul,

As i have said:

Yes, you can follow the 313563 to setup the second DNS server on the second
DC.

The client will request for the name resolution from the second DNS server
if the first DNS server is down.

Thanks for using Microsoft News Group!

Sincerely,

Steven Liu

Microsoft Online Partner Support

MCSE 2000

Get Secure! ¨C www.microsoft.com/security

This posting is provided "as is" with no warranties and confers no rights.
 
K

Kevin D. Goodknecht Sr. [MVP]

In
paul said:
Thanks for the replies

I would like to set up at least one more active directory
integrated DNS server which would save transferring zone
information to a secondary and allow updates to either
controller. Do you know of a KB article that expains the
process the one I quoted 313563 only expains setting up a
secondary. Or is it a case of installing DNS and then
replicating all the information from the original DNS
server. I assume that you would also have to tell both
servers that there was a second DNS server and make
changes to all clients.

Regards
Paul
The article you are refering to is for setting up a secondary server, if all
your DCs are in the same domain and do not have a firewall between them you
can use an Active Directory zone.

If you use the AD integrated zone you do not have to set up zone transfers
between the DCs because the zone will be replicated through Active
Directory.
 
K

Kevin D. Goodknecht Sr. [MVP]

In
paul said:
Hi Kevin

Sorry to bring the issue up again but I am still not
certain of the installion process and haven't yet found an
article that does a step by step on a second AD integrated
DNS server. I assume that the second AD DNS will allow
changes to the whole domain and not just a delegated zone.
If I install the DNS service and then go to configure it
when it asks are there other DNS servers on the network
will it then pick up all information required about
forward and reverse zones, or are there more steps that
have to be taken. I don't want to take the risk the
existing DNS information by missing a vital step. Also if
I can do this using AD integrated DNS I do not want to set
up a secondary non AD integrated DNS as my original
question.

Many Thanks

There really is not much to the process, all you need do is install DNS on
the second DC then create the Forward Lookup zone for your AD Domain name.
If you make the zone Active Directory integrated it will get all it's
information from the AD Database. If there is full access between the two
DCs as in there is no NAT device between the servers, the zone will be
replicated between the DCs. With all other AD information. So I would say
that if the DC is already getting other replicated information such as user
accounts replication is already working.
I would recommmend that each DC use the other as primary DNS and itself as
secondary then give both to all clients.
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top