Don't do anything drastic like uninstall/ demote etc. just yet; this is
probably just a simple misconfiguration.
**ALL** members of the domain, including the domain controllers themselves,
are DNS clients; and cannot function without DNS. Therefore you **must**
ensure that everyone points to a working, internal DNS server (in fact you
should ensure that all clients point to at least two DNS servers for
resilllience).
You configure a DNS server to forward to a public DNS server by
right-clicking on the server (in the DNS MMC snap-in) and going to the
forwarders tab.
You must also ensure that your DNS server accepts automatic updates (not
strictly necessary but a nightmare without this) and that the DHCP client
service *is* running on all DCs.
So, what you should do is this:
Configure the network adapter bindings so that the internal NIC is on top on
both servers (Network connections\ advanced\ advanced settings...)
Get rid of the default gateway on the internal NICs (only have a DG on the
external NICs)
Get rid of the DNS settings on the public NICs.
Ensure that the internal DNS settings are pointing to the DCs.
Now, with all this done, restart the netlogon service on each DC. ***At
this point, it may be beneficial to point DC2 at DC1 for DNS, and change
this back to point to itself once you've restarted netlogon and allowed for
replication.
Ensure that all PCs, member servers, etc. are pointing to both DCs for DNS
(the order does not matter; the second is a failover if the first cannot be
contacted -not if the first cannot resolve a name).
You should also ensure that both of these DCs are GCs:
--
http://www.msresource.net/content/view/25/47/
GCs are very important in native mode domains, and for exchange!!
Hope this helps,
--
Paul Williams
http://www.msresource.net
http://forums.msresource.net
______________________________________
Hello Paul,
With DC1 settings, clients are able to logon to the domain and go on line.
In any rate, how do I configure the server to forward DNS request to an
external DNS address? . By the way I have exchange 2000 on Dc1 and I
installed a new Exchange on DC2, which will not mount the Exchange store
because Of DNS issues( I guess).
I am thinking about reinstalling DNS on the new box and demote then promot
again, what do you think? Thanks Paul.