Forum Discussion
thanhtien19
Feb 08, 2022Iron Contributor
should use DNS separate server with active directory ?
Current our system as below - Client , Server point dns to all server active directory - active directory forward dns to two server dns external dmz to resolve dns external - internal dns zone cre...
Feb 08, 2022
Normally all clients and servers point to two DNS servers at least, if possible one in their own site and one in a remote site as backup. (Sometimes it doesn't matter, if WAN link is down you probably can't do much anyway). This can be a Domain controller with Active Directory integrated zones and a forwarder for external lookups, in your case to external DMZ servers which forward those requests outside of your network.
Does your environment only have one Domain Controller? If so, then it's a good idea to setup another one (If possible, perhaps it's not possible when you are using Windows SBS, Foundation or Essentials) or use a member server with the DNS server role on it.
Does your environment only have one Domain Controller? If so, then it's a good idea to setup another one (If possible, perhaps it's not possible when you are using Windows SBS, Foundation or Essentials) or use a member server with the DNS server role on it.
- thanhtien19Feb 09, 2022Iron Contributorwe have five server Domain Controller , and all server set two dns primary and secondary is all ip of server ad remain , but because i worry if primary dns failed then can some server effect. should want build two server dns standalone to can if primary failed then secondary dns can change to IP primary simple than AD
- Feb 09, 2022Because the zones are Active Directory integrated? All domain controllers can write to their own copy of the DNS zone, they are all primary so to say. If one domain controller fails, the registration continues on the one which you configured as second dns server in your network card configuration.
https://www.windowstechno.com/what-is-ad-integrated-dns/- thanhtien19Feb 09, 2022Iron ContributorYes , here I worry member server set primary dns is AD1 , secondary AD2 . IF AD1 offline can effect to resolve dns of member ?