quick Q: re: dns settings for clients after upgrade to AD

[kaizer]

hello
we are upgrading our network (finally) to 03 w AD etc
i know i have to add the ip of the new DC's to our (all xp) clients. But what happens to the dns servers that are currently configured (for internet access/isp) that are already configured on their dns settings?

 

[58sniper]

The workstations should ONLY point to the AD DNS server. Period.

Pat Richard, MCSE(2) MCSA:Messaging, CNA(2)

 

[YoungKai]

Best practice would be using DHCP. Set your AD DNS server as DNS on your DHCP scope options.

Set the external DNS servers assigned to you by your ISP as fowarders on your AD's DNS setting.

This way, if you ever need to change the external DNS (by ISP's decision or if you are changing ISP), you'll just need to change the forwarders on your AD's DNS, you won't have to change it on every workstations.

 

[kaizer]

hello
thx for your replies
We only have 30 stations - using static ip's
also, how do i set up forwarders on the DC's DNS settings?
In DNS props i have it pointed to itself but i don't see forwarding options there.

and one more thing: Do i need to change the domain name to the dns internal domain on the stations?
or, just keep the netbios name ?

 

[technome]

In the DNS mmc on the SERVER, right click on the server icon, go to properties, forwarders.

Place your ISPs two DNS servers in the list, then add at least 2 more DNS servers from a different ISP. Should your ISP loose their servers or they decide to change the IP without informing you (trust me, they do it); check off "Do not use recursion" for a bit more security against queries forwarded to hacked or virus infected DNS servers, as with recursion your server could query any DNS server out there. Do not use recursion forces your server to only go to the listed IPs in the forwarder list for queries. I would raise the timeout to 10 to 15 seconds.

In network properties, as the other state ,preferred server is your DNS server, no other entry. Under advanced properties of TCP, DNS, place the Dns suffix for this connection. In the Wins tab place the server IP, considering you run Wins.
Excellent book, Mark Minasi's Mastering Windows Server 2003, Sybex

........................................
Chernobyl disaster..a must see pictorial

http://www.kiddofspeed.com/default.htm

 

[YoungKai]

For your additional question, do you mean the NETBIOS name of the domain? Or NETBIOS name of the workstation?

Since you said you upgraded your "network" to AD-based, I'm assuming that all of your workstations has joined the domain, which will have the FQDN instead of just the NETBIOS name.
While indicating your domain, you can use either or - DOMAIN.COM will be the same as DOMAIN - Either way will not effect how the workstations communicates on the network, since your DNS will take care of the translation.

 

[kaizer]

thx all
i think i am clear now