Hello,

when i create a dc I have the option to install DNS and I must do it if
it is the first DC. In this case the forward lookup zone will be created
automatically and if I want I can choose to replicate dns to all other
DCs with DNS installed either in the same domain or all forest.  Now in
the same domain means also on child domains or it means in the exactly
same domain only for example only on test.com and not on south.test.com

I am trying to understand when I should create a forward lookup zone
since when I created the DC the forward lookup zone was configured
automatically.

To make things clear, for every zone there should be a domain
controller with the same name right ?
Let's say that I want to add south.test.com on the same dns server
names test.com, somewhere there should be a DC responsible for
south.test.com right ?


-- 
aconti
------------------------------------------------------------------------
aconti's Profile: http://forums.techarena.in/members/73272.htm
View this thread: http://forums.techarena.in/active-directory/1292313.htm

http://forums.techarena.in

AD will create all the necessary zones. You can create a new forward zone 
only if you need it for some other purposes. "Same domain" means same 
domain, eg test.com. So that DNS zone will replicate to all domain 
controllers from test.com domain. If you choose forest, the it will 
replicate to all DCs from the forest (test.com, south.test.com, and any 
other domain from the forest). Keep in mind that there is a big difference 
between Active Directory domains and DNS domains.
Also here is something it might help understanding the role of DNS in AD:

http://technet.microsoft.com/en-us/library/cc759550(WS.10).aspx

Regards,
Andrei Ungureanu
www.itboard.ro
www.winadmin.ro

"aconti" <aconti.44o03b@DoNotSpam.com> wrote in message 
news:aconti.44o03b@DoNotSpam.com...
>
> Hello,
>
> when i create a dc I have the option to install DNS and I must do it if
> it is the first DC. In this case the forward lookup zone will be created
> automatically and if I want I can choose to replicate dns to all other
> DCs with DNS installed either in the same domain or all forest.  Now in
> the same domain means also on child domains or it means in the exactly
> same domain only for example only on test.com and not on south.test.com
>
> I am trying to understand when I should create a forward lookup zone
> since when I created the DC the forward lookup zone was configured
> automatically.
>
> To make things clear, for every zone there should be a domain
> controller with the same name right ?
> Let's say that I want to add south.test.com on the same dns server
> names test.com, somewhere there should be a DC responsible for
> south.test.com right ?
>
>
> -- 
> aconti
> ------------------------------------------------------------------------
> aconti's Profile: http://forums.techarena.in/members/73272.htm
> View this thread: http://forums.techarena.in/active-directory/1292313.htm
>
> http://forums.techarena.in
> 

Inline

-- 
Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4
Microsoft's Thrive IT Pro of the Month - June 2009

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup This
posting is provided "AS IS" with no warranties, and confers no rights.

"aconti" <aconti.44o03b@DoNotSpam.com> wrote in message 
news:aconti.44o03b@DoNotSpam.com...
>
> Hello,
>
> when i create a dc I have the option to install DNS and I must do it if
> it is the first DC. In this case the forward lookup zone will be created
> automatically and if I want I can choose to replicate dns to all other
> DCs with DNS installed either in the same domain or all forest.  Now in
> the same domain means also on child domains or it means in the exactly
> same domain only for example only on test.com and not on south.test.com
>
> I am trying to understand when I should create a forward lookup zone
> since when I created the DC the forward lookup zone was configured
> automatically.

Whatever dns server (Doesn't have to be a dc) you specify the dcpromo 
process will use this dns server to create the necessary dns records for the 
domain.  It is all automatic.
>
> To make things clear, for every zone there should be a domain
> controller with the same name right ?
A zone can hold more than one domain and you don't need it to be a dc unless 
it is AD Integrated.

> Let's say that I want to add south.test.com on the same dns server
> names test.com, somewhere there should be a DC responsible for
> south.test.com right ?
Yes there will be a dns server responsible for south.test.com.  Like I said 
earlier, unless it is AD Integrated, it doesn't have to be a dc.

>
>
> -- 
> aconti
> ------------------------------------------------------------------------
> aconti's Profile: http://forums.techarena.in/members/73272.htm
> View this thread: http://forums.techarena.in/active-directory/1292313.htm
>
> http://forums.techarena.in
> 

"aconti" <aconti.44o03b@DoNotSpam.com> wrote in message 
news:aconti.44o03b@DoNotSpam.com...
>
> Hello,
>
> when i create a dc I have the option to install DNS and I must do it if
> it is the first DC. In this case the forward lookup zone will be created
> automatically and if I want I can choose to replicate dns to all other
> DCs with DNS installed either in the same domain or all forest.  Now in
> the same domain means also on child domains or it means in the exactly
> same domain only for example only on test.com and not on south.test.com
>
> I am trying to understand when I should create a forward lookup zone
> since when I created the DC the forward lookup zone was configured
> automatically.
>
> To make things clear, for every zone there should be a domain
> controller with the same name right ?
> Let's say that I want to add south.test.com on the same dns server
> names test.com, somewhere there should be a DC responsible for
> south.test.com right ?
>


Curious, you already have two good responses regarding default behavior of 
dcpromo and other things, but my question is, what are your intentions and 
expected end results? Do you need a child domain created or do you just want 
to have a DC with a different domain suffix?

Please elaborate on your expectations, plans and expected end results, to 
better address your concerns.

Thanks,

-- 
Ace

This posting is provided "AS-IS" with no warranties or guarantees and 
confers no rights.

Please reply back to the newsgroup or forum for collaboration benefit among 
responding engineers, and to help others benefit from your resolution.

Ace Fekay, MVP, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE & 
MCSA 2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer
Microsoft MVP - Directory Services

If you feel this is an urgent issue and require immediate assistance, please 
contact Microsoft PSS directly. Please check http://support.microsoft.com 
for regional support phone numbers. 

Thank you all

So once the zones are active directory integrated all is automatic. The
client register themselves through dhcp server and each domain
controller with dns using active directory integrated will have the same
records. This one I just tried it and created the 2nd DC with DNS and
all records were copied to the DNS.

My question is, client are having their records updated on DNS since
they are logged in for example to domain test.com and the dns zone is
named test.com so for example client1.test.com will be updated in the
test.com dns zone. If I create a completely different forward lookup
zone for example ABC.com on the same dns server clients will not
register themselve with it since they are logged in the test.com domain
so when Forward lookup zones should be created ?

I have no goal in mind all I want is to understand in which situation I
have to create a forward lookup zone?

Thank you for your help


-- 
aconti
------------------------------------------------------------------------
aconti's Profile: http://forums.techarena.in/members/73272.htm
View this thread: http://forums.techarena.in/active-directory/1292313.htm

http://forums.techarena.in

It will only register itself in one zone.

I don't understand this question.

> If I create a completely different forward lookup
> zone for example ABC.com on the same dns server clients will not
> register themselve with it since they are logged in the test.com domain
> so when Forward lookup zones should be created ?


-- 
Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4
Microsoft's Thrive IT Pro of the Month - June 2009

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup This
posting is provided "AS IS" with no warranties, and confers no rights.

"aconti" <aconti.44op3c@DoNotSpam.com> wrote in message 
news:aconti.44op3c@DoNotSpam.com...
>
> Thank you all
>
> So once the zones are active directory integrated all is automatic. The
> client register themselves through dhcp server and each domain
> controller with dns using active directory integrated will have the same
> records. This one I just tried it and created the 2nd DC with DNS and
> all records were copied to the DNS.
>
> My question is, client are having their records updated on DNS since
> they are logged in for example to domain test.com and the dns zone is
> named test.com so for example client1.test.com will be updated in the
> test.com dns zone. If I create a completely different forward lookup
> zone for example ABC.com on the same dns server clients will not
> register themselve with it since they are logged in the test.com domain
> so when Forward lookup zones should be created ?
>
> I have no goal in mind all I want is to understand in which situation I
> have to create a forward lookup zone?
>
> Thank you for your help
>
>
> -- 
> aconti
> ------------------------------------------------------------------------
> aconti's Profile: http://forums.techarena.in/members/73272.htm
> View this thread: http://forums.techarena.in/active-directory/1292313.htm
>
> http://forums.techarena.in
> 

"aconti" <aconti.44op3c@DoNotSpam.com> wrote in message 
news:aconti.44op3c@DoNotSpam.com...
>
> Thank you all
>
> So once the zones are active directory integrated all is automatic. The
> client register themselves through dhcp server and each domain
> controller with dns using active directory integrated will have the same
> records. This one I just tried it and created the 2nd DC with DNS and
> all records were copied to the DNS.
>
> My question is, client are having their records updated on DNS since
> they are logged in for example to domain test.com and the dns zone is
> named test.com so for example client1.test.com will be updated in the
> test.com dns zone. If I create a completely different forward lookup
> zone for example ABC.com on the same dns server clients will not
> register themselve with it since they are logged in the test.com domain
> so when Forward lookup zones should be created ?
>
> I have no goal in mind all I want is to understand in which situation I
> have to create a forward lookup zone?
>
> Thank you for your help
>


As Paul stated, I'm not following what you want to do, as well as that it 
will only register into one zone. DNS registration is dictated NOT because 
it is logged into the domain, rather the Primary DNS Suffix which a joined 
machine is configured with based on the domain it is joined to. I've seen 
administrators in installations that add registration suffixes to 
workstations to (as they've claimed) to put the workstations into another 
zone to "try" to organize the workstations based on location or function, 
however they've found this caused *numerous* problems with AD client-server 
communications including on servers with SPN issues.

I think an understanding of the DNS registration process will help, but it 
also requires an AD-DNS relationship process to understand the whole 
underlying technology to realize the implications of what you are implying 
that you want to do. I hope the following links help.

How to configure DNS dynamic updates in Windows Server 2003The DNS update 
process is defined in RFC 2136, "Dynamic Updates in the Domain Name .... To 
configure the client to make no requests for DNS registration, ...
http://support.microsoft.com/kb/816592

How to enable or disable DNS updates in Windows 2000 and in ...1 The DNS 
client backs out of the registration process. .... To disable domain name 
system (DNS) dynamic update protocol registration for all network ...
http://support.microsoft.com/kb/246804 - Similar

Dynamic update: Domain Name System(DNS)Jan 21, 2005 ... The process of how 
dynamic updates are performed for computers running Windows .... The dynamic 
registration of DNS resource records can be ...
http://technet.microsoft.com/en-us/library/cc784052(WS.10).aspx -

Ace

Thank you links helped to understand better


-- 
aconti
------------------------------------------------------------------------
aconti's Profile: http://forums.techarena.in/members/73272.htm
View this thread: http://forums.techarena.in/active-directory/1292313.htm

http://forums.techarena.in

"aconti" <aconti.44przb@DoNotSpam.com> wrote in message 
news:aconti.44przb@DoNotSpam.com...
>
> Thank you links helped to understand better
>


That's good to hear! If you have any questions on any portion of it, please 
don't hesitate to ask.

Cheers!

Ace 

Hi
You need to have for each domain a correspondent zone in DNS. Active 
Directory and DNS have the same hierarchical structure  but they're 
separated and implemented differently for different purposes, an 
organization's namespace for DNS and Active Directory have an identical 
structure. For example, company.com can be both a DNS domain and an Active 
Directory domain. DNS is a name resolution service. DNS clients send DNS 
name queries to their configured DNS server. The DNS server receives the 
name query and either resolves the name query through locally stored files 
or consults another DNS server for resolution. DNS does not require Active 
Directory to function. Active Directory is a directory service. Active 
Directory provides an information repository and services to make 
information available to users and applications. Active Directory clients 
send queries to Active
Directory servers using LDAP. In order to locate an Active Directory server, 
an Active Directory client queries DNS. Active Directory requires DNS to 
function. Each Server/workstation will have FQDN assigned to their domain 
and if they change the domain the FQDN will change along with it.

-- 

I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MVP Directory Services

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.




"aconti" <aconti.44op3c@DoNotSpam.com> wrote in message 
news:aconti.44op3c@DoNotSpam.com...
>
> Thank you all
>
> So once the zones are active directory integrated all is automatic. The
> client register themselves through dhcp server and each domain
> controller with dns using active directory integrated will have the same
> records. This one I just tried it and created the 2nd DC with DNS and
> all records were copied to the DNS.
>
> My question is, client are having their records updated on DNS since
> they are logged in for example to domain test.com and the dns zone is
> named test.com so for example client1.test.com will be updated in the
> test.com dns zone. If I create a completely different forward lookup
> zone for example ABC.com on the same dns server clients will not
> register themselve with it since they are logged in the test.com domain
> so when Forward lookup zones should be created ?
>
> I have no goal in mind all I want is to understand in which situation I
> have to create a forward lookup zone?
>
> Thank you for your help
>
>
> -- 
> aconti
> ------------------------------------------------------------------------
> aconti's Profile: http://forums.techarena.in/members/73272.htm
> View this thread: http://forums.techarena.in/active-directory/1292313.htm
>
> http://forums.techarena.in
> 

Thank you all for the support


-- 
aconti
------------------------------------------------------------------------
aconti's Profile: http://forums.techarena.in/members/73272.htm
View this thread: http://forums.techarena.in/active-directory/1292313.htm

http://forums.techarena.in

"aconti" <aconti.44verb@DoNotSpam.com> wrote in message 
news:aconti.44verb@DoNotSpam.com...
>
> Thank you all for the support
>

You are welcome, Aconti.

Ace 

Great!

-- 

I hope that the information above helps you.
Have a Nice day.

Jorge Silva
MVP Directory Services

Please no e-mails, any questions should be posted in the NewsGroup
This posting is provided "AS IS" with no warranties, and confers no rights.




"aconti" <aconti.44verb@DoNotSpam.com> wrote in message 
news:aconti.44verb@DoNotSpam.com...
>
> Thank you all for the support
>
>
> -- 
> aconti
> ------------------------------------------------------------------------
> aconti's Profile: http://forums.techarena.in/members/73272.htm
> View this thread: http://forums.techarena.in/active-directory/1292313.htm
>
> http://forums.techarena.in
>