Sunday, April 5, 2009

DNS Basic Configuration and Common Mistakes DNS Setup

One of the most common  mistake administrators do when it comes to configure DNS is to point the DC/DNS servers to IPS DNS servers as their primary DNS server. I see everyday problems related to  mis-configured DNS and decided to post some of the best practices and basic DNS settings for domain controllers.

The misconception behind this mistake is to connect the DC/DNS servers to the internet and therefore the ISP DNS IP addresses are being added to DC/DNS servers and of course not understanding basic DNS concept.

if you your get on your DC/DNS and issue IPconfig /all and you are seeing similar output below, you need to keep reading, because your DG/DNS is not configured correctly.

if you like to download the video here it is

Video 1

Host Name . . . . . . . . . . . . : DC4
Primary Dns Suffix  . . . . . . . : smtp25.org
Node Type . . . . . . . . . . . . : Hybrid
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No
DNS Suffix Search List. . . . . . : smtp25.org

Autoconfiguration Enabled . . . . : Yes
IPv4 Address. . . . . . . . . . . : 10.10.10.4(Preferred)
Subnet Mask . . . . . . . . . . . :255.255.255.0
Default Gateway . . . . . . . . . :10.10.10.1
DNS Servers . . . . . . . . . . . : 208.67.222.222 ( ISP DNS)
                                         208.67.220.220  (ISP DNS)
NetBIOS over Tcpip. . . . . . . . : Enabled

Here are the rules and Previous post I have donefingerscrossed

DNS configuration

1. Do not point your DC/DNS servers to your ISP DNS servers on their Preferred and alternate DNS configuration on the TCP/IP properties.

2.Make sure the server has configured correctly, the TCP/IP stack and DNS server is pointing to ***Existing DC/DNS***

3. One of the best practice ***most common*** configuration is point DC/DNS servers Preferred IP to ***Itself*** and alternate DNS to its closest neighbor who is also DC/DNS server

4. You should make all DC/DNS servers ***Active directory integrated DNS*** simple reason is Security, Redundancy, simplicity.

If you have one DC/DNS AD integrated server in your environment, the DNS data is being kept on the domain partition of active directly thus it is getting replicated to any other DC even they are not DNS servers and therefore make all of them AD/DNS servers and be done with good configuration.

5.Don't use more than 1 NIC card, DC's don't like multiple NIC cards, multi-homed DC’s are most likely going to cause ***Trouble*** if you do have multiple NIC on your DC, Disable the second NIC and take out the option “ Register this connection’s addresses in DNS” in case another admin enables this NIC Inadvertently, to prevent this interface to register in DNS.

image

6.Forward the recursive queries which your domain is not authoritative for to the ISP DNS servers and let them do the heavy work. ( watch the video to learn how to configure forwarders)

7.Go to your DNS, forward lookup zone locate _msdcs.yourDomain.org , go to properties , click on name servers and make sure all the servers listed there are domain controller and they are functioning properly

Oz Casey Dedeal

MVP (Exchange)
MCITP (EMA), MCITP (SA)
MCSE 2003, M+, S+, MCDST
Security+, Project +, Server +

http://smtp25.blogspot.com (Blog)
http://telnet25.wordpress.com/ (Blog

57 comments:

Patong Hotels said...

thanks, your article is very informative.

Oz Casey, Dedeal said...

Thanks for reading my blog and leaving comments

--oz

preston-pest-control said...

Next time I read a blog, Hopefully it does not fail me just as much as this one. After all, I know it was my choice to read, however I actually believed you would probably have something useful to talk about. All I hear is a bunch of complaining about something you could possibly fix if you weren't too busy searching for attention.pres control san antonio coronavirus

WilliamHenry said...

Nice post. I learn something new and challenging on sites I stumbleupon on a daily basis. It will always be exciting to read through articles from other writers and use something from their web sites.
cryptocurrency Trading Signals

gaymapper said...

I must thank you for the efforts you've put in penning this blog. I am hoping to check out the same high-grade content from you in the future as well. In fact, your creative writing abilities has motivated me to get my own website now ;)
I'm more than happy to find this page. I wanted to thank you for your time for this wonderful read!! I definitely enjoyed every bit of it and I have you bookmarked to check out new things in your web site.
Gay Gran Canaria

advancedroofingprostowson said...

Hi there! This blog post could not be written much better! Going through this post reminds me of my previous roommate! He constantly kept preaching about this. I am going to forward this article to him. Fairly certain he's going to have a great read. Thanks for sharing!
Roofs

Mira Edorra said...

Technische Fachübersetzung|Übersetzungsbüro für Technik.
Ihr Technisches Fachübersetzungsbüro,Übersetzung für Banken mit Beglaubigung und ApostilleÜbersetzungsbüro für Ihr internationales Business ✓alle Weltsprachen ✓termingerecht ✓über 5.000 Übersetzer, Zertifizierte Qualität DIN 17100. Technische Übersetzung Übersetzer Dolmetscher. Technische Übersetzungen, beglaubigte Übersetzung, Übersetzung mit Apostille

Claudia julie said...

juristische Übersetzungen in alle Sprachen: Urteile, Verträge, AGB. Rechtsübersetzungen durch juristische Übersetzer. Schnell juristische, technische und medezinische Übersetzer Augsburg-Ingolstadt-Regensburgund preiswert. Professionell & Günstig. Zuverlässig & vertraulich, Verträge, AGB, juristische Fachtexte, Geschäftsberichte, Lektorat,
medizinische und technische Fachübersetzung, vereidigter Übersetzer, Patentübersetzung,vereidigter Fachübersetzer

Local Swimming Pool Contractors said...

Local Swimming Pool Contractors
The maintenance involved with a pool is not inconsiderable. It takes time and effort to keep the pool clean and in good condition. And the older the pool is, the more maintenance and work that’s likely to be required. For reasons of style, usability, and safety, it’s vital to keep a pool well maintained. Investors in particular tend to avoid pools for this reason; they don’t want to rely on tenants to take care of a potentially labour intensive feature.

Eccn Inc said...

That is the superb attitude, in any case is simply not make each sence at all proclaiming about that mather. Basically any strategy an abundance of thanks notwithstanding i had attempt to advance your own article into delicius all things considered it is clearly an issue utilizing your data locales would you be able to please recheck the thought. much appreciated yet again.
Managed It services at northern virginia

tiktok locksmith said...

Residential Locksmith Services
You’ve made some good points there. I looked on the internet for additional information about the issue and found most people will go along with your views on this website.
Nice post. I learn something totally new and challenging on websites I stumbleupon every day. It’s always useful to read through articles from other authors and practice something from other sites.

ecolivinglife said...

Eco living life team is passionate about making it easier for you to shop online. We care about your time so we try our best to make your shopping experience pleasant, seamless and hassle-free.

10 Largest Android Tablet said...

Thanks for reading my blog and leaving comments. I really hope to see the same high-grade blog posts from you later on as well. In truth, your creative writing abilities has motivated me to get my very own site

bestRFIDblockingwallet said...

thanks for sharing this informative article , thois is so helpfull for us <a href =" https://bestrfidblockingwallet.com/best-gucci-mens-wallet/?preview_id=675&preview_nonce=51617bfa91&_thumbnail_id=687&preview=true "

bestRFIDblockingwallet said...

thanks for sharing this informative article , this is so helpful for us. https://padlet.com/bestrfidblockingwallet/f5dh2favmzhclqzk

RFID Blocking Wallet ( said...

The maintenance involved with a pool is not inconsiderable. It takes time and effort to keep the pool clean and in good condition. And the older the pool is, the more maintenance and work that’s likely to be required. For reasons of style, usability, and safety <a href " https://padlet.com/bestrfidblockingwallet/f2kpt4o6ep3fv88q "

bestrfidblockingwallet@gmail.com said...

thanks for sharing this great information < a href " https://www.bloglovin.com/@rfidblockingwallets/7-best-pull-up-leather-wallet "

RFID Blocking Wallet ( said...

thanks for sharing information , it is really informative for us .<a href "https://www.bloglovin.com/@rfidblockingwallets/best-leather-bifold-wallet-mokzer-slim-swallowmall"

Broke scholar said...

Aw, this was a very nice post. Taking the time and actual effort to produce a superb article… but what can I say… I procrastinate a whole lot and never manage to get anything done.

At BrokeScholar we work around the clock to update this page with active promo codes, coupons and discounts for Total Wine . Our editors monitor newsletters, social media posts, deal forums, and third party sellers to find the best Total Wine deals. For students, we also track totalwine student discounts for exclusive savings. We've done the research so you don't have to. Bookmark this page and never miss a Total Wine promotion again.

bestworksocksforsweatyfeet said...
This comment has been removed by the author.
bestworksocksforsweatyfeet said...

I got what you mean , a debt of gratitude is in order for posting .Woh I am cheerful to discover this site through google.

Best Scope For AR 15 Under $100

Anonymous said...

That is the superb attitude, in any case is simply not make each sence at all proclaiming about that mather. Basically any strategy an abundance of thanks notwithstanding i had attempt to advance your own article into delicius all things considered it is clearly an issue utilizing your data locales would you be able to please recheck the thought. much appreciated yet again.

Kilts for men

Anonymous said...

I got what you mean , a debt of gratitude is in order for posting .Woh I am cheerful to discover this site through google.

Kilts for Men

kiltsshop said...

I am happy you take pride in what you compose. This makes you stand way out from numerous different authors that push ineffectively composed substance.

Kilts for Sale

awa said...

i was simply perusing along and happened upon your online journal. simply needed to say great website and this article truly helped me.

Kilts for Men

bestworksocksforsweatyfeet said...
This comment has been removed by the author.
bestworksocksforsweatyfeet said...

I got what you mean , a debt of gratitude is in order for posting .Woh I am cheerful to discover this site through google.

Top 5 Best Selling Hybrid

bestworksocksforsweatyfeet said...

This online journal site is really cool! How was it made !

utility kilts

kiltsshop said...

I got what you mean , a debt of gratitude is in order for posting .Woh I am cheerful to discover this site through google.

Utility Kilts

kiltsshop said...

I got what you mean , a debt of gratitude is in order for posting .Woh I am cheerful to discover this site through google.

KILTS FOR MEN

Security Solution Provider said...

I got what you mean , a debt of gratitude is in order for posting .Woh I am cheerful to discover this site through google.

SMART AUTOMATION SOLUTIONS

Best Shoes For The Operating Room said...

Best leather Long bifold walletI got what you mean, a debt of gratitude is in order for posting.Woh I am cheerful to discover this site through google.

Best Shoes For The Operating Room said...

Best leather Long bifold walletI got what you mean, a debt of gratitude is in order for posting.Woh I am cheerful to discover this site through google.

Best Shoes For The Operating Room said...

Best Long Bifold Leather Wallet For MensI got what you mean, a debt of gratitude is in order for posting. Woh I am cheerful to discover this site through google.

awa said...

I got what you mean , a debt of gratitude is in order for posting .Woh I am cheerful to discover this site through google.

Graphic Designing in Lahore

awa said...

I was more than happy to uncover this great site. I need to to thank you for your time due to this fantastic read!! I definitely enjoyed every bit of it and I have you bookmarked to see new information on your blog.
Web hosting in Lahore

Digital trend said...


Professionelles Übersetzungsbüro ✓ Übersetzungen ✓ Dolmetschen ✓ mehr als 35 Jahre Erfahrung ✓ alle Sprachen ✓ Qualitätsstandard ISO 17100 ✓ Rechtssichere Übersetzung ✓ Juristische Fachübersetzung ✓ Übersetzungsbüro ✓ Übersetzungsdienst ✓Übersetzungsagentur ✓Übersetzungsservice ✓ Übersetzungen ✓ beglaubigte ✓ Übersetzung, Übersetzen ✓individuelle Beratung.✓✓ Alle Sprachen. Alle Fachrichtungen,✓ 35 Jahre Erfahrung ✓ Express Übersetzungsbüro ✓ juristische und technische Übersetzung ✓ Profi Fachübersetzungen ✓ Deutsch Englisch
Übersetzer Englisch Deutsch


Ideoversity said...

short courses in lahore

Lisa Martin said...
This comment has been removed by the author.
Lisa Martin said...

I was more than happy to uncover this great site. I need to to thank you for your time due to this fantastic read!! I definitely enjoyed every bit of it and I have you bookmarked to see new information on your blog.Best Women Parka Jackets

Lisa Martin said...

Good article. I definitely appreciate this website. Continue the good work!
WHAT TO LOOK FOR IN THE BEST HAIR STRAIGHTENERS?

Top 10 Fashion Reviews said...

I was more than happy to uncover this great site. I need to to thank you for your time due to this fantastic read!! I definitely enjoyed every bit of it and I have you bookmarked to see new information on your blog.
Best Plus Size Fashion Tops 2021

Lisa Martin said...

This excellent website truly has all of the info I wanted concerning this subject and didn’t know who to ask.
Choose The Best Women's Parka Jackets

SYNDESMOLOGIA KSILOU said...

ΣΥΣΤΗΜΑΤΑ ΣΥΝΔΕΣΜΟΛΟΓΙΑΣ ΞΥΛΟΥ

Η Nova Tecnica δραστηριοποιείται 20 και πλέον χρόνια στο χώρο των συστημάτων συνδεσμολογίας ξύλου με τα συστήματα σύνδεσης της ΚΝΑΡΡ ® προσφέροντας πρωτοποριακές λύσεις για τις δικές σας δημιουργικές εμπνεύσεις. Η παλέτα των προϊόντων μας περιλαμβάνει μη ορατά, αποσυναρμολογούμενα καθώς και αυτοτανυόμενα εξαρτήματα σύνδεσης για ευρύτατο φάσμα εφαρμογών, από τη επιπλοποιία και την κατασκευή υαλοστασίων και προσόψεων έως και την ξύλινη δόμηση.

sharp said...
This comment has been removed by the author.
sharp said...

I certainly love this website. Thanks!
Buisness Hosting

digital marketing said...

digital marketing agency london
Before indulging into any project, we always investigate the business as well as its competitors to get a better idea of where it stands and how it will grow better. We believe that the success of every business lies in knowing about its market competition in depth. It’s our task to do research work and pick out your challengers. This is to form a firm base for your business’s long term growth and prosperity.

mani g said...

I got what you mean , a debt of gratitude is in order for posting .Woh I am cheerful to discover this site through google.

freetress folami

Serrurier Chatenay Malabry said...

Le serrurier Châtenay-Malabry dispose d’un service d’urgence de 7 jours / 7 et assure des interventions rapides pour tout dépannage, tôt le matin et tard le soir. Nos équipes de professionnels de l’urgence sont toujours prêts à se rendre sur place pour débloquer la serrure de votre porte ou extraire la clé cassée de votre serrure. Lorsque vos clés sont coincées dans la serrure ou que vous ne trouvez pas la clé de votre maison, serrurier 92290 se charge de vous faire entrer rapidement chez vous. Pour les maisons, la plupart des serrures sont les plus fréquentes et nous pouvons facilement, en quelques minutes seulement, vous les remplacer si celles-ci sont endommagées suite à un cambriolage
Serrurier Meudon

Admin said...

Thanks for uploading this article. Techno mobile is best mobile with best specifications. Now you can get new mobiles update with Redmi note 9 pro price in Bangladesh

taxcredits said...

strategy
We are business advisers. We want people looking for tax credits to view our site. Plus business advisory Services.

Best Shoes For The Operating Room said...

Very good post. I am going through some of these issues as well.. Also Check this: Best Camping Mattress for Couples

Best 8-Person Tent said...

Great info. Lucky me I discovered your blog by chance (stumbleupon). I've book-marked it for later! Also Check This: Which Benefits are of Hammock Camping?


derecho concursal y derecho financiero said...

anular tarjeta de crédito
Puede que haya empezado a escuchar el término ‘’ tarjeta revolving ‘’ y no es de extrañar pues desde hace un tiempo ha sido objeto de numerosas reclamaciones por parte de los consumidores.

redneckgamer07 said...

I got what you mean , a debt of gratitude is in order for posting .Woh I am cheerful to discover this site through google.

pipe spool

X16Thori II said...

i was simply perusing along and happened upon your online journal. simply needed to say great website and this article truly helped me.
pipe spool

redneckgamer07 said...

I got what you mean , a debt of gratitude is in order for posting .Woh I am cheerful to discover this site through google.

home staging ottawa