Share via

need to configure second DNS server in domain but not a domain controller

Question

Saturday, October 3, 2015 3:28 PM

Hi All,

I have my domain controller as a primary DNS server with only one primary zone as Corpads.local . I want to add another DNS server (not a domain controller ) which can  also act as primary dns server for zone Corpads.local

when I add zone Corpads.local as a primary zone in second DNS server.  And I create an A record in zone Corpads.local from second server. By default I am not able to replicate same entry into my DNS server which is domain controller.

kindly help

All replies (5)

Saturday, October 3, 2015 5:38 PM ✅Answered | 1 vote

For you case:
It appears that you are running the same zone on two DNS servers as "Primary".  In this configuration, each zone is independant of each other.  You have the following options:

Option 1
If you want a primary/secondary configuration then delete the zone file from the second dns server.  Then on that second server create a new zone, but choose Secondary.  When prompted for the name/IP of the server that you want to copy the file from, provide the information for the first "Primary" DNS server.  However, before you complete this step, you will need to look at the properties of the zone on the first "Primary" DNS server, go to the "Zone Transfers" tab and make sure that the zone is set up to allow transfers to occur.  You should just put in the IP address of the secondary server on that list so it is allowed to receive the zone file.  Back to the secondary... once you complete the wizard, the secondary DNS server will copy the zone over from the primary and will be regulated by the properties of the SOA record. 

Option 2 (Both servers must be running AD)
If you prefer to take advantage of AD replication and increased security, then delete the zone from the second DNS server as described in the option 1.  On the first server, change the zone type from Primary to "Active Directory Ingetrated".  That's it!  After replication occurs, you will see the zone file appear on the second DC/DNS server without any additional configuration.  Replication of the zone will occur as per your configured AD replciation (you can configure AD replciation by using the AD Sites and Services MMC Console).

If you find this helpful, kindly mark as answer. If you have any queries, please post back as a reply. Will look forward to your feedback. Thanking You Soumyajyoti Biswas

Sunday, October 4, 2015 6:13 AM

I think for second option, my second server should be a domain controller.

but I don't have my second server as domain controller .

Sunday, October 4, 2015 8:05 AM

Hello,

You can configure DNS on a member server. It is not necessary for that server to be running AD DS role.

You can then create the zone on the DNS server to be Active Directory integrated. :)

If you find this helpful, kindly mark as answer. If you have any queries, please post back as a reply. Will look forward to your feedback. Thanking You Soumyajyoti Biswas

Sunday, October 4, 2015 1:41 PM

Hi Soumyajyoti,

Could you guide me how to integrate zone on second server with AD.

Sunday, October 4, 2015 3:03 PM | 2 votes

  

Below I have detailed a step by step creation of a secondary DNS zone on a member server.
Considerations:

  1. Your IP addresses are properly configured on the member server.
    a. Ping to the AD DS server hosting the DNS role
    b. Add the AD DS server ip address hosting the primary DNS role as one of the DNS IP addresses of the secondary member server.
  2. Your secondary member server is already joined to the domain.
    a. If not do it.
  3. My lab setup
    a. AD DS server hosting the primary DNS zone – HLABDCLS001
    b. Member server on which I am creating the secondary zone – HLABDNS2
  4. Add the DNS role on the member server (HLABDNS2)
    a. Go to server manager
    b. Roles
    c. Add roles
    d. Select DNS Server  Next  Confirm & Install
  5. Adding secondary zone on HLABDNS2
    a. Expand the DNS Server Role
    b. Expand DNS
    c. Expand HLABDNS2


d. Right Click on the DNS server and Select New Zone

e. Click Next
f. Select Secondary Zone
g. Select forward lookup zone
h. Enter the zone name (this is the zone name of your primary zone)
In my case it is my lab domain  homelab.in

i. Enter the IP address of your primary DNS server

j. Click next Finish
k. Now expand the forward lookup zone and select the secondary zone you created
l. See it is red marked

m. You have to go to your primary DNS server & add this member server to the name server list of your primary zones SOA &  also mention the servers in zone transfer

n. If the red mark does not go away, you can restart the dns services on the secondary and then check.

If you find this helpful, kindly mark as answer. If you have any queries, please post back as a reply. Will look forward to your feedback. Thanking You Soumyajyoti Biswas