cross domain dns resolution

Article
2015-09-23

Question

_{Wednesday, September 23, 2015 3:07 PM}

I am using tuscrad.com (win 2012) and tuscaloosa.com (win 2008) as separate domains. Trying to do cross domain lookups but using conditional forwarders. Not working. Also tried making secondary dns and setup both sides to replicate with no luck either.

dave

All replies (4)

_{Thursday, September 24, 2015 7:42 AM ✅Answered}

Hi xloveusa,

If we want to configure conditional forwarder on the DNS server hosts domain Tuscaloosa.com, we may do the following steps:

Right click conditional forwarders. Enter the domain name tuscrad.com, then enter the IP address of the DNS server hosts domain tuscrad.com.
After configure conditional forwarder, we may use command nslookup on the DNS server to resolve the FQDN in that domain, verify if the DNS server could forward the query to DNS server in that domain. If not, we may use command ping to ping the remote DNS server, verify if the network connection is fine.

If configure a secondary zone for domain tuscrad.com on DNS server hosts domain Tuscaloosa.com. We may do:

right click forward lookup zones > new zone, select the type “secondary zone”, zone name “tuscrad.com”, IP address enter the DNS server’s address hosts domain tuscrad.com.
After creating the secondary zone, right click the zone > transfer from master.
If we can transfer from the remote DNS server, we may check if configuration in the remote DNS server, verify if we have enable zone transfers on the remote DNS server. On the remote DNS server, right click zone tuscrad.com> properties> zone transfers> allow zone transfers.
If we have enable transfer but still can’t transfer, we may use command ping to test if the two server could communicate with each other.

If your problem is related with the above things, you may refer to the steps above to troubleshoot. If not, please feel free to tell us which specific process couldn’t work in you lab.

Best regards,

Anne he

Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected].

_{Wednesday, September 23, 2015 3:30 PM}

This forum is for Exchange development questions. Please post configuration questions in the Exchange admin forum on TechNet. I'll move this for you.

_{Wednesday, September 23, 2015 3:38 PM}

Hi,

Ideally, a shared root DNS server should be used but conditional forwarders can be used also. More information here: https://technet.microsoft.com/en-gb/library/cc756852(v=ws.10).aspx

Please do the below:

1) Check that port 53 is not blocked between the domain controllers. Test this by doing an nslookup from each domain controller in one domain while specifying the server to be each domain controller in the other domain. Repeat the other way around. More information: https://technet.microsoft.com/en-us/library/dd197515(v=ws.10).aspx.

2) Create DNS conditional forwarders for tuscaloosa.com on your tuscrad.com domain controllers. Specify the servers on the conditional forwarder to be the tuscaloosa.com DNS servers. Ensure that the conditional forwarder is stored in AD and replicated to all domain controllers in the domain or the forest. More information here: https://technet.microsoft.com/en-us/library/cc794735(v=ws.10).aspx.

3) Create DNS conditional forwarders for tuscrad.com on your tuscaloosa.com domain controllers. Specify the servers on the conditional forwarder to be the tuscaloosa.com DNS servers. Ensure that the conditional forwarder is stored in AD and replicated to all domain controllers in the domain or the forest. More information here: https://technet.microsoft.com/en-us/library/cc794735(v=ws.10).aspx.

4) Create DNS suffix search list GPOs. See here: https://technet.microsoft.com/en-us/library/bb847901(v=exchg.150).aspx.

5) Ensure that recursion is not disabled on these DNS servers.

Let me know if this answers your question.

Thanks.

Mark Gossa

MCSE 2003, MCITP Enterprise Administrator 2008 R2, MCSA 2012 R2, MCTS Exchange 2010

Blog: http://markgossa.blogspot.com

Posts are provided “AS IS” without warranty of any kind, either expressed or implied.

_{Wednesday, September 30, 2015 1:15 AM}