Secondary DNS setup local/public

[Adam Marx]

Happy Thanksgiving!

I've decided to go with a local DNS and a public DNS in my network and have a few questions. Currently I am running my public DNS and local DNS together on 1 server and it has been pointed out that is not the correct way to operate. So I want to change and do things the correct way.

From a clean install on the second server:

Do I join my new DNS server to the domain? or is it a stand alone?
What is it's designation in the scheme of "trees" and "forests"?
Will this new DNS server be a domain controller?
Will this new DNS server use AD?
How do I verify that the new DNS server is a secondary?
How do I make sure the new DNS talks to the primary DNS server and updates it's records? or does it need to since it's local?

[Ace Fekay [MVP]]

In news:E622BC89-9FD3-4989...@microsoft.com,
Adam Marx <anon...@discussions.microsoft.com> posted their thoughts, then
I offered mine

> Happy Thanksgiving!
>
> I've decided to go with a local DNS and a public DNS in my network
> and have a few questions. Currently I am running my public DNS and
> local DNS together on 1 server and it has been pointed out that is
> not the correct way to operate. So I want to change and do things the
> correct way.
>
> From a clean install on the second server:
>
> Do I join my new DNS server to the domain? or is it a stand alone?

Stand alone is fine. No need to be anything else, after all it's being
exposed to the Internet and you want to minimize it's profile.

> What is it's designation in the scheme of "trees" and "forests"?

That's an AD term. SInce this will be a stand alone, this would not apply.

> Will this new DNS server be a domain controller?

No.

> Will this new DNS server use AD?

Same question as the previous one. No.

> How do I verify that the new DNS server is a secondary?

Terminology is incorrect. No such thing as a "Secondary DNS Server".
However, any server can host a "Secondary Zone", which is just a read copy
of a Primary zone hosted on anohter machine.

That being said, if you're using this just to host public records, why would
it host a Secondary zone? Seconary of what?

> How do I make sure the new DNS talks to the primary DNS server and
> updates it's records?

No need to if just using it to host public records.

> or does it need to since it's local?

No. Your internal machines will ONLY point to the "private" DNS for AD and
such. I believe I or someone else already explained that to you in a
previous post. No need to use this "external" server, since it's main
purpose is only for queries coming from Internet users.

--
Regards,
Ace

Please direct all replies to the newsgroup so all can benefit.
This posting is provided "AS IS" with no warranties.

Ace Fekay, MCSE 2000, MCSE+I, MCSA, MCT, MVP
Microsoft Windows MVP - Active Directory
--
=================================