Proper DNS configuration help

Proper DNS configuration help

I have been looking at the dns setup of a network I inherited and it looks 
wrong to me. Before I change anything I want to verify I am on the right 
track.

All of my clients are configured for
primary dns=192.168.1.17=victory1
secondary dns=192.168.1.16=victory2

Because of this setup I always considered that victory1 was the first DC 
configured and victory2 came next but now I am not sure. If the AD roles are 
important let me know and I will verify them.

The primary server is hardly ever down but I have noticed when it is dns 
name resolution slows down because web pages take longer to load. This got 
me investigating the configs and this is what I found.

victory1
forwarders=opendns servers=208.67.222.222/208.67.220.220
forward lookup zone=victory.org(AD integrated, primary, zone transfers not 
allowed)

victory2
forwarders=192.168.1.17
forward lookup zone=victory.org(AD integrated, primary, zone transfers 
allowed to any server)

This would explain when victory1 is down dns takes longer because victory2 
has to go to root hints for dns. I propose to change to this config.

victory1
forwarders=opendns servers=208.67.222.222/208.67.220.220
forward lookup zone=victory.org(AD integrated, primary, zone transfers 
allowed to any server)

victory2
forwarders=opendns servers=208.67.222.222/208.67.220.220
forward lookup zone=victory.org(AD integrated, primary, zone transfers 
allowed to any server)

If I am missing something or you need more info to sort this out just let me 
know. Any help is appreciated.

date: Fri, 1 Aug 2008 11:26:14 -0400 author: Mike G

Re: Proper DNS configuration help

Hello Mike,

I would do exactly the same, remove the 192.x.x.x from the forwarders and 
add the other ones.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers 
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> I have been looking at the dns setup of a network I inherited and it
> looks wrong to me. Before I change anything I want to verify I am on
> the right track.
> 
> All of my clients are configured for
> primary dns=192.168.1.17=victory1
> secondary dns=192.168.1.16=victory2
> Because of this setup I always considered that victory1 was the first
> DC configured and victory2 came next but now I am not sure. If the AD
> roles are important let me know and I will verify them.
> 
> The primary server is hardly ever down but I have noticed when it is
> dns name resolution slows down because web pages take longer to load.
> This got me investigating the configs and this is what I found.
> 
> victory1
> forwarders=opendns servers=208.67.222.222/208.67.220.220
> forward lookup zone=victory.org(AD integrated, primary, zone transfers
> not
> allowed)
> victory2
> forwarders=192.168.1.17
> forward lookup zone=victory.org(AD integrated, primary, zone transfers
> allowed to any server)
> This would explain when victory1 is down dns takes longer because
> victory2 has to go to root hints for dns. I propose to change to this
> config.
> 
> victory1
> forwarders=opendns servers=208.67.222.222/208.67.220.220
> forward lookup zone=victory.org(AD integrated, primary, zone transfers
> allowed to any server)
> victory2
> forwarders=opendns servers=208.67.222.222/208.67.220.220
> forward lookup zone=victory.org(AD integrated, primary, zone transfers
> allowed to any server)
> If I am missing something or you need more info to sort this out just
> let me know. Any help is appreciated.
>

date: Fri, 1 Aug 2008 18:42:10 +0000 (UTC) author: Meinolf Weber meiweb(nospam)@gmx.de

Re: Proper DNS configuration help

Thanks for the reply. Is the zone transfers setting even relevant in an AD 
integrated zone? I think not.

"Meinolf Weber" <meiweb(nospam)@gmx.de> wrote in message 
news:ff16fb66a54d68cac22e3451ac81@msnews.microsoft.com...
> Hello Mike,
>
> I would do exactly the same, remove the 192.x.x.x from the forwarders and 
> add the other ones.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and 
> confers no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>> I have been looking at the dns setup of a network I inherited and it
>> looks wrong to me. Before I change anything I want to verify I am on
>> the right track.
>>
>> All of my clients are configured for
>> primary dns=192.168.1.17=victory1
>> secondary dns=192.168.1.16=victory2
>> Because of this setup I always considered that victory1 was the first
>> DC configured and victory2 came next but now I am not sure. If the AD
>> roles are important let me know and I will verify them.
>>
>> The primary server is hardly ever down but I have noticed when it is
>> dns name resolution slows down because web pages take longer to load.
>> This got me investigating the configs and this is what I found.
>>
>> victory1
>> forwarders=opendns servers=208.67.222.222/208.67.220.220
>> forward lookup zone=victory.org(AD integrated, primary, zone transfers
>> not
>> allowed)
>> victory2
>> forwarders=192.168.1.17
>> forward lookup zone=victory.org(AD integrated, primary, zone transfers
>> allowed to any server)
>> This would explain when victory1 is down dns takes longer because
>> victory2 has to go to root hints for dns. I propose to change to this
>> config.
>>
>> victory1
>> forwarders=opendns servers=208.67.222.222/208.67.220.220
>> forward lookup zone=victory.org(AD integrated, primary, zone transfers
>> allowed to any server)
>> victory2
>> forwarders=opendns servers=208.67.222.222/208.67.220.220
>> forward lookup zone=victory.org(AD integrated, primary, zone transfers
>> allowed to any server)
>> If I am missing something or you need more info to sort this out just
>> let me know. Any help is appreciated.
>>
>
>

date: Fri, 1 Aug 2008 15:00:15 -0400 author: Mike G

Re: Proper DNS configuration help

I just noticed this error in the system log on victory2 which occurs with 
every system boot. There is no error of this type on victory1. What action 
should be taken?

Event Type: Warning
Event Source: NETLOGON
Event Category: None
Event ID: 5773
Date:  08/04/2008
Time:  7:50:26 AM
User:  N/A
Computer: VICTORY2
Description:
The DNS server for this DC does not support dynamic DNS. Add the DNS records 
from the file '%SystemRoot%\System32\Config\netlogon.dns' to the DNS server 
serving the domain referenced in that file.

For more information, see Help and Support Center at 
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 2c 23 00 00               ,#..

"Meinolf Weber" <meiweb(nospam)@gmx.de> wrote in message 
news:ff16fb66a54d68cac22e3451ac81@msnews.microsoft.com...
> Hello Mike,
>
> I would do exactly the same, remove the 192.x.x.x from the forwarders and 
> add the other ones.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and 
> confers no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>> I have been looking at the dns setup of a network I inherited and it
>> looks wrong to me. Before I change anything I want to verify I am on
>> the right track.
>>
>> All of my clients are configured for
>> primary dns=192.168.1.17=victory1
>> secondary dns=192.168.1.16=victory2
>> Because of this setup I always considered that victory1 was the first
>> DC configured and victory2 came next but now I am not sure. If the AD
>> roles are important let me know and I will verify them.
>>
>> The primary server is hardly ever down but I have noticed when it is
>> dns name resolution slows down because web pages take longer to load.
>> This got me investigating the configs and this is what I found.
>>
>> victory1
>> forwarders=opendns servers=208.67.222.222/208.67.220.220
>> forward lookup zone=victory.org(AD integrated, primary, zone transfers
>> not
>> allowed)
>> victory2
>> forwarders=192.168.1.17
>> forward lookup zone=victory.org(AD integrated, primary, zone transfers
>> allowed to any server)
>> This would explain when victory1 is down dns takes longer because
>> victory2 has to go to root hints for dns. I propose to change to this
>> config.
>>
>> victory1
>> forwarders=opendns servers=208.67.222.222/208.67.220.220
>> forward lookup zone=victory.org(AD integrated, primary, zone transfers
>> allowed to any server)
>> victory2
>> forwarders=opendns servers=208.67.222.222/208.67.220.220
>> forward lookup zone=victory.org(AD integrated, primary, zone transfers
>> allowed to any server)
>> If I am missing something or you need more info to sort this out just
>> let me know. Any help is appreciated.
>>
>
>

date: Mon, 4 Aug 2008 11:41:42 -0400 author: Mike G