AD AND DNS Problem

[Sl2002]

Dear all

I have a windows NT4 domain, which is running windows 2000 server as a member server providing primary dns to the domain. There is also an ISA server in place as a member.

I have instelled a windows 2000 AD domain, with AD integrated DNS. After switching off the old dns server, the new AD integrated DNS server is failing to forward external requests for resolution, even after having the forwarders in place.

Any help would be greatly appreciated. Thanks in advance

 

[doomhamur]

Do you still have the NT domain running or did you replace the nt domain with AD and remove the NT domain? Doomhamur
Network Engineer
"Certifications? we dont need no stinking certifiaction."
yahoo IM handle: greater_vortex

 

[Sl2002]

Hi

The NT domain is still running with a trust (2 way) to the Windows 2000 domain

 

[doomhamur]

There is your problem. the NT domain needs to have its own local DNS for stability. You can make it work with just 1 dns server, but it has been my experience that the NT domain needs its own dns server and the AD domain has its own.

Aslo make sure you have a 2 way trasitive trust. Doomhamur
Network Engineer
"Certifications? we dont need no stinking certifiaction."
yahoo IM handle: greater_vortex

 

[Sl2002]

Both domains have their own dns server running, however users in the 2000 domain pointing to the 2000 AD DNS Server are failing to resolve internet names. However, if they are pointed to the old DNS server in the NT4 domain, the can resolve?

suhail

 

[doomhamur]

the DNS servers should have your ISP's DNS servers set as forewarders in the DNS server properties.

In DNS Manager, right-click the DNS Server object, and then click Properties.
Click the Forwarders tab.
Click to select the Enable Forwarders check box.
In the IP address box, type the first DNS server to which you want to forward, and then click Add.
(When forwarding to a DNS such as your ISP make sure you add both the primary and backup DNS servers)

also make sure your PC's only point to the DNS on your DC. Doomhamur
Network Engineer
"Certifications? we dont need no stinking certifiaction."
yahoo IM handle: greater_vortex

 

[caddnima]

Question...

In your DNS configuration where you have your forwarders shown... Do you still have those "." (point or period) as a forwarders?

 

[Sl2002]

Guys

I have entered the forwarders in, I have also deleted the *.* root server dns folder.

It makes no difference, still not resloving dns names