Que MCSE Managing And Maintaining A Windows Server 2003 Environment Exam Cram 2 Exam 70292 Nov 2003 ISBN 0789730111

Chapter6.ManagingNameResolution
Termsyouneedtounderstand:
DNS
Forwardlookupzones
Reverselookupzones
Conditionalforwarding
Securedynamicupdates
AD-integratedzone
Stubzone
Roundrobin
Techniquesyouneedtomaster:
InstallingDNS
Creatingforwardlookupzones
Creatingreverselookupzones
ConfiguringDNSconditionalforwarding
ConfiguringDNSzones


CreatingDNSstubzones
ManagingaDNSserver
WindowsServer2003makesamajorleapforwardusing
DomainNameSystem(DNS)fornameresolution!Windows
2000andWindows2003domaincontroller(DC)serversuse
DNStodynamicallyregistertheirinformationinActiveDirectory
(AD).ActiveDirectorydoesn'tworkwithoutDNS.Network
clientsincludingWindows2000Server,Windows2000
Professionalclients,WindowsXPProfessionalclients,andother
machinesrunningWindowsServer2003thatarepartofthe
domainqueryWindows2003AD-integratedserverstofindAD
information.
WindowsNTServerpreviouslyreliedontheWindowsInternet

NameService(WINS)toresolvecomputerorNetBIOSnames
intoIPaddresses.DNSresolvesInternetdomainnamesintoIP
addresses.TheInternetusesDNSserversexclusivelyforname
resolution.
WindowsServer2003,likeWindows2000Server,supportsfour
typesofDNSservers:primary,secondary,AD-integrated,and
caching-only.OneprimaryDNSserverisdesignatedforeach
zoneandisauthoritativeforthatzone.Creatingyourfirstzone
installsaprimaryDNSserver.TheprimaryserverhoststheDNS
resourcerecorddatabaseandisthecontactforallsecondary
DNSserversinthesubnetonyournetwork.SecondaryDNS
serverscontainaread-onlycopyoftheprimaryserver's
database.TheRefreshintervalsetstheintervalatwhichthe
secondaryserversquerytheprimaryserver.Iftheprimary
serverhasahigherserialnumber,thesecondaryserverswill
pullacopyofthechangestothedatabasebasedonthe"up-todatedness"vectors.Youcansettheprimarytosendchanges
immediatelybyusingtheNotifyfeatureontheZoneTransfers
tab.


YoushouldalwaysinstallasecondaryDNSserverfor
load-balancing.Iftheprimaryserverfails,it'sonlya
matteroftime(defaultto1day)beforethesecondarywill
failaswell.Ontheotherhand,ActiveDirectoryintegrated
zonesdoprovideforfaulttolerancebecauseallADzones
areprimary.Theonlywaytoaddmoreprimaryserversis
toconvertthemintoActiveDirectoryintegratedservers.

Caching-onlyDNSserversdonothostzonesandarenot
authoritativeforthedomain.Theybuildandmaintainalistof

domainnamesandIPaddresseslearnedfromDNSforwarders.
ThesearesetontheserverPropertiestabsandcanbemade
conditionalforwardersinWindowsServer2003.Caching-only
DNSserversarewellsuitedforbranchorremoteoffice
locationswherecreatinganewdomainorsubnetisn'tfeasible.
ActiveDirectoryintegratedDNSserversareprimaryserversina
sense.EachADdomainDNSserverusesADreplicationand
maintainsadatabasethatispartofActiveDirectory'sdatabase
information.
ToincreasefaulttoleranceonyourADdomain,installa
secondAD-integratedserver.IfoneAD-integratedDNS
serverfails,theremainingAD-integratedDNSserver
takesover.

ThischaptershowsyouhowtoinstallDNSbyusingtheManage
YourServertool.YoualsolearnhowtoconfigureDNSserver
optionsandDNSforwarding,aswellascreateandconfigure
forwardandreverselookupzones.Configuringzoneoptions,


zonesforsecuredynamicupdate,andActive
Directoryintegratedzonesarediscussed.
TwonewDNSfeaturesaddedtoWindowsServer2003,
conditionalforwardingandstubzones,areanalyzedindetail.
Finally,managingaDNSserver,includingzonesettings,record
settings,andserveroptionsareexaminedinthischapter.