RE: [ActiveDir] DNS Replication
Hello, 2 questions for you... 1) do you have forwarding set up on your child domain to forward to your parent? 2) do you have a delegated zone on your parent to point to your child? given that it is a contiguous namespace? -john --- Roger Seielstad [EMAIL PROTECTED] wrote: Sounds like your DNS topology is incorrect. How is DNS configured as a whole, and what are the specific settings for each DC? I'm guessing you've managed to orphan at least on DC. Roger -- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc. -Original Message- From: Wright, T. MR NSSB [mailto:[EMAIL PROTECTED] Sent: Friday, June 20, 2003 11:19 AM To: '[EMAIL PROTECTED]' Subject: RE: [ActiveDir] DNS Replication I am setting up a new AD domain and I am seeing a slew of errors which I believe are DNS related, reading this thread has confused me somewhat... Here's my situation.. Empty forest root domain with 4 DC's with the Roles spread across them, all running AD integrated DNS. I then have a child domain with another 5 DC's which are also all running AD Integrated DNS. In the DNS settings I have set all servers to do Zone transfers only with servers listed on the name servers tab, and on the name servers tab I have listed all 9 DC's no matter if they were in the parent or child domain. Am I taking the wrong approach? The error that I keep getting is this: Event ID: 1265 Source: NTDS KCC Type: Warning Category: Knowledge Consistency The attempt to establish a replication link with parameters Partition: DC=yourinfo,DC=yourinfo,DC=yourinfo,DC=com Source DSA DN: CN=NTDS Settings,CN=NT5-PCI-20,CN=Servers,CN=GSCIntranet,CN=Sites,CN=Configuration,D C=child,DC=yourdomain,DC=com Source DSA Address: YourDomainController. YourDomain.com Inter-site Transport (if any): failed with the following status: The DSA operation is unable to proceed because of a DNS lookup failure. The record data is the status code. This operation will be retried. I have read MS KB article 319202 and tried what they suggested to no avail. When I run DCdiag I also get the same errors when it gets to the kccevent check. The errors appear on most but not all of the DC's. They are physically located in 4 different buildings on the same campus, and I seem to have no problem pinging one another. Thanks, -Tim _ From: Roger Seielstad [mailto:[EMAIL PROTECTED] Sent: Thursday, June 19, 2003 4:22 PM To: '[EMAIL PROTECTED]' It is correct that they will not replicate as part of AD replication, but there is no reason you can't do normal DNS zone transfers to accomplish a similar end point. Roger -- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc. -Original Message- From: Victor Hugo Naranjo [mailto:[EMAIL PROTECTED] Sent: Thursday, June 19, 2003 1:31 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] DNS Replication Hi, DNS Zones configured as AD Integrated could not replicate between Parent and Child Domain, is it correct? Sincerely, Víctor Naranjo MCSE, MCSA __ Do you Yahoo!? SBC Yahoo! DSL - Now only $29.95 per month! http://sbc.yahoo.com List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] DNS Replication
Title: Message I am setting up a new AD domain and I am seeing aslew of errors which I believe are DNS related, reading this thread has confused me somewhat... Here's my situation.. Empty forest root domain with 4 DC's with the Roles spread across them, all running AD integrated DNS. I then have a child domain with another 5 DC's which are also all running AD Integrated DNS. In the DNS settings I have set all servers to do Zone transfers only with servers listed on the name servers tab, and on the name servers tab I have listed all 9 DC's no matter if they were in the parent or child domain. Am I taking the wrong approach? The error that I keep getting is this: Event ID: 1265Source: NTDS KCCType: WarningCategory: Knowledge ConsistencyThe attempt to establish a replication link with parametersPartition: DC=yourinfo,DC=yourinfo,DC=yourinfo,DC=com Source DSA DN: CN=NTDS Settings,CN=NT5-PCI-20,CN=Servers,CN=GSCIntranet,CN=Sites,CN=Configuration,DC=child,DC=yourdomain,DC=comSource DSA Address: YourDomainController. YourDomain.comInter-site Transport (if any): failed with the following status:The DSA operation is unable to proceed because of a DNS lookup failure. The record data is the status code. This operation will be retried. I haveread MS KB article 319202 and tried what they suggested to no avail. When I run DCdiag I also get the same errors when it gets to the kccevent check. Theerrors appear on most but not all of the DC's. They are physically located in 4 different buildings on the same campus, and I seem to have no problem pinging one another. Thanks, -Tim From: Roger Seielstad [mailto:[EMAIL PROTECTED] Sent: Thursday, June 19, 2003 4:22 PMTo: '[EMAIL PROTECTED]' It is correct that they will not replicate as part of AD replication, but there is no reason you can't do normal DNS zone transfers to accomplish a similar end point. Roger -- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc. -Original Message-From: Victor Hugo Naranjo [mailto:[EMAIL PROTECTED] Sent: Thursday, June 19, 2003 1:31 PMTo: [EMAIL PROTECTED]Subject: [ActiveDir] DNS Replication Hi, DNS Zones configured as AD Integrated could not replicate between Parent and Child Domain, is it correct? Sincerely, Víctor Naranjo MCSE, MCSA
Re: [ActiveDir] DNS Replication
Title: Message have you tried? http://eventid.net/display.asp?eventid=1265source= - Original Message - From: Wright, T. MR NSSB To: '[EMAIL PROTECTED]' Sent: Friday, June 20, 2003 11:19 Subject: RE: [ActiveDir] DNS Replication I am setting up a new AD domain and I am seeing aslew of errors which I believe are DNS related, reading this thread has confused me somewhat... Here's my situation.. Empty forest root domain with 4 DC's with the Roles spread across them, all running AD integrated DNS. I then have a child domain with another 5 DC's which are also all running AD Integrated DNS. In the DNS settings I have set all servers to do Zone transfers only with servers listed on the name servers tab, and on the name servers tab I have listed all 9 DC's no matter if they were in the parent or child domain. Am I taking the wrong approach? The error that I keep getting is this: Event ID: 1265Source: NTDS KCCType: WarningCategory: Knowledge ConsistencyThe attempt to establish a replication link with parametersPartition: DC=yourinfo,DC=yourinfo,DC=yourinfo,DC=com Source DSA DN: CN=NTDS Settings,CN=NT5-PCI-20,CN=Servers,CN=GSCIntranet,CN=Sites,CN=Configuration,DC=child,DC=yourdomain,DC=comSource DSA Address: YourDomainController. YourDomain.comInter-site Transport (if any): failed with the following status:The DSA operation is unable to proceed because of a DNS lookup failure. The record data is the status code. This operation will be retried. I haveread MS KB article 319202 and tried what they suggested to no avail. When I run DCdiag I also get the same errors when it gets to the kccevent check. Theerrors appear on most but not all of the DC's. They are physically located in 4 different buildings on the same campus, and I seem to have no problem pinging one another. Thanks, -Tim From: Roger Seielstad [mailto:[EMAIL PROTECTED] Sent: Thursday, June 19, 2003 4:22 PMTo: '[EMAIL PROTECTED]' It is correct that they will not replicate as part of AD replication, but there is no reason you can't do normal DNS zone transfers to accomplish a similar end point. Roger -- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc. -Original Message-From: Victor Hugo Naranjo [mailto:[EMAIL PROTECTED] Sent: Thursday, June 19, 2003 1:31 PMTo: [EMAIL PROTECTED]Subject: [ActiveDir] DNS Replication Hi, DNS Zones configured as AD Integrated could not replicate between Parent and Child Domain, is it correct? Sincerely, Víctor Naranjo MCSE, MCSA
RE: [ActiveDir] DNS Replication
Title: Message I looked at eventid previously and I have tried most of the stuff listed for the error that I have been seeing. I have actually narrowed it down a little further.. For some reason certain servers in the parent domain are unable to replicate with certain servers in the child domain... For example Server1, Server2, and Server3 are in the parent domain, when I go to Sites and Services and force replication they have no problem replicating with each other but they all have problems replicating with Server6 which is in the child domain. But they can replicate with server4 and server5 which are also in the child domain. I think I have narrowed it down to two servers that are having issues, I am going to try to manually build my replication objects and see where that gets me. Thanks, -Tim From: David N. Precht [mailto:[EMAIL PROTECTED] Sent: Friday, June 20, 2003 12:59 PMTo: [EMAIL PROTECTED] have you tried? http://eventid.net/display.asp?eventid=1265source= - Original Message - From: Wright, T. MR NSSB To: '[EMAIL PROTECTED]' Sent: Friday, June 20, 2003 11:19 Subject: RE: [ActiveDir] DNS Replication I am setting up a new AD domain and I am seeing aslew of errors which I believe are DNS related, reading this thread has confused me somewhat... Here's my situation.. Empty forest root domain with 4 DC's with the Roles spread across them, all running AD integrated DNS. I then have a child domain with another 5 DC's which are also all running AD Integrated DNS. In the DNS settings I have set all servers to do Zone transfers only with servers listed on the name servers tab, and on the name servers tab I have listed all 9 DC's no matter if they were in the parent or child domain. Am I taking the wrong approach? The error that I keep getting is this: Event ID: 1265Source: NTDS KCCType: WarningCategory: Knowledge ConsistencyThe attempt to establish a replication link with parametersPartition: DC=yourinfo,DC=yourinfo,DC=yourinfo,DC=com Source DSA DN: CN=NTDS Settings,CN=NT5-PCI-20,CN=Servers,CN=GSCIntranet,CN=Sites,CN=Configuration,DC=child,DC=yourdomain,DC=comSource DSA Address: YourDomainController. YourDomain.comInter-site Transport (if any): failed with the following status:The DSA operation is unable to proceed because of a DNS lookup failure. The record data is the status code. This operation will be retried. I haveread MS KB article 319202 and tried what they suggested to no avail. When I run DCdiag I also get the same errors when it gets to the kccevent check. Theerrors appear on most but not all of the DC's. They are physically located in 4 different buildings on the same campus, and I seem to have no problem pinging one another. Thanks, -Tim From: Roger Seielstad [mailto:[EMAIL PROTECTED] Sent: Thursday, June 19, 2003 4:22 PMTo: '[EMAIL PROTECTED]' It is correct that they will not replicate as part of AD replication, but there is no reason you can't do normal DNS zone transfers to accomplish a similar end point. Roger -- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc. -Original Message-From: Victor Hugo Naranjo [mailto:[EMAIL PROTECTED] Sent: Thursday, June 19, 2003 1:31 PMTo: [EMAIL PROTECTED]Subject: [ActiveDir] DNS Replication Hi, DNS Zones configured as AD Integrated could not replicate between Parent and Child Domain, is it correct? Sincerely, Víctor Naranjo MCSE, MCSA
RE: [ActiveDir] DNS Replication
In Windows 2000 the Integrated zones are in the domain naming context so this is correct. But in Windows server 2003 it is in an application partition and you can choose replication partners explicitly. From: Victor Hugo Naranjo [mailto:[EMAIL PROTECTED] Sent: Thursday, June 19, 2003 1:31 PM To: [EMAIL PROTECTED] Hi, DNS Zones configured as AD Integrated could not replicate between Parent and Child Domain, is it correct? Sincerely, Víctor Naranjo MCSE, MCSA
RE: [ActiveDir] DNS Replication
Title: Message You have these options with AD-integrated zones in Windows Server 2003: - To all DCs that are DNS serversin the forest (predefined app partition) - To all DCs that are DNS servers in a domain (predefined app partition) - To all DCs in a domain (only option with W2K) - To all DCs that are replica servers for a particular app partition. Robbie Allen http://www.rallenhome.com/ -Original Message-From: Sullivan, Kevin [mailto:[EMAIL PROTECTED] Sent: Thursday, June 19, 2003 2:40 PMTo: [EMAIL PROTECTED]Subject: RE: [ActiveDir] DNS Replication In Windows 2000 the Integrated zones are in the domain naming context so this is correct. But in Windows server 2003 it is in an application partition and you can choose replication partners explicitly. From: Victor Hugo Naranjo [mailto:[EMAIL PROTECTED] Sent: Thursday, June 19, 2003 1:31 PMTo: [EMAIL PROTECTED] Hi, DNS Zones configured as AD Integrated could not replicate between Parent and Child Domain, is it correct? Sincerely, Víctor Naranjo MCSE, MCSA
RE: [ActiveDir] DNS Replication
Title: Message It is correct that they will not replicate as part of AD replication, but there is no reason you can't do normal DNS zone transfers to accomplish a similar end point. Roger -- Roger D. Seielstad - MTS MCSE MS-MVP Sr. Systems Administrator Inovis Inc. -Original Message-From: Victor Hugo Naranjo [mailto:[EMAIL PROTECTED] Sent: Thursday, June 19, 2003 1:31 PMTo: [EMAIL PROTECTED]Subject: [ActiveDir] DNS Replication Hi, DNS Zones configured as AD Integrated could not replicate between Parent and Child Domain, is it correct? Sincerely, Vctor Naranjo MCSE, MCSA
Re: [ActiveDir] DNS replication
it's mixed in with your normal AD replication This can be set under AD sites and services - Internet-Site transports I think (double check). BR Robert Rutherford Storf Alexander [EMAIL PROTECTED]To: [EMAIL PROTECTED] m cc: Sent by: Subject: [ActiveDir] DNS replication [EMAIL PROTECTED] tivedir.org 26/03/2003 14:01 Please respond to ActiveDir Hi, We have a application which has very special needs on our DNS configuration: Entries in any DNS Server (all zones are AD integrated) should be replicated as fast as possible (DHCP leased addresses for our clients). Now they are replicated every 15 minutes, which is far too slow. 1 minute is acceptable for our application. Where can this replication interval be modified? Thanks in advance, Alex List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ This E-mail and any files transmitted with it are in commercial confidence and intended solely for the use of the individual or entity to whom they are addressed. If you have received this E-mail in error please notify the Administrator by E-mail ([EMAIL PROTECTED]). Any views or opinions expressed are solely those of the author and do not necessarily represent those of DEK International., or its affiliates. This footnote signifies that this message has been checked for viruses by MailswpUK1 List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
RE: [ActiveDir] DNS replication
I believe you're correct. However, the minimum interval is 15 minutes. Two possible solutions: -Stop using integrated zones -set all DNS servers to notify all other DNS servers (this is done on a per-zone basis) The second option might or might not work. Combining the two will work, however you lose AD integrated zones. -- Roger D. Seielstad - MCSE Sr. Systems Administrator Inovis Inc. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 26, 2003 9:10 AM To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: Re: [ActiveDir] DNS replication it's mixed in with your normal AD replication This can be set under AD sites and services - Internet-Site transports I think (double check). BR Robert Rutherford Storf Alexander [EMAIL PROTECTED]To: [EMAIL PROTECTED] m cc: Sent by: Subject: [ActiveDir] DNS replication [EMAIL PROTECTED] tivedir.org 26/03/2003 14:01 Please respond to ActiveDir Hi, We have a application which has very special needs on our DNS configuration: Entries in any DNS Server (all zones are AD integrated) should be replicated as fast as possible (DHCP leased addresses for our clients). Now they are replicated every 15 minutes, which is far too slow. 1 minute is acceptable for our application. Where can this replication interval be modified? Thanks in advance, Alex List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir% 40mail.activedir.org/ This E-mail and any files transmitted with it are in commercial confidence and intended solely for the use of the individual or entity to whom they are addressed. If you have received this E-mail in error please notify the Administrator by E-mail ([EMAIL PROTECTED]). Any views or opinions expressed are solely those of the author and do not necessarily represent those of DEK International., or its affiliates. This footnote signifies that this message has been checked for viruses by MailswpUK1 List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir% 40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ: http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
Re: [ActiveDir] DNS replication question
Are you running AD integrated zones or standard? If you are running standard you would setup a secondary zone in the child domain that pulls from the Primary in the root domain. If you go into the properties of the zone on each server you can set the zone transfer properties. Put in the names and that should take care of it. Cariglia, Daniel [EMAIL PROTECTED] Sent by: [EMAIL PROTECTED] 03/10/2003 12:08 PM Please respond to [EMAIL PROTECTED] To 'ActiveDir (E-mail) [EMAIL PROTECTED] cc Subject [ActiveDir] DNS replication question Hello, I have been lurking on this list for about 6 months now and have a question regarding DNS and replication. I have just got my AD up and running with one child domain. The problem is when a PC registers with DNS on the root it never replicates down to the child DNS. It picks up a DHCP address from a NON-AD server but the DNS entry on the PC is manually set for DNS on the root server. The registration shows up on the root DNS server. I have not been able to find a clear way to have DNS replicate from the root to child or vice versa from Microsoft. Any assistance would be greatly appreciated, as I am still a bit green with AD. Thank you in advance. Dan Cariglia
RE: [ActiveDir] DNS replication question
Title: Message The zone information will be replicated, but only to DCs within the same domain. There is no cross-domain automatic replication. You need to either use forwarders or set up secondaries for that. -- Roger D. Seielstad - MCSE Sr. Systems Administrator Inovis Inc. -Original Message-From: Cariglia, Daniel [mailto:[EMAIL PROTECTED] Sent: Monday, March 10, 2003 4:30 PMTo: '[EMAIL PROTECTED]'Subject: RE: [ActiveDir] DNS replication question We are running integrated zones. We have tried registering with both the child and the root Dns servers at different times, replicated and the result is the same (no record in the other Dns server). Am I correct in assuming this information should be replicated without setting up the zone transfer properties due to it being integrated? Thanks Dan -Original Message-From: John Hicks/MIS/HQ/KEMET/US [mailto:[EMAIL PROTECTED]Sent: Monday, March 10, 2003 2:17 PMTo: [EMAIL PROTECTED]Subject: Re: [ActiveDir] DNS replication question Are you running AD integrated zones or standard? If you are running standard you would setup a secondary zone in the child domain that pulls from the Primary in the root domain. If you go into the properties of the zone on each server you can set the zone transfer properties. Put in the names and that should take care of it. "Cariglia, Daniel" [EMAIL PROTECTED] Sent by: [EMAIL PROTECTED] 03/10/2003 12:08 PM Please respond to[EMAIL PROTECTED] To "'ActiveDir (E-mail)" [EMAIL PROTECTED] cc Subject [ActiveDir] DNS replication question Hello, I have been lurking on this list for about 6 months now and have a question regarding DNS and replication. I have just got my AD up and running with one child domain. The problem is when a PC registers with DNS on the root it never replicates down to the child DNS. It picks up a DHCP address from a NON-AD server but the DNS entry on the PC is manually set for DNS on the root server. The registration shows up on the root DNS server. I have not been able to find a clear way to have DNS replicate from the root to child or vice versa from Microsoft. Any assistance would be greatly appreciated. Thank you in advance. Dan Cariglia
RE: [ActiveDir] DNS replication question
Title: Message Daniel, Wrong assumption. DNS information, like all domain information, is not replicated to other domains. If you are using AD-Integrated DNS, the information will not replicate unless you set up Secondary zones in the other domain and then configure the transfer properties appropriately on each side of the transfer. Rick Kingslan MCSE, MCSA, MCTMicrosoft MVP - Active DirectoryAssociate ExpertExpert Zone - www.microsoft.com/windowsxp/expertzone From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Cariglia, DanielSent: Monday, March 10, 2003 3:30 PMTo: '[EMAIL PROTECTED]' We are running integrated zones. We have tried registering with both the child and the root Dns servers at different times, replicated and the result is the same (no record in the other Dns server). Am I correct in assuming this information should be replicated without setting up the zone transfer properties due to it being integrated? Thanks Dan -Original Message-From: John Hicks/MIS/HQ/KEMET/US [mailto:[EMAIL PROTECTED]Sent: Monday, March 10, 2003 2:17 PMTo: [EMAIL PROTECTED]Subject: Re: [ActiveDir] DNS replication question Are you running AD integrated zones or standard? If you are running standard you would setup a secondary zone in the child domain that pulls from the Primary in the root domain. If you go into the properties of the zone on each server you can set the zone transfer properties. Put in the names and that should take care of it. "Cariglia, Daniel" [EMAIL PROTECTED] Sent by: [EMAIL PROTECTED] 03/10/2003 12:08 PM Please respond to[EMAIL PROTECTED] To "'ActiveDir (E-mail)" [EMAIL PROTECTED] cc Subject [ActiveDir] DNS replication question Hello, I have been lurking on this list for about 6 months now and have a question regarding DNS and replication. I have just got my AD up and running with one child domain. The problem is when a PC registers with DNS on the root it never replicates down to the child DNS. It picks up a DHCP address from a NON-AD server but the DNS entry on the PC is manually set for DNS on the root server. The registration shows up on the root DNS server. I have not been able to find a clear way to have DNS replicate from the root to child or vice versa from Microsoft. Any assistance would be greatly appreciated. Thank you in advance. Dan Cariglia
RE: [ActiveDir] DNS replication question
Title: Message Thanks Rick, that did the trick. Great list everyone, thanks for your help. Dan -Original Message- From: Rick Kingslan [mailto:[EMAIL PROTECTED] Sent: Monday, March 10, 2003 4:43 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] DNS replication question Daniel, Wrong assumption. DNS information, like all domain information, is not replicated to other domains. If you are using AD-Integrated DNS, the information will not replicate unless you set up Secondary zones in the other domain and then configure the transfer properties appropriately on each side of the transfer. Rick Kingslan MCSE, MCSA, MCT Microsoft MVP - Active Directory Associate Expert Expert Zone - www.microsoft.com/windowsxp/expertzone From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] .org] On Behalf Of Cariglia, Daniel Sent: Monday, March 10, 2003 3:30 PM To: '[EMAIL PROTECTED]' We are running integrated zones. We have tried registering with both the child and the root Dns servers at different times, replicated and the result is the same (no record in the other Dns server). Am I correct in assuming this information should be replicated without setting up the zone transfer properties due to it being integrated? Thanks Dan -Original Message- From: John Hicks/MIS/HQ/KEMET/US [mailto:[EMAIL PROTECTED] Sent: Monday, March 10, 2003 2:17 PM To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] DNS replication question Are you running AD integrated zones or standard? If you are running standard you would setup a secondary zone in the child domain that pulls from the Primary in the root domain. If you go into the properties of the zone on each server you can set the zone transfer properties. Put in the names and that should take care of it. Cariglia, Daniel [EMAIL PROTECTED] Sent by: [EMAIL PROTECTED] 03/10/2003 12:08 PM Please respond to [EMAIL PROTECTED] To 'ActiveDir (E-mail) [EMAIL PROTECTED] cc Subject [ActiveDir] DNS replication question Hello, I have been lurking on this list for about 6 months now and have a question regarding DNS and replication. I have just got my AD up and running with one child domain. The problem is when a PC registers with DNS on the root it never replicates down to the child DNS. It picks up a DHCP address from a NON-AD server but the DNS entry on the PC is manually set for DNS on the root server. The registration shows up on the root DNS server. I have not been able to find a clear way to have DNS replicate from the root to child or vice versa from Microsoft. Any assistance would be greatly appreciated. Thank you in advance. Dan Cariglia