RE: [ActiveDir] Compelling arguments?

Tue, 29 Mar 2005 21:19:33 -0800

Title: Compelling arguments?
The permission mod you need to make is to correct this.
 
http://support.microsoft.com/default.aspx?scid=kb;en-us;258503
 
 
Again, disjoint namespace works fine in the core OS. The issues that crop up are around poorly written/tested applications.
 
   joe

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Isenhour, Joseph
Sent: Tuesday, March 29, 2005 3:43 PM
To: [email protected]
Subject: RE: [ActiveDir] Compelling arguments?

If you're also talking about servers don't forget that by default computers register their SPN using the AD domain name.  So if you have a server that registers HOST/someserver.myadname.net and the server actually resolves to someserver.mydnszone.net Kerberos will not work for the clients that try to connect using the DNS name.

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brent Westmoreland
Sent: Tuesday, March 29, 2005 7:06 AM
To: [email protected]
Subject: [ActiveDir] Compelling arguments?

Are there compelling arguments to use the DNS Domain name of your AD Domain as the primary DNS Suffix versus a different DNS extension from a client functionality perspective?

Clients are still able to resolve the AD DNS Domain but most do not use it as their primary suffix.

Any thoughts welcome.

Reply via email to