We install the Kitchen Sink service too don't forget.... ;-)
(wait until we start talking about the My Business OU...that's usually
good for another freak out or two)
Laura A. Robinson wrote:
Small point- dcpromo creates those zones as mentioned in the original
question *if* you have not configured DNS beforehand, *if* you tell dcpromo
to go ahead and do it for you, and *if* you're building the forest root
domain. If you have configured DNS beforehand, how the zones get created (as
stub zones, as subdomains, etc.) will depend on that preconfiguration. If
you're not building the forest root domain, the subdomain already exists and
dcpromo is just populating it.
I bring this up only because there are many companies that have existing DNS
infrastructures and it's important to know that "default" is not equivalent
to "mandatory". It is not a requirement that the _msdcs zone be either a
separate zone or a subdomain in an existing zone, whether it's a stub or a
full zone, etc.
Of course, since we're talking SBS, all of this goes out the window (no pun
intended). SBS is its own freaky little animal.
Laura
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Hans Halbmayr
Sent: Monday, December 04, 2006 1:06 PM
To: [email protected]
Subject: Re: [ActiveDir] _msdcs not propagated in AXFR
Usually dcpromo creates all these zones. Windows creates
these zones in a forest partition. If you have a linux DNS
server just create another slave zone of _msdcs.example.com.
The gray one is only the delegation.
Hans
----- Original Message ----
From: Michael B Allen <[EMAIL PROTECTED]>
To: [email protected]
Cc: [EMAIL PROTECTED]
Sent: Saturday, December 2, 2006 5:39:26 PM
Subject: Re: [ActiveDir] _msdcs not propagated in AXFR
Ok, so basically _msdcs is just a separate zone. Do Windows
DNS setups usually do this? I'm using SBS.
I have a bind DNS server running on a linux machine with a
slave zone for example.com. The AXFR doesn't have those
records (aside from the NS record). So what you're saying is
that I need to setup another slave zone for the _msdcs subdomain?
Mike
On Sat, 2 Dec 2006 03:02:22 -0800 (PST)
Hans Halbmayr <[EMAIL PROTECTED]> wrote:
Hi Mike,
the gray one is the delegation of the zone. The _msdcs ist
a subdomain of your forest root. Because it is needed all
over the forest it is delegated.
Regards
Hans
----- Original Message ----
From: Michael B Allen <[EMAIL PROTECTED]>
To: [email protected]
Cc: [EMAIL PROTECTED]
Sent: Saturday, December 2, 2006 12:15:29 AM
Subject: Re: [ActiveDir] _msdcs not propagated in AXFR
I'm not sure I understand. In DNS admin I see two zones. One for
_msdcs.example.com with all the usual _msdcs records and one for
example.com which incedentally has an NS record for
_msdcs.example.com. The little folder thingy for this
_msdcs is grey
which I guess signifies that it's some kind of link to the
other zone?
So I understand why the _msdcs records other than the one NS record
are not transferring but I don't understand why the
structure is split
into two zones and if I can/should do something about it.
Mike
On Fri, 1 Dec 2006 11:27:14 -0800
"Akomolafe, Deji" <[EMAIL PROTECTED]> wrote:
Seen this? http://support.microsoft.com/kb/817470
Sincerely,
_____
(, / | /) /) /)
/---| (/_ ______ ___// _ // _
) / |_/(__(_) // (_(_)(/_(_(_/(__(/_
(_/ /)
(/
Microsoft MVP - Directory Services
www.akomolafe.com - we know IT
-5.75, -3.23
Do you now realize that Today is the Tomorrow you were
worried about
Yesterday? -anon
From: Michael B Allen
Sent: Fri 12/1/2006 9:40 AM
To: [email protected]
Subject: [ActiveDir] _msdcs not propagated in AXFR
Does anyone know why the _msdcs records are not returned
in an AXFR
DNS query? This means that slave zones will not have
those records
and that software querying for a domain controller may
not find one.
Mike
--
Michael B Allen
PHP Active Directory SSO
http://www.ioplex.com/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/[email protected]/
--
Michael B Allen
PHP Active Directory SSO
http://www.ioplex.com/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/[email protected]/
______________________________________________________________________
______________
Do you Yahoo!?
Everyone is raving about the all-new Yahoo! Mail beta.
http://new.mail.yahoo.com
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/[email protected]/
--
Michael B Allen
PHP Active Directory SSO
http://www.ioplex.com/
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/[email protected]/
______________________________________________________________
______________________
Need a quick answer? Get one in minutes from people who know.
Ask your question on www.Answers.yahoo.com
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive:
http://www.mail-archive.com/[email protected]/
--
No virus found in this incoming message.
Checked by AVG Free Edition.
Version: 7.5.430 / Virus Database: 268.15.6/567 - Release
Date: 12/4/2006 7:18 AM
--
Letting your vendors set your risk analysis these days?
http://www.threatcode.com
If you are a SBSer and you don't subscribe to the SBS Blog... man ... I will
hunt you down...
http://blogs.technet.com/sbs
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/[email protected]/
