How do I configure DNS for a Windows 2000 domain?
January 8, 2000
A. Windows 2000 domains rely on DNS and require Dynamic DNS which is an update to the basic DNS specification and details can be found in RFC 2136 that can be viewed at ftp://ftp.isi.edu/in-notes/rfc2136.txt.
Another major update in DNS 5.0 is the addition of service (SRV) records and these have already been seen as a mechanism for publishing the ldap server, _ldap._tcp. and it is through these records that domains can be looked up through the DNS service.
You could perform this on a separate Windows 2000 machine, the domain controller and the DNS server will probably not be the same machine, it just has to exist before upgrading the server to a domain controller. To install DNS 5.0 on the server perform the following:
Start the Install/Remove Programs Control Panel Applet (Start - Settings - Control Panel - Add/Remove Programs)
Click the "Configure Windows" left hand pane
Click the "Components" button that is displayed
Select "Networking Options" and click Details
Select "Microsoft DNS Server" and click OK
Click Next
Before actually configuring the DNS service modify the TCP/IP properties of the machine to use itself as the DNS server:
Right click on 'My Network Places' and select Properties
Right click on the 'Local Area Connection' and select Properties
Select 'Internet Protocol (TCP/IP)' and click Properties button
Under the DNS section select 'Use the following DNS server addresses:' and enter the machines IP address
You can also click advanced, select the DNS tab and ensure the DNS suffix for the connection is the DNS domain you are about to create. Click OK
Click OK to all dialogs to close all windows
Now check the computers primary suffix is set
Right click on 'My Computer' and select Properties
Select the 'Network Identification' tab and click the Properties button
Click the More button
Ensure 'Primary DNS suffix of this computer' is set to the DNS domain you are about to create and click OK
Click here to view imageClick OK to all dialogs to close all windows
Click Yes to restart the computer
If you don't do this first, your NS records for the zones will simply listthe computer name, followed by a ".", rather than the FQDN of your NSand this may cause problems. You can forgo this step and the NS records will beupdated after the machine becomes a DC, but I've heard of some problems withthis approach.
You then need to configure the DNS service
Start the "DNS Management" MMC snap-in (Start - Programs - Administrative Tools - DNS Management)
Right click on the root and select 'Configure Server' and this will start the configuration applet. Click Next
It will detect there are no root servers so select "This is the first DNS server on this network" and click Next
Check "Yes, add a forward lookup zone" and click Next. This zone is used for the storage of host name to IP addresses
You should now select the zone type, Select "Standard Primary" and click Next. "Active Directory Integrated" stores the DNS database in the Active Directory however there is no Active Directory at this point. This option can be set later
Enter the name of the zone, e.g. savilltech.com and click Next
Select "New File" and click Next. If you had an existing .dns file you may import this
Check "Yes, add a reverse lookup zone" and click Next. The reverse lookup zone is used to find the host name from a IP address. When you create a host record a PTR record can also be selected to be created and this adds a record in the reverse lookup zone
Again select "Standard Primary" and click Next
Enter the first parts of your subnet, e.g. 200.200.200.0 (subnet will be filled in for you). If you subnet mask was 255.255.0.0 you would enter the first 2 parts of you IP address, if 255.255.255.0 you would enter the first 3. Click Next
Again Check "New File" and click Next
A summary will be displayed and click Finish to complete the installation
The final stage is to configure the zones to be dynamic update enabled which allows hosts to add records in the DNS server.
Start the "DNS Management" MMC snap-in (Start - Programs - Administrative Tools - DNS Management)
Expand the DNS server, expand the "Forward Lookup Zones", select the domain, e.g. savilltech.com
Right click on the domain and select Properties from the context menu
Select "Yes" from the "Allow dynamic updates?" drop down box
Click Apply then OK
Now expand the "Reverse Lookup Zones" and select the reverse lookup zone, e.g. "200.200.200.x Subnet"
Select the zone and right click the zone and select Properties from the context menu
Again select "Yes" from the "Allow dynamic updates?" drop down box
Click Apply then OK
DNS is now configured for a domain and you can create the domain.
To ensure all entries are correctly entered enter the command below in a command window (cmd.exe)
C:> ipconfig /registerdns
About the Author
You May Also Like