DNS Design-DNS Zones for per Organization Units

DNS Design-DNS Zones for per Organization Units



Suppose your OU structure is country basis like the snap-1 and there is local IT for each region and they want to manage their own DNS records, so we need specific DNS zone for specific OU. Now our requirement is UK OU's host records should be registered in UK.ROCKY.COM and USA OU'S  host records should be registered in USA.ROCKY.COM. Also see the snap-2 for DNS design.



SNAP-1

 

SNAP-2

USA.ROCKY.COM & UK.ROCKY.COM are the forward lookup zones those I have created manually.

Now I go going to discuss the steps that how to do this.

1. Add the "Primary DNS Suffix

As per our example those are USA.ROCKY.COM & UK.ROCKY.COM. We can automate that via GPO. Those GPOs can be linked with the OUs

.

Using Group Policy to Specify a DNS Suffix

Policyprimary dns suffix

Category PathComputer Configuration\Administrative Templates\Network\dns Client\

Supported OnAt least Microsoft Windows 2000

Registry KeyHKLM\Software\Policies\Microsoft\System\dnsClient

ValueNV primarydnssuffix

2. Need to allow an attribute(Write dNSHostName); please find the below link for that. You can modify that attribute Domain/OU level

http://technet.microsoft.com/en-us/library/cc959267.aspx



 
<>Caution

If you modify the ACL to enable registration of the modified full computer name, any computer in the domain can register itself under a different name.

3.Now the time for the delegation for Regional Administrators who will be managed their own DNS Zone


Provide the permission for regional Admins on their Zone. Add them from the security tabs.
Best Practice :- Create a "Domain Local" security group add regional admins into that security group. provide the permission for that security group.

If you want to do with your existing DNS setup; you can add one batch file through GPO.

Ipconfig /flushdns
Ipconfig /registerdns 

Above commands will update the “A” records in your new Zone.



See the below link in DS technet forum.
http://social.technet.microsoft.com/Forums/en-US/winserverDS/thread/18010fcc-11f6-40da-8a18-e656a65cfead
Leave a Comment
  • Please add 5 and 8 and type the answer here:
  • Post
Wiki - Revision Comment List(Revision Comment)
Sort by: Published Date | Most Recent | Most Useful
Comments
  • Richard Mueller edited Revision 21. Comment: Changed tags "Windows 2003" and "Windows 2008" to "Windows Server 2003" and "Windows Server 2008"

  • Richard Mueller edited Revision 18. Comment: Removed (en-US) from title

Page 1 of 1 (2 items)
Wikis - Comment List
Sort by: Published Date | Most Recent | Most Useful
Posting comments is temporarily disabled until 10:00am PST on Saturday, December 14th. Thank you for your patience.
Comments
  • Thanks for sharing.

  • Thanks for sharing.

  • Richard Mueller edited Revision 18. Comment: Removed (en-US) from title

  • Richard Mueller edited Revision 21. Comment: Changed tags "Windows 2003" and "Windows 2008" to "Windows Server 2003" and "Windows Server 2008"

Page 1 of 1 (4 items)