Resources For IT Professionals
Post an article
Wikis - Page Details
  • First published by (eMicrosoft Community Contributo)
  • When: 27 Oct 2012 1:35 AM
  • Last revision by (cMVP, Microsoft Community Contributo)
  • When: 12 Sep 2013 11:44 AM
  • Revisions: 23
  • Comments: 4
Options
RSSSubscribe to Article (RSS)
Can You Improve This Article?
Positively! Click Sign In to add the tip, solution, correction or comment that will help other users.

Report inappropriate content using these instructions.
Wiki  >  TechNet Articles  >  DNS Design-DNS Zones for per Organization Units

DNS Design-DNS Zones for per Organization Units

DNS Design-DNS Zones for per Organization Units

Table of Contents



Suppose your OU structure is country basis like the snap-1 and there is local IT for each region and they want to manage their own DNS records, so we need specific DNS zone for specific OU. Now our requirement is UK OU's host records should be registered in UK.ROCKY.COM and USA OU'S  host records should be registered in USA.ROCKY.COM. Also see the snap-2 for DNS design.

SNAP-1

 

SNAP-2

USA.ROCKY.COM & UK.ROCKY.COM are the forward lookup zones those I have created manually.

Now I go going to discuss the steps that how to do this.

1. Add the "Primary DNS Suffix

As per our example those are USA.ROCKY.COM & UK.ROCKY.COM. We can automate that via GPO. Those GPOs can be linked with the OUs

.

Using Group Policy to Specify a DNS Suffix

Policyprimary dns suffix

Category PathComputer Configuration\Administrative Templates\Network\dns Client\

Supported OnAt least Microsoft Windows 2000

Registry KeyHKLM\Software\Policies\Microsoft\System\dnsClient

ValueNV primarydnssuffix

2. Need to allow an attribute(Write dNSHostName); please find the below link for that. You can modify that attribute Domain/OU level

http://technet.microsoft.com/en-us/library/cc959267.aspx



 
<>Caution

If you modify the ACL to enable registration of the modified full computer name, any computer in the domain can register itself under a different name.

3.Now the time for the delegation for Regional Administrators who will be managed their own DNS Zone


Provide the permission for regional Admins on their Zone. Add them from the security tabs.
Best Practice :- Create a "Domain Local" security group add regional admins into that security group. provide the permission for that security group.

If you want to do with your existing DNS setup; you can add one batch file through GPO.

Ipconfig /flushdns
Ipconfig /registerdns 

Above commands will update the “A” records in your new Zone.



See the below link in DS technet forum.
http://social.technet.microsoft.com/Forums/en-US/winserverDS/thread/18010fcc-11f6-40da-8a18-e656a65cfead
, , , , , , , , , [Edit tags]
Leave a Comment
  • Please add 5 and 3 and type the answer here:
  • Post
Wiki - Revision Comment List(Revision Comment)
Sort by: Published Date | Most Recent | Most Useful
Comments
  • 12 Sep 2013 11:44 AM

    Richard Mueller edited Revision 21. Comment: Changed tags "Windows 2003" and "Windows 2008" to "Windows Server 2003" and "Windows Server 2008"

  • 7 Jan 2013 8:54 AM

    Richard Mueller edited Revision 18. Comment: Removed (en-US) from title

Page 1 of 1 (2 items)
Wikis - Comment List
Sort by: Published Date | Most Recent | Most Useful
Posting comments is temporarily disabled until 10:00am PST on Saturday, December 14th. Thank you for your patience.
Comments
  • Posted by
    on 1 Nov 2012 6:32 AM

    Thanks for sharing.

  • Posted by
    on 1 Nov 2012 6:33 AM

    Thanks for sharing.

  • Posted by
    on 7 Jan 2013 8:54 AM

    Richard Mueller edited Revision 18. Comment: Removed (en-US) from title

  • Posted by
    on 12 Sep 2013 11:44 AM

    Richard Mueller edited Revision 21. Comment: Changed tags "Windows 2003" and "Windows 2008" to "Windows Server 2003" and "Windows Server 2008"

Page 1 of 1 (4 items)