private domains redirection for members of AD: DNS or something else?Should engineering have its own DNS...

What should be the ideal length of sentences in a blog post for ease of reading?

Trouble reading roman numeral notation with flats

If the Dominion rule using their Jem'Hadar troops, why is their life expectancy so low?

Would this string work as string?

Center page as a whole without centering each element individually

"Oh no!" in Latin

Asserting that Atheism and Theism are both faith based positions

How to detect sounds in IPA spelling

A seasonal riddle

Air travel with refrigerated insulin

Strange behavior in TikZ draw command

How can a new country break out from a developed country without war?

Capacitor electron flow

Magnifying glass in hyperbolic space

Weird lines in Microsoft Word

What is the meaning of "You've never met a graph you didn't like?"

Are hand made posters acceptable in Academia?

"Marked down as someone wanting to sell shares." What does that mean?

Toggle window scroll bar

Why do Radio Buttons not fill the entire outer circle?

Why would five hundred and five same as one?

Reasons for having MCU pin-states default to pull-up/down out of reset

Can you take a "free object interaction" while incapacitated?

Started in 1987 vs. Starting in 1987



private domains redirection for members of AD: DNS or something else?


Should engineering have its own DNS zone, delegate, or subdomain?Private DNS zone that resolves private subdomains, and forwards to public nameserver for existing public subdomainsHow do I make a DNS record for only one subdomain and forward the rest?Private DNS zone that resolves private subdomains, and forwards to public nameserver for existing public subdomainsHow do I forward root DNS queries for a domain while still resolving some subdomains on Server 2008?Is it possible for DNS to pass to another DNS?Active Directory - Identical Forward Lookup ZonesWindows DNS Server use public DNS for records not in Forward ZoneMicrosoft DNS : SRV record for sub-domain without creating a new zonePublic AND Private Authoritative DNS ServersIs it OK to have a public CNAME pointing to an interal domain name?DNS Broken After Enabling Scavenging













0















I'm looking to obtain the same consequences of having a line server_ip domain_name (eg., 192.168.154.21 mywebsite.com) in the file hosts (/etc/hosts or %system32%/drivers/etc/hosts) but for all (or a subset if possible) computers of a private local domain (ie., a set of computers from an intranet), in the case of a private network (AD) of windows servers 2019. In particular, I want to add domains, and subdomains (eg., mywebsite.com, mail.mywebsite.com, api.mywebsite.com).



Let's have a domain controller (DC), also having a DNS role; all computers of the intranet have this DNS as first DNS, so they resolve to the domains I added. Should I use the DNS records, given that the DC will be the first DNS ? How ? Is there any alternative ?



Using DNS records would be my first thought, but this does not seems to be the right way:




Dnscmd tool can only create new zone and it cannot create domain. When
we want to create a subdomain in DNS server. it is recommanded to
create a new zone for the subdomain. It benifits the zone tranfer.
Thanks for your understanding.




[1] https://social.technet.microsoft.com/Forums/windows/en-US/5624ffbf-96dd-4d62-91f6-8bdcc264ef71/create-a-new-dns-domain-within-a-zone-using-script?forum=winserverDS



[2] Should engineering have its own DNS zone, delegate, or subdomain?



[3] Private DNS zone that resolves private subdomains, and forwards to public nameserver for existing public subdomains










share|improve this question

























  • It's not clear to me what it is that you're trying to accomplish. Can you add some more detail to your question?

    – joeqwerty
    Feb 5 at 22:02











  • @joeqwerty more details and examples added. Is it better ?

    – Soleil
    Feb 5 at 23:29











  • I think it's more a language barrier than a lack of information.

    – Daniel
    1 hour ago











  • @Daniel thanks for the suggestion

    – Soleil
    7 mins ago
















0















I'm looking to obtain the same consequences of having a line server_ip domain_name (eg., 192.168.154.21 mywebsite.com) in the file hosts (/etc/hosts or %system32%/drivers/etc/hosts) but for all (or a subset if possible) computers of a private local domain (ie., a set of computers from an intranet), in the case of a private network (AD) of windows servers 2019. In particular, I want to add domains, and subdomains (eg., mywebsite.com, mail.mywebsite.com, api.mywebsite.com).



Let's have a domain controller (DC), also having a DNS role; all computers of the intranet have this DNS as first DNS, so they resolve to the domains I added. Should I use the DNS records, given that the DC will be the first DNS ? How ? Is there any alternative ?



Using DNS records would be my first thought, but this does not seems to be the right way:




Dnscmd tool can only create new zone and it cannot create domain. When
we want to create a subdomain in DNS server. it is recommanded to
create a new zone for the subdomain. It benifits the zone tranfer.
Thanks for your understanding.




[1] https://social.technet.microsoft.com/Forums/windows/en-US/5624ffbf-96dd-4d62-91f6-8bdcc264ef71/create-a-new-dns-domain-within-a-zone-using-script?forum=winserverDS



[2] Should engineering have its own DNS zone, delegate, or subdomain?



[3] Private DNS zone that resolves private subdomains, and forwards to public nameserver for existing public subdomains










share|improve this question

























  • It's not clear to me what it is that you're trying to accomplish. Can you add some more detail to your question?

    – joeqwerty
    Feb 5 at 22:02











  • @joeqwerty more details and examples added. Is it better ?

    – Soleil
    Feb 5 at 23:29











  • I think it's more a language barrier than a lack of information.

    – Daniel
    1 hour ago











  • @Daniel thanks for the suggestion

    – Soleil
    7 mins ago














0












0








0








I'm looking to obtain the same consequences of having a line server_ip domain_name (eg., 192.168.154.21 mywebsite.com) in the file hosts (/etc/hosts or %system32%/drivers/etc/hosts) but for all (or a subset if possible) computers of a private local domain (ie., a set of computers from an intranet), in the case of a private network (AD) of windows servers 2019. In particular, I want to add domains, and subdomains (eg., mywebsite.com, mail.mywebsite.com, api.mywebsite.com).



Let's have a domain controller (DC), also having a DNS role; all computers of the intranet have this DNS as first DNS, so they resolve to the domains I added. Should I use the DNS records, given that the DC will be the first DNS ? How ? Is there any alternative ?



Using DNS records would be my first thought, but this does not seems to be the right way:




Dnscmd tool can only create new zone and it cannot create domain. When
we want to create a subdomain in DNS server. it is recommanded to
create a new zone for the subdomain. It benifits the zone tranfer.
Thanks for your understanding.




[1] https://social.technet.microsoft.com/Forums/windows/en-US/5624ffbf-96dd-4d62-91f6-8bdcc264ef71/create-a-new-dns-domain-within-a-zone-using-script?forum=winserverDS



[2] Should engineering have its own DNS zone, delegate, or subdomain?



[3] Private DNS zone that resolves private subdomains, and forwards to public nameserver for existing public subdomains










share|improve this question
















I'm looking to obtain the same consequences of having a line server_ip domain_name (eg., 192.168.154.21 mywebsite.com) in the file hosts (/etc/hosts or %system32%/drivers/etc/hosts) but for all (or a subset if possible) computers of a private local domain (ie., a set of computers from an intranet), in the case of a private network (AD) of windows servers 2019. In particular, I want to add domains, and subdomains (eg., mywebsite.com, mail.mywebsite.com, api.mywebsite.com).



Let's have a domain controller (DC), also having a DNS role; all computers of the intranet have this DNS as first DNS, so they resolve to the domains I added. Should I use the DNS records, given that the DC will be the first DNS ? How ? Is there any alternative ?



Using DNS records would be my first thought, but this does not seems to be the right way:




Dnscmd tool can only create new zone and it cannot create domain. When
we want to create a subdomain in DNS server. it is recommanded to
create a new zone for the subdomain. It benifits the zone tranfer.
Thanks for your understanding.




[1] https://social.technet.microsoft.com/Forums/windows/en-US/5624ffbf-96dd-4d62-91f6-8bdcc264ef71/create-a-new-dns-domain-within-a-zone-using-script?forum=winserverDS



[2] Should engineering have its own DNS zone, delegate, or subdomain?



[3] Private DNS zone that resolves private subdomains, and forwards to public nameserver for existing public subdomains







windows-server-2016 internal-dns dns-zone windows-server-2019






share|improve this question















share|improve this question













share|improve this question




share|improve this question








edited Feb 6 at 13:32







Soleil

















asked Feb 5 at 20:22









SoleilSoleil

1085




1085













  • It's not clear to me what it is that you're trying to accomplish. Can you add some more detail to your question?

    – joeqwerty
    Feb 5 at 22:02











  • @joeqwerty more details and examples added. Is it better ?

    – Soleil
    Feb 5 at 23:29











  • I think it's more a language barrier than a lack of information.

    – Daniel
    1 hour ago











  • @Daniel thanks for the suggestion

    – Soleil
    7 mins ago



















  • It's not clear to me what it is that you're trying to accomplish. Can you add some more detail to your question?

    – joeqwerty
    Feb 5 at 22:02











  • @joeqwerty more details and examples added. Is it better ?

    – Soleil
    Feb 5 at 23:29











  • I think it's more a language barrier than a lack of information.

    – Daniel
    1 hour ago











  • @Daniel thanks for the suggestion

    – Soleil
    7 mins ago

















It's not clear to me what it is that you're trying to accomplish. Can you add some more detail to your question?

– joeqwerty
Feb 5 at 22:02





It's not clear to me what it is that you're trying to accomplish. Can you add some more detail to your question?

– joeqwerty
Feb 5 at 22:02













@joeqwerty more details and examples added. Is it better ?

– Soleil
Feb 5 at 23:29





@joeqwerty more details and examples added. Is it better ?

– Soleil
Feb 5 at 23:29













I think it's more a language barrier than a lack of information.

– Daniel
1 hour ago





I think it's more a language barrier than a lack of information.

– Daniel
1 hour ago













@Daniel thanks for the suggestion

– Soleil
7 mins ago





@Daniel thanks for the suggestion

– Soleil
7 mins ago










1 Answer
1






active

oldest

votes


















0














I ended up adding private domains in the DNS, itself in the DC box. For the other computers, I needed to make sure that the DC/DNS ip is the first DNS.



I manage the DNS scopes and records with IPAM, itself installed in another virtual machine (Windows Server 2019 with GUI).



I don't know if it's the best practice, but it works well; new AD computers can access directly to the private domains with minimal configuration. That's very convenient for development and testing, as well as for production.





share























    Your Answer








    StackExchange.ready(function() {
    var channelOptions = {
    tags: "".split(" "),
    id: "2"
    };
    initTagRenderer("".split(" "), "".split(" "), channelOptions);

    StackExchange.using("externalEditor", function() {
    // Have to fire editor after snippets, if snippets enabled
    if (StackExchange.settings.snippets.snippetsEnabled) {
    StackExchange.using("snippets", function() {
    createEditor();
    });
    }
    else {
    createEditor();
    }
    });

    function createEditor() {
    StackExchange.prepareEditor({
    heartbeatType: 'answer',
    autoActivateHeartbeat: false,
    convertImagesToLinks: true,
    noModals: true,
    showLowRepImageUploadWarning: true,
    reputationToPostImages: 10,
    bindNavPrevention: true,
    postfix: "",
    imageUploader: {
    brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
    contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
    allowUrls: true
    },
    onDemand: true,
    discardSelector: ".discard-answer"
    ,immediatelyShowMarkdownHelp:true
    });


    }
    });














    draft saved

    draft discarded


















    StackExchange.ready(
    function () {
    StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f952466%2fprivate-domains-redirection-for-members-of-ad-dns-or-something-else%23new-answer', 'question_page');
    }
    );

    Post as a guest















    Required, but never shown

























    1 Answer
    1






    active

    oldest

    votes








    1 Answer
    1






    active

    oldest

    votes









    active

    oldest

    votes






    active

    oldest

    votes









    0














    I ended up adding private domains in the DNS, itself in the DC box. For the other computers, I needed to make sure that the DC/DNS ip is the first DNS.



    I manage the DNS scopes and records with IPAM, itself installed in another virtual machine (Windows Server 2019 with GUI).



    I don't know if it's the best practice, but it works well; new AD computers can access directly to the private domains with minimal configuration. That's very convenient for development and testing, as well as for production.





    share




























      0














      I ended up adding private domains in the DNS, itself in the DC box. For the other computers, I needed to make sure that the DC/DNS ip is the first DNS.



      I manage the DNS scopes and records with IPAM, itself installed in another virtual machine (Windows Server 2019 with GUI).



      I don't know if it's the best practice, but it works well; new AD computers can access directly to the private domains with minimal configuration. That's very convenient for development and testing, as well as for production.





      share


























        0












        0








        0







        I ended up adding private domains in the DNS, itself in the DC box. For the other computers, I needed to make sure that the DC/DNS ip is the first DNS.



        I manage the DNS scopes and records with IPAM, itself installed in another virtual machine (Windows Server 2019 with GUI).



        I don't know if it's the best practice, but it works well; new AD computers can access directly to the private domains with minimal configuration. That's very convenient for development and testing, as well as for production.





        share













        I ended up adding private domains in the DNS, itself in the DC box. For the other computers, I needed to make sure that the DC/DNS ip is the first DNS.



        I manage the DNS scopes and records with IPAM, itself installed in another virtual machine (Windows Server 2019 with GUI).



        I don't know if it's the best practice, but it works well; new AD computers can access directly to the private domains with minimal configuration. That's very convenient for development and testing, as well as for production.






        share











        share


        share










        answered 43 secs ago









        SoleilSoleil

        1085




        1085






























            draft saved

            draft discarded




















































            Thanks for contributing an answer to Server Fault!


            • Please be sure to answer the question. Provide details and share your research!

            But avoid



            • Asking for help, clarification, or responding to other answers.

            • Making statements based on opinion; back them up with references or personal experience.


            To learn more, see our tips on writing great answers.




            draft saved


            draft discarded














            StackExchange.ready(
            function () {
            StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f952466%2fprivate-domains-redirection-for-members-of-ad-dns-or-something-else%23new-answer', 'question_page');
            }
            );

            Post as a guest















            Required, but never shown





















































            Required, but never shown














            Required, but never shown












            Required, but never shown







            Required, but never shown

































            Required, but never shown














            Required, but never shown












            Required, but never shown







            Required, but never shown







            Popular posts from this blog

            117736 Шеррод Примітки | Див. також | Посилання | Навігаційне...

            As a Security Precaution, the user account has been locked The Next CEO of Stack OverflowMS...

            Маріан Котлеба Зміст Життєпис | Політичні погляди |...