private domains redirection for members of AD: DNS or something else?Should engineering have its own DNS...
What should be the ideal length of sentences in a blog post for ease of reading?
Trouble reading roman numeral notation with flats
If the Dominion rule using their Jem'Hadar troops, why is their life expectancy so low?
Would this string work as string?
Center page as a whole without centering each element individually
"Oh no!" in Latin
Asserting that Atheism and Theism are both faith based positions
How to detect sounds in IPA spelling
A seasonal riddle
Air travel with refrigerated insulin
Strange behavior in TikZ draw command
How can a new country break out from a developed country without war?
Capacitor electron flow
Magnifying glass in hyperbolic space
Weird lines in Microsoft Word
What is the meaning of "You've never met a graph you didn't like?"
Are hand made posters acceptable in Academia?
"Marked down as someone wanting to sell shares." What does that mean?
Toggle window scroll bar
Why do Radio Buttons not fill the entire outer circle?
Why would five hundred and five same as one?
Reasons for having MCU pin-states default to pull-up/down out of reset
Can you take a "free object interaction" while incapacitated?
Started in 1987 vs. Starting in 1987
private domains redirection for members of AD: DNS or something else?
Should engineering have its own DNS zone, delegate, or subdomain?Private DNS zone that resolves private subdomains, and forwards to public nameserver for existing public subdomainsHow do I make a DNS record for only one subdomain and forward the rest?Private DNS zone that resolves private subdomains, and forwards to public nameserver for existing public subdomainsHow do I forward root DNS queries for a domain while still resolving some subdomains on Server 2008?Is it possible for DNS to pass to another DNS?Active Directory - Identical Forward Lookup ZonesWindows DNS Server use public DNS for records not in Forward ZoneMicrosoft DNS : SRV record for sub-domain without creating a new zonePublic AND Private Authoritative DNS ServersIs it OK to have a public CNAME pointing to an interal domain name?DNS Broken After Enabling Scavenging
I'm looking to obtain the same consequences of having a line server_ip domain_name (eg., 192.168.154.21 mywebsite.com) in the file hosts (/etc/hosts or %system32%/drivers/etc/hosts) but for all (or a subset if possible) computers of a private local domain (ie., a set of computers from an intranet), in the case of a private network (AD) of windows servers 2019. In particular, I want to add domains, and subdomains (eg., mywebsite.com, mail.mywebsite.com, api.mywebsite.com).
Let's have a domain controller (DC), also having a DNS role; all computers of the intranet have this DNS as first DNS, so they resolve to the domains I added. Should I use the DNS records, given that the DC will be the first DNS ? How ? Is there any alternative ?
Using DNS records would be my first thought, but this does not seems to be the right way:
Dnscmd tool can only create new zone and it cannot create domain. When
we want to create a subdomain in DNS server. it is recommanded to
create a new zone for the subdomain. It benifits the zone tranfer.
Thanks for your understanding.
[1] https://social.technet.microsoft.com/Forums/windows/en-US/5624ffbf-96dd-4d62-91f6-8bdcc264ef71/create-a-new-dns-domain-within-a-zone-using-script?forum=winserverDS
[2] Should engineering have its own DNS zone, delegate, or subdomain?
[3] Private DNS zone that resolves private subdomains, and forwards to public nameserver for existing public subdomains
windows-server-2016 internal-dns dns-zone windows-server-2019
add a comment |
I'm looking to obtain the same consequences of having a line server_ip domain_name (eg., 192.168.154.21 mywebsite.com) in the file hosts (/etc/hosts or %system32%/drivers/etc/hosts) but for all (or a subset if possible) computers of a private local domain (ie., a set of computers from an intranet), in the case of a private network (AD) of windows servers 2019. In particular, I want to add domains, and subdomains (eg., mywebsite.com, mail.mywebsite.com, api.mywebsite.com).
Let's have a domain controller (DC), also having a DNS role; all computers of the intranet have this DNS as first DNS, so they resolve to the domains I added. Should I use the DNS records, given that the DC will be the first DNS ? How ? Is there any alternative ?
Using DNS records would be my first thought, but this does not seems to be the right way:
Dnscmd tool can only create new zone and it cannot create domain. When
we want to create a subdomain in DNS server. it is recommanded to
create a new zone for the subdomain. It benifits the zone tranfer.
Thanks for your understanding.
[1] https://social.technet.microsoft.com/Forums/windows/en-US/5624ffbf-96dd-4d62-91f6-8bdcc264ef71/create-a-new-dns-domain-within-a-zone-using-script?forum=winserverDS
[2] Should engineering have its own DNS zone, delegate, or subdomain?
[3] Private DNS zone that resolves private subdomains, and forwards to public nameserver for existing public subdomains
windows-server-2016 internal-dns dns-zone windows-server-2019
It's not clear to me what it is that you're trying to accomplish. Can you add some more detail to your question?
– joeqwerty
Feb 5 at 22:02
@joeqwerty more details and examples added. Is it better ?
– Soleil
Feb 5 at 23:29
I think it's more a language barrier than a lack of information.
– Daniel
1 hour ago
@Daniel thanks for the suggestion
– Soleil
7 mins ago
add a comment |
I'm looking to obtain the same consequences of having a line server_ip domain_name (eg., 192.168.154.21 mywebsite.com) in the file hosts (/etc/hosts or %system32%/drivers/etc/hosts) but for all (or a subset if possible) computers of a private local domain (ie., a set of computers from an intranet), in the case of a private network (AD) of windows servers 2019. In particular, I want to add domains, and subdomains (eg., mywebsite.com, mail.mywebsite.com, api.mywebsite.com).
Let's have a domain controller (DC), also having a DNS role; all computers of the intranet have this DNS as first DNS, so they resolve to the domains I added. Should I use the DNS records, given that the DC will be the first DNS ? How ? Is there any alternative ?
Using DNS records would be my first thought, but this does not seems to be the right way:
Dnscmd tool can only create new zone and it cannot create domain. When
we want to create a subdomain in DNS server. it is recommanded to
create a new zone for the subdomain. It benifits the zone tranfer.
Thanks for your understanding.
[1] https://social.technet.microsoft.com/Forums/windows/en-US/5624ffbf-96dd-4d62-91f6-8bdcc264ef71/create-a-new-dns-domain-within-a-zone-using-script?forum=winserverDS
[2] Should engineering have its own DNS zone, delegate, or subdomain?
[3] Private DNS zone that resolves private subdomains, and forwards to public nameserver for existing public subdomains
windows-server-2016 internal-dns dns-zone windows-server-2019
I'm looking to obtain the same consequences of having a line server_ip domain_name (eg., 192.168.154.21 mywebsite.com) in the file hosts (/etc/hosts or %system32%/drivers/etc/hosts) but for all (or a subset if possible) computers of a private local domain (ie., a set of computers from an intranet), in the case of a private network (AD) of windows servers 2019. In particular, I want to add domains, and subdomains (eg., mywebsite.com, mail.mywebsite.com, api.mywebsite.com).
Let's have a domain controller (DC), also having a DNS role; all computers of the intranet have this DNS as first DNS, so they resolve to the domains I added. Should I use the DNS records, given that the DC will be the first DNS ? How ? Is there any alternative ?
Using DNS records would be my first thought, but this does not seems to be the right way:
Dnscmd tool can only create new zone and it cannot create domain. When
we want to create a subdomain in DNS server. it is recommanded to
create a new zone for the subdomain. It benifits the zone tranfer.
Thanks for your understanding.
[1] https://social.technet.microsoft.com/Forums/windows/en-US/5624ffbf-96dd-4d62-91f6-8bdcc264ef71/create-a-new-dns-domain-within-a-zone-using-script?forum=winserverDS
[2] Should engineering have its own DNS zone, delegate, or subdomain?
[3] Private DNS zone that resolves private subdomains, and forwards to public nameserver for existing public subdomains
windows-server-2016 internal-dns dns-zone windows-server-2019
windows-server-2016 internal-dns dns-zone windows-server-2019
edited Feb 6 at 13:32
Soleil
asked Feb 5 at 20:22
SoleilSoleil
1085
1085
It's not clear to me what it is that you're trying to accomplish. Can you add some more detail to your question?
– joeqwerty
Feb 5 at 22:02
@joeqwerty more details and examples added. Is it better ?
– Soleil
Feb 5 at 23:29
I think it's more a language barrier than a lack of information.
– Daniel
1 hour ago
@Daniel thanks for the suggestion
– Soleil
7 mins ago
add a comment |
It's not clear to me what it is that you're trying to accomplish. Can you add some more detail to your question?
– joeqwerty
Feb 5 at 22:02
@joeqwerty more details and examples added. Is it better ?
– Soleil
Feb 5 at 23:29
I think it's more a language barrier than a lack of information.
– Daniel
1 hour ago
@Daniel thanks for the suggestion
– Soleil
7 mins ago
It's not clear to me what it is that you're trying to accomplish. Can you add some more detail to your question?
– joeqwerty
Feb 5 at 22:02
It's not clear to me what it is that you're trying to accomplish. Can you add some more detail to your question?
– joeqwerty
Feb 5 at 22:02
@joeqwerty more details and examples added. Is it better ?
– Soleil
Feb 5 at 23:29
@joeqwerty more details and examples added. Is it better ?
– Soleil
Feb 5 at 23:29
I think it's more a language barrier than a lack of information.
– Daniel
1 hour ago
I think it's more a language barrier than a lack of information.
– Daniel
1 hour ago
@Daniel thanks for the suggestion
– Soleil
7 mins ago
@Daniel thanks for the suggestion
– Soleil
7 mins ago
add a comment |
1 Answer
1
active
oldest
votes
I ended up adding private domains in the DNS, itself in the DC box. For the other computers, I needed to make sure that the DC/DNS ip is the first DNS.
I manage the DNS scopes and records with IPAM, itself installed in another virtual machine (Windows Server 2019 with GUI).
I don't know if it's the best practice, but it works well; new AD computers can access directly to the private domains with minimal configuration. That's very convenient for development and testing, as well as for production.
add a comment |
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "2"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f952466%2fprivate-domains-redirection-for-members-of-ad-dns-or-something-else%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
I ended up adding private domains in the DNS, itself in the DC box. For the other computers, I needed to make sure that the DC/DNS ip is the first DNS.
I manage the DNS scopes and records with IPAM, itself installed in another virtual machine (Windows Server 2019 with GUI).
I don't know if it's the best practice, but it works well; new AD computers can access directly to the private domains with minimal configuration. That's very convenient for development and testing, as well as for production.
add a comment |
I ended up adding private domains in the DNS, itself in the DC box. For the other computers, I needed to make sure that the DC/DNS ip is the first DNS.
I manage the DNS scopes and records with IPAM, itself installed in another virtual machine (Windows Server 2019 with GUI).
I don't know if it's the best practice, but it works well; new AD computers can access directly to the private domains with minimal configuration. That's very convenient for development and testing, as well as for production.
add a comment |
I ended up adding private domains in the DNS, itself in the DC box. For the other computers, I needed to make sure that the DC/DNS ip is the first DNS.
I manage the DNS scopes and records with IPAM, itself installed in another virtual machine (Windows Server 2019 with GUI).
I don't know if it's the best practice, but it works well; new AD computers can access directly to the private domains with minimal configuration. That's very convenient for development and testing, as well as for production.
I ended up adding private domains in the DNS, itself in the DC box. For the other computers, I needed to make sure that the DC/DNS ip is the first DNS.
I manage the DNS scopes and records with IPAM, itself installed in another virtual machine (Windows Server 2019 with GUI).
I don't know if it's the best practice, but it works well; new AD computers can access directly to the private domains with minimal configuration. That's very convenient for development and testing, as well as for production.
answered 43 secs ago
SoleilSoleil
1085
1085
add a comment |
add a comment |
Thanks for contributing an answer to Server Fault!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f952466%2fprivate-domains-redirection-for-members-of-ad-dns-or-something-else%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
It's not clear to me what it is that you're trying to accomplish. Can you add some more detail to your question?
– joeqwerty
Feb 5 at 22:02
@joeqwerty more details and examples added. Is it better ?
– Soleil
Feb 5 at 23:29
I think it's more a language barrier than a lack of information.
– Daniel
1 hour ago
@Daniel thanks for the suggestion
– Soleil
7 mins ago