Windows DNS Zone Demonstration

Demonstration

2. If you receive a prompt for the server, enter the name of the server that is running DNS. In this case, DNS is running on the Domain Controller NYDC1.
4. In the properties of the zone, at the top is section called type. This will tell you if the zone is Active Directory Integrated, Primary, Secondary or Stub zone. If you want to change the type of zone, press the button "change" next to it.
5. On the change zone type "dialog", if you un-tick the option "Store the zone in Active Directory (available only if DNS server is a domain controller)", this will remove the zone from Active Directory and store it in a text file. If the zone file is stored in Active Directory, it will be available from any Domain Controller in the domain that has DNS installed on it. It may also be available to other Domain Controllers with DNS installed on them if the replication for the DNS zone is configured for forest wide replication.
6. If a zone is changed so it not stored in Active Directory, dynamic updates will be changed to none. Secure dynamic updates are only available for Active Directory Integrated zones. If you have a non- Active Directory Integrated zone, it can only support secure updates if non-secure updates are allowed as well.
7. To connect to another Windows DNS server, right click DNS at the top and select the option "Connect to DNS Server" and then enter in the name of the computer that you want to connect to.
8. To create a new zone, right click on Forward Lookup Zones and select the option "new zone" to launch the new zone wizard. From the wizard, select the zone that you want, these can be primary zone, secondary zone, or stub zone. If the option "Store the zone in Active Directory (available on only if DNS server is a writeable domain controller" is grayed out, DNS is not installed on a server that is a Domain Controller.
9. If you are creating a new secondary zone, the wizard will ask for the name of the DNS zone and then ask for an IP Address of a master zone. This can be any DNS server that has a copy of the DNS zone and does not matter if it is Active Directory Integrated, Primary or Secondary. If you receive an error message stating "Validation error, please try again later" it is most likely that the other DNS server has not been configured to replicate zone data.
10. To configure a zone to allow zone transfers, right click the zone and select properties. From here, select the tab "zone transfers". In order to allow other DNS servers to transfer zone data from that zone, the option "Allow zone transfers" needs to be ticked. By default this option is not ticked. There are 3 different options available. These are, "To any server", "only to servers listed on the Name Servers tab" and "Only to the following server". If you select the option "to any server", this will allow zone transfers to anyone who asks for it. This can be used by a hacker to gain information about the network, called foot printing. If your DNS server is behind a firewall, this may be an acceptable security risk. If the option "Only to servers listed on the Name Server tab" is selected, then only DNS servers that are listed on the Name Server Tab in the properties for that zone will be allowed to receive zone transfers.

Description to long for YouTube. Please see the following link for the rest of description.

References

[tony]

Still relevant to this day and fundamental information that is missed in training. Always loved your videos and regularly come back to them for a refresher. Thanks so much for sharing.

[davidadams]

Fantastic video! But I'll have to watch again just to fully integrate the information, as you cover much that's above my head. I'm only just learning server administration and, though DNS is straightforward, there is a lot of information to learn.

[muhammadsafdar]

Indeed, the best video i have ever seen on dns. Thank you soo much for sharing such quality info with us free of cast

[TokyoUnderworld]

at 4:00, you don't click "apply". is this on purpose not to save the changes?

[eliaszeray]

Great explanation and please, feed us such kind of video on powerdns on Linux machine. Thank u.

[sunil]

How can DNS validate whether that particular name server is an Authoritative server or not. Since you got an error while adding a name server "The server with this IP addresses is not an authoritative for the required zone" I'm bit confused here.

[k.chriscaldwell]

Thank you.

Would it be possible to publish somewhere the configuration of the test network used in this video? I would like to replicate it in my lab. I have become lost stopping and starting to attempt the configuration of my network to duplicate yours.

Regardless, thank you for the tutorial.

[fernandodicarlo]

Sir, what is the video about "DHCP provides updates to client that cannot use secure update"?

[aualex]

great video!
May I ask two questions please?
1.How do I setup a secondary domain with DNS server which replicate the primary dc?
2. If I setup 2 primary zones in forward zone, the host A record will be updated on both or it will be updated on one of them only (Assuming i have a host desktop resolved a www.google.com via the dns server)

Thanks

[calebpanahon]

Hi Sir, Correct me please if Im wrong.. Can we consider this secondary zone as our alternate dns server since it holds the up to date copy of zone file? Thank you very much for this videos.

[itfreetraining]

DNS is running on Windows Server 2012 or Windows Server 2012 R2. Windows 8 is only used to perform remote administration. The procedure used in this demo will work on Windows Server 2000, 2003, 2008, 2012 as nothing in DNS and changed. I guess we could put something at the start of the video saying the video applies to all OS's. We will update the playlist and web site once enough of the DNS course is done. We got to many complains about releasing the intro videos before the course was finished.