DNS Server Help

[MatthewL]

Our active directory is a mess it was an upgrade from NT years ago and we have people trying to mange it who have not got a clue.

We have 4 DC's in our domain which is xnlnelpct, and there is a root domain which is xnlhc.

The 4 DC's called br-nlnelpctad1 and br-nlnelpctad2 are based at site A and the others are pag-nlnelpctad3 and pag-nlnelpctad4 based at site B.

It's own DNS servers tend to be its self but not using the 127.0.0.1 address plus the other 3, and also in there it has the IP of the root domain (xnlhc).

Am I right in thinking that each DNS servers DNS settings should just be 127.0.0.1 and in the DNS server settings it should then point to the root DC?

Please help because our network is slowly coming to a halt and I am trying to prove that our DNS servers are setup wrong which are causing us so much of a headache.

[sukh]

Yes, point each DC to itself if DNS is also homed on it

What's in the root domain?

[MatthewL]

Not sure about the root domain as I do not have access to that domain. My guess would be our national DNS servers for our network.

[irsprint84]

Not sure about the root domain as I do not have access to that domain. My guess would be our national DNS servers for our network.

Do you mean your root forwarders?

[sukh]

that's fine, all your resources are in child domain and you should set as mentioned.

[MatthewL]

No they way our network is there is a national network we go through and for external DNS we point the servers to the national addresses.

[sukh]

so your child domain DNS servers can forward request to your root DNS servers for external lookups.

[MatthewL]

The DNS servers in the xnlnelpct domain forward anything they cannot resolve to xnlhc and if it cannot resolve it it pushes it to the external DNS which are hosted nationally.

[sukh]

so it's all working as it's supposed to, not sure what your question is now?

[MatthewL]

Attached are the NIC settings from pag-nlnelpctad4, also I have shown the forwarders so you can see what we have it set to. The 240 address is the root dc (xnlhc) and the 10.95 ones are one of our trusted domains but the is a trust between the root dc adn that domain.

[MatthewL]

Any ideas on this, what do I need to change if anything apart from the DNS setting on the LAN adapter.

[sukh]

Just what we disucussed above, if you have other issue like slow logon it could be something else thou DNS can be one issue.

If this is an issue, log you log abnd GPO processing and see what that comes back with

[MatthewL]

Thanks for the help, I will put it forward to those be to get it changed.