Should all domain controllers be listed in DNS (and where)?
When I took over this school the servers were in a bit of a mess. One was failing and the other had failed.
When I got things back up and running there were all kinds of nasties in the DNS. I cleared out anything I thought shouldn't be there and brought in a second domain controller.
It seems to be doing it's job ok but every so often there's an error in the event log. I had originally put it down to problems with Windows Server 2003 64 bit edition and a compatibility issue.
But looking in the DNS I find entries for this DC in all areas where the other DC is.
Only one of the servers handles DNS, so should all these entries for the second DC also be in the same place, or should the only entry be in the forward and reverse look up zones alongside all the other machines on the network?
Ideally I'd like to introduce a new DC to see what gets added where, then decomission the 64 bit horror, but no funds or equipment are available to do this.