|
|
| cm2gj 2002-08-21, 10:42 am |
| Sometime ago i had problems with GPOs. Was repaired installing DNS with the AD implementation. I know that DNS is required for a properly working win2k AD enviroment.
A friend of mine say that he can install AD and later with months install DNS. I SAY that on that implementations the DNS implementation and AD is not correctly deployed because AD need DNS in the time that is implemented, not matter if is installed first or togheter with the DCPROMO.
iīm right?
i must install DNS with AD no?
if i install dns later the AD donīt work good no?
thanks | |
| KScheler 2002-08-21, 3:30 pm |
| You can have DNS without Active Directory but you can not have Active Directory without DNS.
That's the way I tell it to my students. | |
| Zaraspook 2002-08-21, 5:58 pm |
| Right! Active Directory is dependent upon DNS. They go hand in hand!  | |
| twister166 2002-08-21, 10:10 pm |
| Well, by definition when you install AD you need a DNS, but it does not have to be installed on that PC.
As long as the AD can have a DNS that supports dynamic binding, I think, you need to have a specific verion, don't remember now. | |
| jeff_j_black 2002-08-21, 10:27 pm |
| BIND 8.1.2 is the minimum or Windows 2000 DNS. Winnt 4.0 DNS does not support Windows 2000 AD. | |
| twister166 2002-08-21, 10:35 pm |
| =========================
BIND 8.1.2 is the minimum or Windows 2000 DNS. Winnt 4.0 DNS does not support Windows 2000 AD.
=========================
Thanks JB, it is always cool to have some to fill the void!  | |
| jeff_j_black 2002-08-22, 9:23 am |
| Just helpin' out and sharing helps keep the brain cells fresh. | |
|
| quote: Originally posted by KScheler
You can have DNS without Active Directory but you can not have Active Directory without DNS.
That's the way I tell it to my students.
i install in the past Active directory without DNS and works ok but i can`t use GPOs and have other limitattions on the domain.
by now i install EVER the DNS service and AD togheter to have apropiate pointers on the DNS, and make integrated zones every time is possible. this networks with DNS only works flawlesly and i use native mode all the time is possible!! | |
|
| quote: Originally posted by jeff_j_black
Just helpin' out and sharing helps keep the brain cells fresh.
this is true.
i share my knowledge with friends too, and this knowledge now is robust and hard to lost!! | |
|
| quote: Originally posted by twister166
Well, by definition when you install AD you need a DNS, but it does not have to be installed on that PC.
As long as the AD can have a DNS that supports dynamic binding, I think, you need to have a specific verion, don't remember now.
you need the DNS in the same pc if you have active directory integrated zones! | |
|
| quote: Originally posted by KScheler
You can have DNS without Active Directory but you can not have Active Directory without DNS.
That's the way I tell it to my students.
maybe don`t understand my questions. my question is: i can install DNS after AD implementation and receive the appropiate configuration on DNS? | |
| jeff_j_black 2002-08-22, 4:24 pm |
| Somewhere in the network that is reachable by the server that you are configuring, there has to be a DNS server that can support SRV records at minimum. When you run DCPromo it automatically searches for compatible DNS on the network. If it is not found DCPromo should not proceed. After you are able to locate a compatible DNS server, Active Directory will be installed. You will be able to at any time add DNS service to that server. Active Directory Integrated Zones can only be on Domain Controllers. But there can be domain controllers that do not run AD Integrated DNS, as long as they can communicate with a server that does. | |
|
| quote: Originally posted by jeff_j_black
Somewhere in the network that is reachable by the server that you are configuring, there has to be a DNS server that can support SRV records at minimum. When you run DCPromo it automatically searches for compatible DNS on the network. If it is not found DCPromo should not proceed. After you are able to locate a compatible DNS server, Active Directory will be installed. You will be able to at any time add DNS service to that server. Active Directory Integrated Zones can only be on Domain Controllers. But there can be domain controllers that do not run AD Integrated DNS, as long as they can communicate with a server that does.
agree with you on all lines.
some months ago i install active directory without any dns server on the newtork!! i don`t know how i do that!!!... but forgeret.... i had installed almost 18 domains every with their own dns server since that date.... by now i know that i need dns correctly installed with AD to have good SRV records.
i make a good implementations yesterday and works super fine!!... native mode with lots of OUs workings correctly!!.....
thanks for your sharing knowledge. seems like you have a lot of win2k knowledge and practice!! good!! thanks | |
| jeff_j_black 2002-08-22, 10:29 pm |
| Make sure to take 219 for design. It will really help to understand the sequence of things. First examine network topography, design the basice services around the business needs. Establish DNS and WINS, if neccessary. Place directory services access as close to end user as possible. | |
| Bingram 2002-08-23, 4:35 pm |
| Can you install AD then install DNS? Not really. Depends on what you define as "install DNS."
I am sort of skeptical of those who say they are running AD without DNS. When you run DCPROMO, and you don't have DNS installed or a DNS server on the network, the process will install DNS. HOWEVER, with that said, you do have the option to let DCPROMO to setup the DNS zone files or create them later yourself. You can opt to create DNS zone files later, if you wish. I've done it myself. Sort of leaves a lot of things hanging in AD, system generates a lot of warnings and alerts in the event logs. But AD works in a single server environment. | |
|
| quote: Originally posted by Bingram
Can you install AD then install DNS? Not really. Depends on what you define as "install DNS."
I am sort of skeptical of those who say they are running AD without DNS. When you run DCPROMO, and you don't have DNS installed or a DNS server on the network, the process will install DNS. HOWEVER, with that said, you do have the option to let DCPROMO to setup the DNS zone files or create them later yourself. You can opt to create DNS zone files later, if you wish. I've done it myself. Sort of leaves a lot of things hanging in AD, system generates a lot of warnings and alerts in the event logs. But AD works in a single server environment.
agree.
i see that stuff on real life. you must install dns & AD and need apropiate SRV records to have a good implementations. without srv records the network will be slow and services are hard to locate. GPOs donīt work without SRV! |
|
|
|