How To Properly Setup DNS Forwarders On Windows Server

domain-controllerdomain-name-systemforwardinginternal-dnswindows-server-2008-r2

I was wondering how to properly setup DNS forwarders on Windows Server 2008 R2. I have three Domain Controllers. Each of the DC's have have following:

  1. AD Role
  2. DNS Role
  3. DHCP Role
  4. Static IP Address
  5. Windows Server 2008 R2 SP1
  6. 64 Bit

I noticed under DNS Forwarders, that each DC only has one other DC listed and not both DC's. Here is a picture:

enter image description here

Is it correct to only have one DC listed, or should I list the other DC as well?

Best Answer

You shouldn't have a reason to forward to other AD servers, as DNS should be replicating between them already.

The only reason I can think of for this would be if you wanted only one DNS server to be the one querying the internet for non-authoritative FQDNs.

Usually the forwarders (used to resolve non-authoritative lookups) are set to external DNS servers like your ISP's or a common public resolver like 8.8.8.8 or just use Root Hint servers.

Conditional forwarding is different though...