Windows Domain Server DNS Settings

domain-controllerdomain-name-system

This should be a really simple question I hope. I have configured Windows domain servers in my home environment before, and set up the network adapter like so:

IP: 192.168.1.2
Gateway: 192.168.1.1

Primary DNS: 127.0.0.1

The gateway is a router. Presumably the domain server gets its "upstream" (i.e., internet) name resolution requests handled by the router. I now have a dedicated server with a commercial provider, but after upgrading it to a domain server, I lost upstream name resolution. I can ping IP addresses just fine.

IP: 192.168.1.2
Gateway: 192.168.1.1

Primary DNS: 127.0.0.1

The IP and gateway addresses aren't the real ones, this is just for the sake of example. I figure the problem is that before the upgrade the primary/secondary DNS on the adapter was pointing to their name servers, and the problem now is that the gateway is not a name server. Would the solution be to just change the primary/secondary DNS to their name servers, or do I have to do something more complicated in the server's DNS configuration? Thanks.

Best Answer

You've not mentioned what version of Windows Server you're running, but if it's 2008 or later you should be able to configure the DNS server with a forwarder. This is basically the upstream DNS server that the domain server forwards all requests that it is not authoritative for.

See this technet article for a step-by-step guide.

Changing the DNS settings on the domain server itself is a bad idea. Windows domains rely heavily on DNS records for the domain being both (a) correct and present and (b) updatable by the relavent components so that domain resources can be located. I'd only change the DNS server on the domain controller if I were to move the DNS server role off the DC onto a separate, dedicated box.