Windows – the proper position for the loopback address in a DNS server selection list

domain-name-systemloopbackwindows

Best practices indicate that one should list 127.0.0.1 in the DNS list for the network adapter configuration for a Domain Controller, but not as the first one. With that said, what is the best place to put it in a list with more than two DNS servers listed? Second, last, or it doesn't matter? Also helpful would be an explanation as to why.

Related question: What should the order of DNS servers be for an AD Domain Controller and Why?

Best Answer

In Windows 2000 era, typically you would criss cross them:

DC/DNS Server A: Primary DNS points to Server B Secondary DNS points to Loopback

DC/DNS Server B: Primary DNS points to Server A Secondary DNS points to Loopback

That was how I last understood it to be at least, and I believe it was someone on here who even corrected me about it.

EDIT: It looks like that best practices link in the other question linked above indicates the above to be correct. I suggest you follow that. I have removed my other lines as I do not want to confuse anybody!

Your primary nameserver should be another server with low latency, preferably in the same site in AD Sites and Services. That way replication partners can be quickly discovered and if something is wrong with the DNS service starting you can still perform resolution. You can also specify tertiary servers, but the order past the primary is for the most part irrelevant.