Task 8 ‐ DNS in Active Directory - Campus-Castolo/m159 GitHub Wiki

Transfer new 'non-AD integrated' forward zone

Creation of Forward Zone on DC1

Create a new forward zone on DC1 with the name "lab.sv.swvt" that is not integrated into Active Directory.

  1. Open DNS Manager on DC1 by typing dnsmgmt.msc in the Run dialog or Command Prompt.
  2. Navigate to Forward Lookup Zones under the DC1 server.
  3. Right-click on Forward Lookup Zones and select New Zone.
  4. New Zone Wizard:
    • Select Primary Zone and ensure Store the zone in Active Directory is unchecked (this keeps it non-AD integrated).
    • Click Next, then enter lab.sv.swvt as the zone name.
    • Configure any additional settings as desired, then click Finish to create the zone.

Add DC2 to Nameserver

Add DC2 to the nameservers of this new forward zone and allow all nameservers to perform a zone transfer.

  1. In DNS Manager on DC1, right-click the lab.sv.swvt zone and select Properties.
  2. Go to the Name Servers tab:
    • Click Add, enter the fully qualified domain name (FQDN) of DC2, then enter its IP address.
  3. Navigate to the Zone Transfers tab:
    • Check Allow zone transfers and select To any server (or specify the servers allowed if more restrictive control is preferred).
    • Click OK to apply changes.

Create Secondary Zone on DC2

On DC2's DNS, create a secondary zone for "lab.sv.swvt"

  1. On DC2, open DNS Manager by typing dnsmgmt.msc in the Run dialog or Command Prompt.
  2. In the Forward Lookup Zones area, right-click and choose New Zone.
  3. New Zone Wizard:
    • Choose Secondary Zone and click Next.
    • Enter lab.sv.swvt as the zone name.
    • Specify DC1's IP address as the Master DNS Server (this is the server it will pull the zone information from).
    • Click Next, then Finish to create the secondary zone.

Screenshot of Secondary Zone on DC2

Take a screenshot of the secondary zone on DC2 and save this screenshot in the portfolio. image