Remote office, no DC and a public DNS Server

-

we trying unique setup, turning out more trouble expected.

we have 1 office, contains our servers, dhcp, dns, dc, exch, file...etc   office has own internet connection.

servers: 192.168.0.109 our dns , dc server.

we have second office, connected main office via fiber connection.   second office disaster muster zone , needed connect them own internet connection.  essentially, if main office down, office needs have access internet.

we configured firewall on remote office side use 8.8.8.8 , 192.168.0.109 our dns, when try ping dc name not resolve.

we have added names/ips house files, allows resolve servers name, not able authenticate ad @ all.  when log computers logging in via cached credentials , when try access network shares, need enter credentials.

is trying possible without having local dc

using 1 public , 1 internal dns in same dns server list definetly not idea because query results unpredictable because hard predict of dns servers used process query. if firewall supports it, can use conditional forwarding or dns views configure firewall forward queries internal names internal dns , send rest public dns.

so, scenario absolutely possible, have name resolution right: queries names in ad domain should forwarded dc/dns server, while rest can sent public dns.

gleb.



Windows Server  >  Directory Services



Comments

Post a Comment

Popular posts from this blog

Global Catalog ?

-
greetings! we have set 2008 r2 x64 server in our company. -we promote server dc -we add ad roles -we have transfered fsmo roles on server -we have add dns role on server question: server going our primary dc, cause old 1 eventualy going shut down completely. must still export , import dhcp new server. problem/question global catalog. have 1 forest, 2 domains. in primary domain 3 dc's (this new server 1 of them), , in child domain have 2 dc's. -is wrong if new server holds global catalog? read somewhere fsmo roles , global catalog together, not recommended? -would wrong if every dc in our company global catalog? with best regards, bostjan bostjanc you have 2 domains. need 1 schema master , 1 domain naming master in forest. recommended these roles reside on dc's in root domain, not required. need 1 pdc emulator, rid master, , infrastructure master each domain. in case, in both of your domains, either dc's should gc's, or infrastructure ma...
Read more

mailing list

-
how create mailing list see article "creating mail merge data source” at: http://www.word.mvps.org/faqs/mailmerge/createadatasource.htm  -- hope helps. doug robbins - word mvp, dkr[atsymbol]mvps[dot]org posted via community bridge "mailing list" wrote in message news:25d6abcb-1717-4ec8-9587-860696c38f53@communitybridge.codeplex.com... how create mailing list doug robbins - word mvp dkr[atsymbol]mvps[dot]org Microsoft Office  >  Word IT Pro Discussions
Read more

Global Catalog

-
why recommended microsoft have global catalog in domain controller? why message import infrastructure master role in case not install global catalog in secondary dc? you can read here. https://technet.microsoft.com/en-us/library/cc737269(v=ws.10).aspx  in single-domain forest, configure domain controllers global catalog servers. because every domain controller stores domain directory partition in forest, configuring each domain controller global catalog server not require additional disk space usage, cpu usage, or replication traffic. in single-domain forest, domain controllers act "virtual global catalog servers" in can respond authentication or service request. special condition single-domain forests design (authentication requests not require contacting global catalog server, when there multiple domains , user can member of universal group exists in different domain). however, domain controllers designated global catalog servers can respond global catalog...
Read more