{"id":1940,"date":"2016-11-03T18:45:22","date_gmt":"2016-11-03T18:45:22","guid":{"rendered":"http:\/\/microsoftgeek.com\/?p=1940"},"modified":"2016-11-03T19:29:17","modified_gmt":"2016-11-03T19:29:17","slug":"configure-dns-server-zones-fully-on-windows-server-2016","status":"publish","type":"post","link":"https:\/\/microsoftgeek.com\/?p=1940","title":{"rendered":"Configure DNS Server Zones Fully on Windows Server 2016"},"content":{"rendered":"

After installing DNS, of course, you need to configure DNS because it is an important task to make DNS work correctly. DNS stands for Domain Naming System\u00a0<\/strong>and the goal of DNS is to change name to IP address and and IP address to name like when you open a server or a web page, you enter a name like www.MicrosoftGeek.com<\/strong>, here the DNS server changes the name to the IP and you can visit the web page or get access to server sources. In this article, I show you how to come along to configure DNS Server fully on Windows Server<\/strong>.<\/p>\n

 <\/p>\n

Configure DNS Server Fully Step by Step<\/h2>\n

The DNS configuration is somehow like installing it, means you don\u2019t need to worry or call any administrator to do it because you can do it along by this article, let\u2019s move towards it.<\/span><\/p>\n

<\/div>\n

1.<\/strong> When the DNS Server role installed, open the Server Manager<\/strong> window, click on tools<\/strong> tab that the dropdown menu appears and click on the DNS<\/strong> icon to open the DNS.\u00a0<\/strong>Here I have named my server\u00a0tactig-dc01.<\/p>\n

\"Server
Server Manager<\/figcaption><\/figure>\n

2.<\/strong>\u00a0At the first, what we need to do is creating a zone, it is a part of a DNS that the records are restored, for that purpose right click on your computer DNS server name and click on the New zone<\/strong>.<\/p>\n

\"DNS
DNS Manager<\/figcaption><\/figure>\n

3.<\/strong> Skip the welcome page and on the next page, you\u2019ll see three kinds of zone available.<\/p>\n

    \n
  • Primary zone:\u00a0<\/strong>is rewritten zone that is not copied from somewhere.<\/li>\n
  • Secondary zone:<\/strong> is the copy of another zone, when you create a secondary zone you should copy the records from another source.<\/li>\n
  • Stub zone:<\/strong> is providing information whatever server\u00a0holds a special zone. We want to create a primary zone, then click on that then hit Next<\/strong>.<\/li>\n<\/ul>\n
    \"Primary
    Primary zone<\/figcaption><\/figure>\n

    4.<\/strong> In the next page, you will be asked about replication method.<\/p>\n

      \n
    • The first option, (To\u00a0all DNS servers running on domain controller in this forest: <domain\u00a0name>\u00a0<\/strong>is used when you want to replicate with the domains and subdomains in the forest but that increases the network traffic.<\/li>\n
    • The second option, (To all DNS servers running on domain controllers in the domain: <domain name><\/strong> is used when you want you DNS server replicate with all DNS servers in in your own domain.<\/li>\n
    • The third option, (To all domain controllers in this domain (for Windows 2000 compatibility): <domain name><\/strong> is used when you want your server replicate with only domain controllers in your own domain. Select\u00a0the 2nd option.\u00a0Hit Next<\/strong>.<\/li>\n<\/ul>\n
      \"Replication
      Replication Scope<\/figcaption><\/figure>\n

      5.<\/strong> In the forward or reverse lookup zone page, select Forward lookup zone<\/strong>. The Forward lookup zone translates DNS name to IP address and the 2nd option, Reverse lookup zone<\/strong> translates IP to DNS name, just select\u00a0Forward lookup zone\u00a0<\/strong>then hit Next,\u00a0<\/strong>we will configure the Reverse lookup zone later.<\/p>\n

      \"Forward
      Forward lookup zone<\/figcaption><\/figure>\n

      6.<\/strong> Specify a name for the zone then click on the Next<\/strong> button.<\/p>\n

      \"Zone
      Zone name<\/figcaption><\/figure>\n

      7.<\/strong> How do you want your zone contents update mode? The recommended option is Allow only secure updates<\/strong>. This option helps you DNS server not to be affected by spywares and viruses, \u00a0select the first option and hit Next<\/strong>.<\/p>\n

      \"Dynamic
      Dynamic update<\/figcaption><\/figure>\n

      8.<\/strong>\u00a0After continuing, your primary zone is created, just click on the Finish<\/strong> button to start working it.<\/p>\n

      \"Finish
      Finish wizard<\/figcaption><\/figure>\n

      Now the zone has created successfully but the DNS configuration is not done fully yet and the secondary zone as mentioned before is copy of another zone. It means you should copy the contents from somewhere else. Now I want to show you how to create a secondary zone. You need one another server, DNS server installed on. I name the new DNS server: tactig-dns02. The new server that we try to use as a second DNS server should be member of the Active Directory Directory Services. You can do that. If not read the articles about in this website.<\/p>\n

      1.<\/strong> Now we\u2019ll work on tactig-dns02<\/strong> server, \u00a0open the DNS Manager<\/strong>\u00a0tool and right-click on the Forward lookup zone, <\/strong>click on the New zone<\/strong> then skip the welcome page by hitting Next<\/strong>. In the Zone Type page, select the Secondary zone<\/strong>.<\/p>\n

      \"Secondary
      Secondary zone<\/figcaption><\/figure>\n

      2.<\/strong> In the forward or reverse lookup zone page, select the Forward lookup zone<\/strong> option. It changes the DNS names to IP address. Then click on Next<\/strong> button.<\/p>\n

      \"Forward
      Forward lookup zone<\/figcaption><\/figure>\n

      3.<\/strong> Specify a name for the zone. Enter name of a zone that you\u2019ve created before as a primary zone. Here you will have copy of the primary zone as a secondary zone.<\/p>\n

      \"Zone
      Zone name<\/figcaption><\/figure>\n

      4.<\/strong> In the Master DNS Servers<\/strong>\u00a0page, you need to specify the master server. The Master server is the server that you\u2019ve a zone out there and you want to copy its contents in your new secondary zone. Enter the master server\u2019s IP address\u00a0<\/strong>and\u00a0the IP will be resolved. If the IP is correct, a green check mark will appear next to the IP address box then click on Next<\/strong> button.<\/p>\n

      \"DNS
      DNS Master Servers<\/figcaption><\/figure>\n

      5.<\/strong>\u00a0When the Secondary zone is created, just click on the Finish<\/strong> button.<\/p>\n

      \"Finish
      Finish zone wizard<\/figcaption><\/figure>\n

      6.<\/strong>\u00a0Now click on the new zone you just created, you\u2019ll see the Red x<\/strong>\u00a0means no content is present and not working properly as mentioned before you should copy the contents from somewhere else.<\/p>\n

      \"No
      No Records<\/figcaption><\/figure>\n

      7.<\/strong> Go back to tactig-dns01 server, expand the Forward lookup zone mode and right-click on the zone that you want to get a copy from then select Properties<\/strong>.<\/p>\n

      \"Properties\"
      Properties<\/figcaption><\/figure>\n

      8.<\/strong>\u00a0Here select the Name Servers<\/strong> tab and add the server that you\u2019ve installed the secondary zone on, here. When you add the name in the list you can copy the contents. For the purpose click on the Add<\/strong> button.<\/p>\n

      \"Name
      Name Servers<\/figcaption><\/figure>\n

      9.<\/strong> Type the server\u2019s fully qualified domain name (FQDN<\/strong>) in the box as shown and below that box, enter the server\u2019s IP address. When you resolve the server a message appears, don\u2019t be worried because the message tells you that your server is not authoritative for the zone that\u2019s what we know that. We just we want to make a copy of the zone \u00a0and click on OK<\/strong>button.<\/p>\n

      \"Name
      Name Server Record<\/figcaption><\/figure>\n

      10.<\/strong> Now come back to tactig-dns02 server, right-click on the zone you created and select Transfer from Master<\/strong>.<\/p>\n

      \"Transfer
      Transfer form master<\/figcaption><\/figure>\n

      11.<\/strong>\u00a0Refresh the page clicking on the Refresh<\/strong> button and you\u2019ll see all the records you could see in tactig-dns01 server zone, now the secondary zone is created and configured properly.<\/p>\n

      \"Secondary
      Secondary zone records<\/figcaption><\/figure>\n

      Another\u00a0next important point\u00a0for the DNS configuration is that you should learn what is Reverse Lookup Zone. The Reverse Lookup Zone do opposite to what Forward Lookup Zone does means\u00a0It change IP address to DNS name,<\/strong>\u00a0when you\u2019ve or give an IP address, it gives you the DNS name. For doing this, we need just one DNS server and I\u2019ll use my root DNS\u00a0server (tactig-dns01<\/strong>).<\/p>\n

      1.<\/strong> It is created the same as primary and secondary zones so expand the server name and\u00a0right-click on the Forward Lookup Zone\u00a0<\/strong>then\u00a0select New Zone<\/strong>. When the page appears, skip the welcome page and select Primary zone\u00a0<\/strong>then hit Next, leave the next step as default and hit Next<\/strong>. Here Select IPv4 Reverse Lookup Zone <\/strong>or IPv6 reverse lookup zone<\/strong>\u00a0then hit Next,\u00a0<\/strong>we use IPv4 version in our networks so you can choose the one you want to use.<\/p>\n

      \"IPv4
      IPv4 Reverse Lookup Zone<\/figcaption><\/figure>\n

      2.<\/strong>\u00a0At this point, the Network ID<\/strong> is needed for the zone, specify the Network ID <\/strong>then hit Next\u00a0<\/strong><\/strong>( The Network ID is your network\u2019s IP address.<\/p>\n

      \"Network
      Network ID<\/figcaption><\/figure>\n

      3.<\/strong> Select the Allow only secure dynamic update<\/strong> option and click on Next<\/strong> button then finish<\/strong> the wizard to completely finish the configuration.<\/p>\n

      \"Finish
      Finish Wizard<\/figcaption><\/figure>\n

      4.<\/strong> Run PowerShell<\/strong> as administrator<\/strong>. Type this command: ipconfig \/registerdns<\/strong>. Press Enter<\/strong> button.<\/p>\n

      \"Register
      Register DNS<\/figcaption><\/figure>\n

      5.<\/strong> Refresh the Forward Reverse Zone<\/strong> node, you will see that an IP address is added there and you are done!<\/p>\n

      \"Forward
      Forward Reverse Zone<\/figcaption><\/figure>\n

      Conclusion:<\/strong>\u00a0The DNS configuration is completely done. Yes,\u00a0this was the basic configuration of DNS and the Advanced configuration of the DNS is more complicated.<\/p>\n","protected":false},"excerpt":{"rendered":"

      After installing DNS, of course, you need to configure DNS because it is an important task to make DNS work correctly. DNS stands for Domain Naming System\u00a0and the goal of DNS is to change name to IP address and and IP address to name like when you open a server or a web page, you […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[45,63],"tags":[],"class_list":["post-1940","post","type-post","status-publish","format-standard","hentry","category-domain-name-system-dns","category-server-2016-2016"],"_links":{"self":[{"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=\/wp\/v2\/posts\/1940","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1940"}],"version-history":[{"count":2,"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=\/wp\/v2\/posts\/1940\/revisions"}],"predecessor-version":[{"id":1945,"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=\/wp\/v2\/posts\/1940\/revisions\/1945"}],"wp:attachment":[{"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1940"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1940"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/microsoftgeek.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1940"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}