Configuring DNS for Active Directory - MCTS Guide to Microsoft Windows Server 2008 Active Directory Configuration - page 377

Activity 9-8: Configuring Zone Transfers

Time Required: 10 minutes
Objective: Configure an Active Directory-integrated zone to allow zone transfers.
Description: You plan to create some secondary zones for your primary Active Directory-
integrated zone, so you need to enable and test zone transfers.
1. Log on to ServerXX as Administrator and open DNS Manager, if necessary.
2. Open a command prompt window. Type nslookup and press Enter .
3. Type ls -d w2k8adXX.com and press Enter . This command is supposed to display all the
zone records via a zone transfer. You should get an error message stating that the DNS server
refused to transfer the zone. Next, you enable zone transfers.
4. In the left pane of DNS Manager, click to expand ServerXX , if necessary, and click to expand
Forward Lookup Zones and then w2k8adXX.com . Right-click w2k8adXX.com and click
Properties .
5. Click the Zone Transfers tab, and then click the Allow zone transfers check box. By allow-
ing zone transfers to any server, no further zone configuration is needed to transfer the zone.
On a server that's accessible from the Internet, be aware that you don't want to allow zone
transfers to just any server. Click OK .
6. Go back to the command prompt window where Nslookup is running. Type ls -d
w2k8adXX.com and press Enter . You should see a lengthy display of the zone information.
7. Leave DNS Manager open for the next activity.

9

Activity 9-9: Creating a Standard Primary Zone

Time Required: 15 minutes
Objective: Create and configure a standard primary zone.
Description: You have a server configured with the DNS Server role that's not running Active
Directory. You need to create a standard primary zone for a group of UNIX and Linux com-
puters. (In this activity, you create the zone on Server1XX, even though it does have Active
Directory installed.)
1. Log on to Server1XX as Administrator and open DNS Manager, if necessary.
2. Right-click Forward Lookup Zones and click New Zone . In the New Zone Wizard's wel-
come window, click Next .
3. In the Zone Type window, leave the default setting for the zone type (primary), click to clear
the Store the zone in Active Directory check box, and then click Next .
4. In the Zone name text box, type TestZone.com . (If you're creating a zone for internal use
only, following DNS namespace syntax isn't necessary, so you could have named the zone
TestZone.) Click Next .
5. Accept the default filename TestZone.com.dns, and then click Next .
6. In the Dynamic Update window, verify that the default setting Do not allow dynamic
updates is selected, click Next , and then click Finish .
7. In the left pane of DNS Manager, click to expand TestZone.com . Notice that the SOA and
NS records are created automatically. Right-click TestZone.com and click New Host (A or
AAAA) .
8. In the New Host dialog box, type test1 in the Name text box and 192.168.110.1 in the IP
address text box. (The address you use doesn't matter in this case because this record is just
used as a test. Normally, of course, you enter the address assigned to the host computer.) Click
to clear the Create Associated pointer (PTR) record check box, and then click Add Host .
9. You should get a success message. Click OK , and then click Done .