Windows DNS Zone Demonstration

This video will look at how to create primary, secondary, stub zones, and reverse look up zones using Microsoft DNS server. Check out    / itfreetraining   or http://itfreetraining.com for more of our always free training videos. The video also looks at how to replicate changes between different zones. By the end of video you will be able to create the correct zone for your replication needs inside your company and also to external companies.

Download the PDF handout http://ITFreeTraining.com/handouts/dn...

Demonstration
This video uses Remote Server Administration Tools (RSAT) on Windows 8. To install, see the following link. http://itfreetraining.com/tools

1. To open DNS Manager, open charms by moving the mouse to the top right hand corner of the screen and then perform a search for dnsmgmt.msc
2. If you receive a prompt for the server, enter the name of the server that is running DNS. In this case, DNS is running on the Domain Controller NYDC1.
3. When you expand down through DNS Manager, there is a section called Forward Lookup Zones. This section will contain all zones except for reverse look up zones. In this case, a domain exists so the zone ITFreeTraining.local has automatically been created and DNS records have been added to it. To find out more information about a particular zone, right click the zone and select properties.
4. In the properties of the zone, at the top is section called type. This will tell you if the zone is Active Directory Integrated, Primary, Secondary or Stub zone. If you want to change the type of zone, press the button "change" next to it.
5. On the change zone type "dialog", if you un-tick the option "Store the zone in Active Directory (available only if DNS server is a domain controller)", this will remove the zone from Active Directory and store it in a text file. If the zone file is stored in Active Directory, it will be available from any Domain Controller in the domain that has DNS installed on it. It may also be available to other Domain Controllers with DNS installed on them if the replication for the DNS zone is configured for forest wide replication.
6. If a zone is changed so it not stored in Active Directory, dynamic updates will be changed to none. Secure dynamic updates are only available for Active Directory Integrated zones. If you have a non- Active Directory Integrated zone, it can only support secure updates if non-secure updates are allowed as well.
7. To connect to another Windows DNS server, right click DNS at the top and select the option "Connect to DNS Server" and then enter in the name of the computer that you want to connect to.
8. To create a new zone, right click on Forward Lookup Zones and select the option "new zone" to launch the new zone wizard. From the wizard, select the zone that you want, these can be primary zone, secondary zone, or stub zone. If the option "Store the zone in Active Directory (available on only if DNS server is a writeable domain controller" is grayed out, DNS is not installed on a server that is a Domain Controller.
9. If you are creating a new secondary zone, the wizard will ask for the name of the DNS zone and then ask for an IP Address of a master zone. This can be any DNS server that has a copy of the DNS zone and does not matter if it is Active Directory Integrated, Primary or Secondary. If you receive an error message stating "Validation error, please try again later" it is most likely that the other DNS server has not been configured to replicate zone data.
10. To configure a zone to allow zone transfers, right click the zone and select properties. From here, select the tab "zone transfers". In order to allow other DNS servers to transfer zone data from that zone, the option "Allow zone transfers" needs to be ticked. By default this option is not ticked. There are 3 different options available. These are, "To any server", "only to servers listed on the Name Servers tab" and "Only to the following server". If you select the option "to any server", this will allow zone transfers to anyone who asks for it. This can be used by a hacker to gain information about the network, called foot printing. If your DNS server is behind a firewall, this may be an acceptable security risk. If the option "Only to servers listed on the Name Server tab" is selected, then only DNS servers that are listed on the Name Server Tab in the properties for that zone will be allowed to receive zone transfers.

Description to long for YouTube. Please see the following link for the rest of description.
http://itfreetraining.com/dns#zone-demo


See    / itfreetraining   or http://itfreetraining.com for our always free training videos. This is only one video from the many free courses available on YouTube.

References
"Name server" https://en.wikipedia.org/wiki/Name_se...