Re: Cannot join Domain
Joe wrote:
> Terry wrote:
>> OK but as I said the IPS owns the router, it was like pulling teeth to
>> have them point the first DNS IP to the server. THey will NOT allow us
>> to remove it form doing DNS
>>
> That doesn't really matter, there can be any number of DNS servers in a
> network. It's up to a client which server it uses. It's DHCP where only
> a single server is practical, and if your SBS has two NICs then it
> doesn't matter whether the router is a DHCP server or not, as the
> workstations won't see it. Nor does the router need to use SBS as its
> DNS server, but the SBS and all its domain member computers *must* do so.
>
> That point cannot be overemphasised. The SBS and all its domain member
> clients must shown *only* the SBS LAN IP address under DNS servers as
> listed by an ipconfig command. The SBS DNS server provides
> domain-specific information which no public DNS server can possibly have.
>
> The SBS may use either a local router, the ISP's DNS servers (which the
> router probably uses anyway), any other public DNS servers, or none at
> all as its DNS *forwarders*, for lookups of public Internet IP
> addresses, and these addresses are entered (or not) in the CEICW wizard.
>
> Under normal conditions, the SBS runs both DHCP and DNS servers for its
> workstations, which are all set to get IP address and DNS server
> information automatically. No domain machine should ever need or get IP
> or DNS server addresses set manually in TCP/IP properties. If any need
> fixed addresses, find out their MAC addresses and set up DHCP
> reservations for them.
"The SBS and all its domain member clients must shown *only* the SBS LAN
IP address under DNS servers"
This is wrong. You obviously put the SBS box in there first but having
other external DNS IPs allows the clients to resolve and still use the
Internet if the server is down. Also if there is a second domain
controller that would be listed.
Note that if you use the 2 NIC solution then you will not be able to get
to any DNS servers of course - but that way of setting up SBS is
completely wrong as far as I'm concerned in most installs. Thank
goodness MS has seen sense and scrapped this idea with SBS 2008.
|