Hi...

An inherited DNS environment is currently configured with one of the
existing domain trees using AD-Integrated zones at the same level:

internal.company.com (root)
site.internal.company.com (child)

I'd like to change the DNS structure without modifying any domain
names. Ideally, I would have made the root of the forest simply
"company.com" and removed the "internal.", making the site the actual
child domain:

company.com (root)
--site.company.com (child)

Since I think I'm stuck with internal.company.com as the root (without
completely redesigning things), is there a way at least to get the
child domain to appear properly underneath it?

internal.company.com
--site.internal.company.com (child)

In news:1162831444.998248.85960@m73g2000cwd.googlegro ups.com,
benr_b@hotmail.com <benr_b@hotmail.com> stated, which I commented on below:
> Hi...
>
> An inherited DNS environment is currently configured with one of the
> existing domain trees using AD-Integrated zones at the same level:
>
> internal.company.com (root)
> site.internal.company.com (child)
>
> I'd like to change the DNS structure without modifying any domain
> names. Ideally, I would have made the root of the forest simply
> "company.com" and removed the "internal.", making the site the actual
> child domain:
>
> company.com (root)
> --site.company.com (child)
>
> Since I think I'm stuck with internal.company.com as the root (without
> completely redesigning things), is there a way at least to get the
> child domain to appear properly underneath it?
>
> internal.company.com
> --site.internal.company.com (child)

This is a tough one, and depending on how many records you have in the child
zone, will dictate whether you want to go thru this.

I just experimented with this, as well as you can too with your own DNS
server, by creating a test zone, which it MUST be non-AD Integrated, or a
Primary Zone not stored in AD, (so you can easily see the physical layout of
the zone records) and call it domain.com, then create a child zone, not AD
integrated as well, and call 'child.domain.com'. What happens is in
domain.com's zone, a delegation appears for the child.domain.com zone
telling it to look for itself (own DNS server IP address) to find the child
zone. THen look at the reords

The way I got it to work is that you first have to make both zones text
files, meaning uncheck the box to make it AD Integrated, and just make it a
Primary zone. Sure this will remove it off the other DC/DNS servers, but
it;s only for the interim, and of course it must be done after hours.



So what I did to combine a delegated child zone to the parent zone on the
same DNS server:

In DNS, I created two zones that are NOT AD Integrated, called
"internal.company.com.dns" and "site.internal.company.com.dns".

In DNS, I then created records in the parent zone (the
"internal.company.com.dns" zone) called parenthost1 and parenthost2 and gave
them IP addresses of my choosing (doesn't matter what the IPs are).

In DNS, I then also created records in the child zone (the
"site.internal.company.com.dns" zone) called childhost1 and childhost2 and
gave them IP addresses of my choosing as well.

In DNS, I rt-clicked on teh zones and told it to update the server records.
This way the ".dns" files are both updated with the records I just created.

Then I went into system32\dns and found those two text zone files that DNS
created, specifically called and "site.internal.company.com.dns".

I then opened "internal.company.com.dns" (must choose notepad or your choice
of text editor).

I then removed the delegation section.

I then manually created records from the child zone to be put into the
parent zone "internal.company.com" so they will apprear to be part of the
internal.company.com zone. I actually copied them in, but I had to change
them to look like child zone entries, such as instead of "childhost1", I
altered it to be "childhost1.site".

I then deleted both zones in DNS.

I then created a new zone, NON AD integrated, called internal.company.com.
In the section where it says what zone file to use, I clicked on 'Use
existing file", and manually typed in "internal.company.com.dns".

Then I finished the wizard and all was ok. I saw the child zone with the
records I created.


To see what I mean, here's a before and after of what I'm talking about:

The "internal.company.com.dnz" zone file before I made changes:
=========================
;
; Database file internal.company.com.dns for internal.company.com zone.
; Zone version: 4
;

@ IN SOA mtl-dc1.tailspintoys.com.
hostmaster.tailspintoys.com. (
4 ; serial number
900 ; refresh
600 ; retry
86400 ; expire
3600 ) ; default TTL

;
; Zone NS records
;

@ NS mtl-dc1.tailspintoys.com.

;
; Zone records
;

parenthost1 A 192.168.3.55
parenthost2 A 192.168.5.22

;
; Delegated sub-zone: site.internal.company.com.
;
site NS mtl-dc1.tailspintoys.com.
; End delegation




The "site.internal.company.com.dns" zone file before I made changes:
==========================
;
; Database file site.internal.company.com.dns for site.internal.company.com
zone.
; Zone version: 3
;

@ IN SOA mtl-dc1.tailspintoys.com.
hostmaster.tailspintoys.com. (
3 ; serial number
900 ; refresh
600 ; retry
86400 ; expire
3600 ) ; default TTL

;
; Zone NS records
;

@ NS mtl-dc1.tailspintoys.com.

;
; Zone records
;

childhost1 A 192.168.5.54
childhost2 A 192.168.55.6




After I made changes to the "internal.comapny.com.dns" zone file with the
records I copied out of the "site.internal.company.com.dns" zone file:
=========================
;
; Database file internal.company.com.dns for internal.company.com zone.
; Zone version: 7
;

@ IN SOA mtl-dc1.tailspintoys.com.
hostmaster.tailspintoys.com. (
7 ; serial number
900 ; refresh
600 ; retry
86400 ; expire
3600 ) ; default TTL

;
; Zone NS records
;

@ NS mtl-dc1.tailspintoys.com.

;
; Zone records
;

parenthost1 A 192.168.3.55
parenthost2 A 192.168.5.22
childhost1.site A 192.168.5.54
childhost2.site A 192.168.55.6


After that, I just made the zone AD Integrated again and was on my way...

Have fun!


--
Ace
Innovative IT Concepts, Inc (IITCI)
Willow Grove, PA

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
Microsoft MVP - Directory Services
Microsoft Certified Trainer

Having difficulty reading or finding responses to your post?
Instead of the website you're using, I suggest to use OEx (Outlook Express
or any other newsreader), and configure a news account, pointing to
news.microsoft.com. This is a direct link to the Microsoft Public
Newsgroups. It is FREE and requires NO ISP's Usenet account. OEx allows you
to easily find, track threads, cross-post, sort by date, poster's name,
watched threads or subject.
It's easy:

How to Configure OEx for Internet News
http://support.microsoft.com/?id=171164

Infinite Diversities in Infinite Combinations
Assimilation Imminent. Resistance is Futile
"Very funny Scotty. Now, beam down my clothes."

The only constant in life is change...