Someone asked me to alter the IP address for the WWW entry in DNS on a
Win2k Server. I could not. The boxes were grayed out. I was on the computer
that ran DNS, so I am unclear on why it's un-editable and what I can do to
edit the entry.

Any thoughts?

m

"tcv" <thecomputervalet@geemail.com> wrote in message
news:Xns9A83B5147D4FDthecomputervaletgeem@207.46.2 48.16...
> Someone asked me to alter the IP address for the WWW entry in DNS on a
> Win2k Server. I could not. The boxes were grayed out. I was on the
> computer
> that ran DNS, so I am unclear on why it's un-editable and what I can do to
> edit the entry.
>
> Any thoughts?

Most likely you were connected to the SECONDARY DNS server, instead
of the Primary.

Only the Primary Server for a Zone (or AD equivalent) can change the
records.

"Herb Martin" <news@learnquick.com> wrote in
news:eTyIicOoIHA.804@TK2MSFTNGP05.phx.gbl:

> Most likely you were connected to the SECONDARY DNS server, instead
> of the Primary.

Stupid question: How can I check which server is the primary? The one I was
connected to was at the top of the list of DNS servers...

m

"tcv" <thecomputervalet@geemail.com> wrote in message
news:Xns9A83C1DEC3310thecomputervaletgeem@207.46.2 48.16...
> "Herb Martin" <news@learnquick.com> wrote in
> news:eTyIicOoIHA.804@TK2MSFTNGP05.phx.gbl:
>
>> Most likely you were connected to the SECONDARY DNS server, instead
>> of the Primary.
>
> Stupid question: How can I check which server is the primary? The one I
> was
> connected to was at the top of the list of DNS servers...

They are there in alphabetical order. (Some MMCs put things in the order
you
setup the connections.)

Generally you just "know" which is the Primary but if you have to discover
it then
START by looking at the "SOA" record. It will show a MASTER (traditional
DNS)
or "Primary Name Server" (MS MMC). That SHOULD be the Primary but in the
case of your using AD Integrated DNS it can only be ONE of the AD Integrated
(Primary) DNS Servers.

Read inline please.

In news:Xns9A83C1DEC3310thecomputervaletgeem@207.46.2 48.16,
tcv <thecomputervalet@geemail.com> typed:
> "Herb Martin" <news@learnquick.com> wrote in
> news:eTyIicOoIHA.804@TK2MSFTNGP05.phx.gbl:
>
>> Most likely you were connected to the SECONDARY DNS server, instead
>> of the Primary.
>
> Stupid question: How can I check which server is the primary? The one
> I was connected to was at the top of the list of DNS servers...

Servers are Preferred or Alternate, zones are Primary or Secondary. A server
can have both Primary and Secondary zones on it, so there's really no such
thing as Primary or Secondary server.

What you have to do if you don't know which server has the Primary zone is
to look at the zone Properties.
You can also open the DNS console, and click on Forward Lookup zones in the
left hand pane, then in the right hand pane, look in the "Type" column.



--
Best regards,
Kevin D. Goodknecht Sr. [MVP]
Hope This s

===================================
When responding to posts, please "Reply to Group"
via your newsreader so that others may learn and
benefit from your issue, to respond directly to
me remove the nospam. from my email address.
===================================
http://www.lonestaramerica.com/
http://support.wftx.us/
http://message.wftx.us/
===================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
===================================
Keep a back up of your OE settings and folders
with OEBackup:
http://www.oe.com/OEBackup/Default.aspx
===================================

"Kevin D. Goodknecht Sr. [MVP]" <admin@nospam.WFTX.US> wrote in message
news:uHkwqDRoIHA.3892@TK2MSFTNGP04.phx.gbl...
> Read inline please.
>
> In news:Xns9A83C1DEC3310thecomputervaletgeem@207.46.2 48.16,
> tcv <thecomputervalet@geemail.com> typed:
>> "Herb Martin" <news@learnquick.com> wrote in
>> news:eTyIicOoIHA.804@TK2MSFTNGP05.phx.gbl:
>>
>>> Most likely you were connected to the SECONDARY DNS server, instead
>>> of the Primary.
>>
>> Stupid question: How can I check which server is the primary? The one
>> I was connected to was at the top of the list of DNS servers...
>
> Servers are Preferred or Alternate, zones are Primary or Secondary. A
> server
> can have both Primary and Secondary zones on it, so there's really no such
> thing as Primary or Secondary server.

While I agree with you from a logic perspective -- it is long DNS usage
to speak of Primary Server and Secondary Server (in the sense you
and I understand Primary Zone etc.)

[The only way to make full sense of this is to have it understood from
context
that SOME ZONE is being considered.]

In fact the only completely correct way to say this is a Primary (or
Secondary)
Server for Some (Specific) Zone.

He isn't talking about Preferred and Alternate CLIENT settings which are
irrelevant here.

> What you have to do if you don't know which server has the Primary zone is
> to look at the zone Properties.
> You can also open the DNS console, and click on Forward Lookup zones in
> the
> left hand pane, then in the right hand pane, look in the "Type" column.

Yes, that method works IF you are connected to the Primary Server for the
Zone
in question -- he asked how to determine which one this is and he might not
even
have his MMC connected to it.

Read inline please.


>>> <snip>The
>>> one
>>> I was connected to was at the top of the list of DNS servers...
>>
>> Servers are Preferred or Alternate, zones are Primary or Secondary. A
>> server

> He isn't talking about Preferred and Alternate CLIENT settings which
> are irrelevant here.

In fact, if you had read the post I replied to, the poster referred to the
Preferred and Alternate DNS server. Which I agree is irrelevant, I'm just
trying to clear up the misnomer many posters use. It makes no difference
which is Preferred or Alternate, and in most circumstances, the SOA record
does give the Server holding the Primary zone, but this record can be
irrelevant, too. I can change the SOA record to give any name for the server
with the Primary zone, but that doesn't mean it is correct.



--
Best regards,
Kevin D. Goodknecht Sr. [MVP]
Hope This s

===================================
When responding to posts, please "Reply to Group"
via your newsreader so that others may learn and
benefit from your issue, to respond directly to
me remove the nospam. from my email address.
===================================
http://www.lonestaramerica.com/
http://support.wftx.us/
http://message.wftx.us/
===================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
===================================
Keep a back up of your OE settings and folders
with OEBackup:
http://www.oe.com/OEBackup/Default.aspx
===================================

To ALL:

Ok, well, here's the layout as I see it.

There are four servers listed as having DNS. One if offline and for the
other three, I can't edit the WWW entry on all but one.

DNS1
DNS2
DNS3
DNS4 (offline)

They are listed in that order in the MMC.

I am remoted into DNS1. Here's the makeup.

Name Type Can Edit WWW?
-------------------------------------------
DNS1 Secondary N
DNS2 Secondary N
DNS3 AD Integrated Y
DNS4 OFFLINE N

Does this ?

Cheers,

m

Read inline please.

In news:Xns9A84623E01DD6thecomputervaletgeem@207.46.2 48.16,
tcv <thecomputervalet@geemail.com> typed:
> To ALL:
>
> Ok, well, here's the layout as I see it.
>
> There are four servers listed as having DNS. One if offline and for
> the other three, I can't edit the WWW entry on all but one.

You cannot modify records in Secondary zones, they are read-only copies from
their master. To modify the records in a Secondary zone, make the
modification in the Master zone, then the zone data will transfer to the
Secondary zones.

>
> DNS1
> DNS2
> DNS3
> DNS4 (offline)
>
> They are listed in that order in the MMC.
>
> I am remoted into DNS1. Here's the makeup.
>
> Name Type Can Edit WWW?
> -------------------------------------------
> DNS1 Secondary N<----No
> DNS2 Secondary N<----No
> DNS3 AD Integrated Y
> DNS4 OFFLINE N

Next question, I see one of these zones is AD Integrated, so it would have
to be on a DC, are DNS1, DNS2, and DNS4 also Domain Controllers?
If they are DCs, are they in the same Domain or Forest as DNS3?

If they are, why would you create a Secondary of the zone?

AD Integrated zones, will by default replicate to at least all Domain
Controllers in their own domain under Win2k. If they are Win2k3 DCs the zone
can replicate to all DCs in the AD Forest by setting the Replication scope.
In this case, there is no need for Secondary zones, in fact, it will cause
the Secondary zones to disappear when the DNS Service is restarted. If this
is happening, just delete the Secondary zones and wait 15 to 20 minutes, the
zone will automatically replicate and re-appear.


--
Best regards,
Kevin D. Goodknecht Sr. [MVP]
Hope This s

===================================
When responding to posts, please "Reply to Group"
via your newsreader so that others may learn and
benefit from your issue, to respond directly to
me remove the nospam. from my email address.
===================================
http://www.lonestaramerica.com/
http://support.wftx.us/
http://message.wftx.us/
===================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
===================================
Keep a back up of your OE settings and folders
with OEBackup:
http://www.oe.com/OEBackup/Default.aspx
===================================

Hi Kevin,

"Kevin D. Goodknecht Sr. [MVP]" <admin@nospam.WFTX.US> wrote in
news:#FHNcfZoIHA.552@TK2MSFTNGP06.phx.gbl:

>> Name Type Can Edit WWW?
>> -------------------------------------------
>> DNS1 Secondary N<----No
>> DNS2 Secondary N<----No
>> DNS3 AD Integrated Y
>> DNS4 OFFLINE N
>
> Next question, I see one of these zones is AD Integrated, so it would
> have to be on a DC, are DNS1, DNS2, and DNS4 also Domain Controllers?
> If they are DCs, are they in the same Domain or Forest as DNS3?
>
> If they are, why would you create a Secondary of the zone?

I am a lowly, bottom-feeding support monkey. I was asked to do this by
the company that manages the site's servers. I have not a clue why
something was done. I was just told, "Log in to <IP ADDRESS> and change
the www record to the new IP Address for the public website."

I was not told I would be presented with what I was presented with. I
wrote back and asked _THEM_ why I couldn't edit the entries, but they
didn't respond. They did fix it apparently because the new IP address is
in place.

And now curiosity has got a hold of me. That's all this is.


> AD Integrated zones, will by default replicate to at least all Domain
> Controllers in their own domain under Win2k. If they are Win2k3 DCs
> the zone can replicate to all DCs in the AD Forest by setting the
> Replication scope. In this case, there is no need for Secondary zones,
> in fact, it will cause the Secondary zones to disappear when the DNS
> Service is restarted. If this is happening, just delete the Secondary
> zones and wait 15 to 20 minutes, the zone will automatically replicate
> and re-appear.

They are indeed Win2k. So, perhaps they changed the www on DNS3 and it
replicated out to the secondaries. I think that is what you're saying.

Cheers,

m

Read inline please.

In news:Xns9A84B824A2DE4thecomputervaletgeem@207.46.2 48.16,
tcv <thecomputervalet@geemail.com> typed:
> Hi Kevin,
>
> "Kevin D. Goodknecht Sr. [MVP]" <admin@nospam.WFTX.US> wrote in
> news:#FHNcfZoIHA.552@TK2MSFTNGP06.phx.gbl:
>
>>> Name Type Can Edit WWW?
>>> -------------------------------------------
>>> DNS1 Secondary N<----No
>>> DNS2 Secondary N<----No
>>> DNS3 AD Integrated Y
>>> DNS4 OFFLINE N
>>
>> Next question, I see one of these zones is AD Integrated, so it would
>> have to be on a DC, are DNS1, DNS2, and DNS4 also Domain Controllers?
>> If they are DCs, are they in the same Domain or Forest as DNS3?
>>
>> If they are, why would you create a Secondary of the zone?
>
> I am a lowly, bottom-feeding support monkey. I was asked to do this by
> the company that manages the site's servers. I have not a clue why
> something was done. I was just told, "Log in to <IP ADDRESS> and
> change the www record to the new IP Address for the public website."
>
> I was not told I would be presented with what I was presented with. I
> wrote back and asked _THEM_ why I couldn't edit the entries, but they
> didn't respond. They did fix it apparently because the new IP address
> is in place.
>
> And now curiosity has got a hold of me. That's all this is.

I see the dilemma you were put in, for future information, the next time you
are asked to update the record in a zone that is running as a Secondary
zone, keep in mind a Secondary zone is a Read-only copy of the zone, and the
records in it cannot be edited or otherwise modified directly to this zone.
The only way you can modify records in a Secondary zone is by editing its
master server. When you edit its master server, the zone serial is
incremented, this causes the secondary zones to request a zone transfer,
thereby getting a new, updated copy of the zone.

>
>
>> AD Integrated zones, will by default replicate to at least all Domain
>> Controllers in their own domain under Win2k. If they are Win2k3 DCs
>> the zone can replicate to all DCs in the AD Forest by setting the
>> Replication scope. In this case, there is no need for Secondary
>> zones, in fact, it will cause the Secondary zones to disappear when
>> the DNS Service is restarted. If this is happening, just delete the
>> Secondary zones and wait 15 to 20 minutes, the zone will
>> automatically replicate and re-appear.
>
> They are indeed Win2k. So, perhaps they changed the www on DNS3 and it
> replicated out to the secondaries. I think that is what you're saying.


I would find it hard to believe that any decent sized company today would be
running only one Domain Controller if they have several other member
servers. But, apparently this may be the case, or the DNS that is offline is
actually a second Domain Controller. Which would lead to a more important
question for a different subject, it may be, for the question at hand here,
you only needed to update DNS3 which would have caused the other DNS servers
to request a zone transfer, or you could have right mouse clicked the
Secondary zones and selected "Transfer from Master" in the menu.

--
Best regards,
Kevin D. Goodknecht Sr. [MVP]
Hope This s

===================================
When responding to posts, please "Reply to Group"
via your newsreader so that others may learn and
benefit from your issue, to respond directly to
me remove the nospam. from my email address.
===================================
http://www.lonestaramerica.com/
http://support.wftx.us/
http://message.wftx.us/
===================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
===================================
Keep a back up of your OE settings and folders
with OEBackup:
http://www.oe.com/OEBackup/Default.aspx
===================================