How to configure DNS for internal domain resolution on Windows Server?

J.Paravicini

3/5/24, 3:09 PM

I have a Windows server with a private DNS server for the AD system named office.example.com. The public domain name example.com is managed by a hosting service and points to a public IP address. When I join a client to the office.example.com domain, the name is sometimes resolved to the correct private IP address and sometimes to the incorrect public IP address. This causes connectivity issues for clients inside the domain. How can I configure DNS to ensure that office.example.com always resolves to the private IP address?

Update

The last sentence is actually not what I intended to do.

This question was used as a guideline for my solution. My problem is, I am not sure how to apply the second suggested solution in reality:

Subdomain of an existing public domain name which will never be used publicly (e.g. corp.mycompany.com).

1076

2 + 0

networking

domain-name-system

windows

active-directory

Score:1

Server

Greg Askew

3/5/24, 6:22 PM

How can I configure DNS to ensure that office.example.com always resolves to the private IP address?

By only using the internal private IP address of the DNS Server(s) on the clients. Never use public external DNS Server IP addresses for AD clients. That is a DNS worst practice and a security worst practice.

+ 1

J.Paravicini

3/5/24, 6:48 PM

I understand that, I formulated it badly. What I want is, that if the client is inside the subnet of the AD it should resolve the private address.

Score:0

Server

Rob

3/5/24, 3:39 PM

Is this a new AD because we run into the same issues because of using “.nl” for our internal domain.

If you want to resolve this, you have to create an internal DNS zone for example.com and put all the records you’re using into that zone file.

If you however have a new domain setup it’s better to rename it to “.lan” or “.local” because those will

+ 1

J.Paravicini

3/5/24, 6:50 PM

I saw the following question which I am trying to follow. It says that it is not recommended to use .local or similar. My question basically is, how can I recreate that. https://serverfault.com/questions/71052/choosing-local-versus-public-domain-name-for-active-directory

Elon Musk

I sit in a Tesla and translated this thread with Ai:

EN: How to configure DNS for internal domain resolution on Windows Server?

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.