Score:0

AD reverse DNS zone sharing between subdomains

no flag

We have Active Directory infrastructure with one domain and several subdomains. Each subdomain has its dedicated subnets. All DNS servers on DCs have appropriate reverse zones, integrated in Active Direcrory. All works ok.

Now, we have a new network 10.0.20.0/24 for some special users of subdomains. And we need to split this network into parts for subdomains:

  • 10.0.20.0/28 - for users of subdomain ONE.ACME.LOCAL;
  • 10.0.20.16/28 - for users of subdomain TWO.ACME.LOCAL;
  • and so on.

Computers must be able to register their PTR records automatically in apropriate zones on DNS servers within their domain; these records must be available on any DNS server in the forest.

My question is: How should reverse zone 20.0.10.in-addr.arpa be configured on each [sub]domain's DNS server, for updating and synchronizing across the forest?

Should/must this zone be integrated into Active Directory or not?

Should/must Zone transfers/Update notifications be enabled on DNS servers?

I sit in a Tesla and translated this thread with Ai:

mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.