I have a few services that run as a Failover Cluster. At the moment, all the members of the cluster are domain controllers, but that may not always be the case in the future.
The issue I have is that the failover instance has been registered as a domain controller for the domain. Which means that the domain for example.local
controllers are:
dc1.example.local
(Normal DC)dc2.example.local
(Normal DC)dcdhcpfo.example.local
(Failover Cluster for DHCP , which points to either DC1 or DC2)dccafo.example.local
(Failover Cluster for Certification Authority, which points to either DC1 or DC2)
This has become an issue, because those two extra instances do not show up in Active Directory Sites and Services (nor would I expect them to), but they are showing up as an A record for example.local
.
Apart from deleting their records from the DNS zone, how can I get rid of them being listed as available domain controllers?
This has become an issue becuase we have some machines in a remote site that are using one of the failover cluster members as the DC they use for authentication, which is making things slow and weird. There is a DC in their local site which it should be using instead; but that's an issue for another day.