Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

A very quick question really. I'm currently studying for my Active Directory exam and am a little confused with relation to how DNS Delegation works - mainly in this example.

I have two domains in a forest - and

In the Contoso DNS there is a FLZ with a delegation pointing at NWtraders so that anyone in the Contoso zone can resolve NWtraders DNS queries. Which is fine and makes perfect sense to me.

The question is - is the delegation two ways, since how can NWTraders computers and users resolve Contoso IP addresses and host names, there is no entry in NWTraders DNS which forwards or points to Contoso in anyway?

Many thanks.

share|improve this question
The same way folks around the world can find without any special configuration. – David Schwartz Jul 22 '12 at 14:48

If a stub zone is needed to resolve the name, then there's something funky about the DNS structure. They're essentially overriding normal delegation rules.

A normal delegation from Contoso would need to be in Contoso's zone, so like Inserting a stub zone of overrides the normal process of a lookup against the root servers for the .com zone, then the .com servers for the nwtraders zone.

If the nwtraders zone has no similar stub zone, then their lookups for the zone will function as normal, using the public DNS delegation structure.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.