Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I have a small office network with router (running OpenWRT), Windows Domain Controller (used to be 2008R2; I just backed it up and upgraded to 2012), about a dozen AD clients (3 server and windows workstation) and several non-AD clients (network printer, PBX).

The problem is that the clients can't access servers by name (only by IP). I tried all kind of permutations. Right now domain controller runs DNS server for all desktops; but unless I put an entry in hosts file - I can only get by IP. I have router as DHCP server (since not all devices are on AD); and except for Domain Controller all IP addresses, including "static", are assigned by the router.

Most frustrating, some servers sometimes just work! for example, I can often get to the Linux box by name (it is part of Domain using Beyond Trust Integration Services); but I can never get to SQL Server box. Seems like non-domain devices see more names than domain members...

This network should be fairly typical; but I couldn't get any guidance about how to set up DNS/DHCP service to make all nodes happy. The closest is this question, but still it's different!


share|improve this question
Do the systems successfully resolve the active directory domain's name? How about the names of domain controllers? Active Directory won't work without those things, but maybe it's working only due to NetBIOS name resolution.. Can you test what specific responses come back from the domain controller's DNS when you query for the fully-qualified name of an entry in the domain's DNS zone with nslookup (or dig on the linux box)? –  Shane Madden Nov 17 '12 at 8:25
just wondering what was the reason for downgrading the question... urrgh! –  Felix Nov 17 '12 at 19:33

1 Answer 1

up vote 6 down vote accepted

I'm a little confused by some of your terminology:

"and except for Domain Controller all IP addresses, including "static", are assigned by the router." -- uh... no. If the router is assigning addresses then they're not static.

"I have router as DHCP server (since not all devices are on AD)" -- Not sure why you've done this. Devices do not need to be a member of an Active Directory Domain to use DHCP services provided by a Windows server.

As for "how to set up DNS/DHCP service to make all nodes happy",Ii should be very simple.

  • A Windows server, probably the domain controller on a small network, should be providing DHCP.
  • The domain controllers (ideally you'd have more than one?) should have the DNS role installed and configured to support AD, and DNS should forward any requests it cannot resolve to the ISP's DNS servers.
  • The clients should have their DNS settings configured to point to the DNS server, and their gateway should point to the router.
  • Local firewall on each windows system (server or client) should either be disabled or, more ideally, should be correctly configured to see the whole of your internal IP address scheme as a workplace network, with an appropriately configured domain profile.
share|improve this answer
that's why I put "static" in quotes - it is DHCP, just that it's always the same IP (by MAC address), so I can put it in the hosts file. So, I started with the simple setup that you described. I think my problem was that DC didn't forward requests to ISP's DNS servers. That might have root cause of all my problems - and I didn't have much time, since the users couldn't access Internet. I just gave up and went to more complex route. Any pointers to setting up that? –  Felix Nov 17 '12 at 16:52
@felix - setting up what? DNS Forwarding? Have you looked at technet.microsoft.com/en-us/library/cc754941.aspx -- fwiw, tip for the future... if you're editing hosts files just to set up a basic network these days then you're either trying to do something very non-standard or you're doing something wrong... that's always time to step back and re-assess what's happening. –  RobM Nov 17 '12 at 16:54
I try to have as standard configuration as I can (it's my wife's business, and while they think I am computer genius, my IS experience was mainly on application development side). I know I am doing something wrong! That's why I am here, stepping back and reassessing :) One other point. The reason I set up the router to provide DHCP services was because some devices (both domain-member laptops and non-domain devices) are wireless, and I couldn't figure out how to set up two DHCP servers without conflict. So, even if I figure out DNS forwarding, wouldn't I need to also configure 2 DHCP servers? –  Felix Nov 17 '12 at 17:20
To summarize - my initial plan was to get DHCP services (IP address) from the router, and DNS services (name resolution) from domain controller with DNS forwarding. Was that a bad idea to begin with? –  Felix Nov 17 '12 at 17:32
You don't need DHCP on the router, you should only have one DHCP server on the network. Actually that's not quite true serverfault.com/questions/368512/…) but for what you're doing lets pretend it is. So you should only configure the router OR the server as DHCP. You've done this by choosing the router but putting DHCP on the server only does simplify things greatly imho. –  RobM Nov 17 '12 at 18:33

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.