We have 3 exchange / active directory servers.

exchange.queensberry.com exchange2.queensberry.com exchange3.queensberry.com

In the domain 'queensberry.com'

Our web server is remote from the network, www.queensberry.com but we want to change it to queensberry.com

The problem is that the DNS on the above servers is automatically creating 'a' records for "same name" with the internal ips of those servers. x.x.1.20, x.x.2.20, x.x.3.20 and there is also my record for the external server.

The problem is that on each lan the ip address being returned is for the local active directory server not the external web server.

Can anyone please tell me why these records are being automatically and how to fix/stop please.

Thanks Stephen

link|improve this question
feedback

1 Answer

up vote 1 down vote accepted

Domain controllers always register A records for the name of the domain (queensberry.com) with their own IP address.

This is by design and should not be tampered with under any circumstances. This is primarily required in order for domain members to find the SYSVOL share.

See the following posts which discuss this situation:

http://serverfault.com/questions/31686/active-directory-is-it-required-that-the-a-record-for-a-domain-point-to-a-doma

http://serverfault.com/questions/40612/issues-with-using-real-domain-for-active-directory-domain

http://serverfault.com/questions/38208/sharing-domain-name-between-domain-controller-and-webserver

link|improve this answer
Thanks Graeme. I find myself going grrrr at the organization that set up our active directory. I can see us changing the website now. But thank you – Stephen Baugh Aug 14 '09 at 10:51
You're welcome. You can give them some more 'grrrr' for putting Exchange on Domain Controllers, which is generally frowned upon. ;-) – Graeme Donaldson Aug 14 '09 at 11:19
feedback

Your Answer

 
or
required, but never shown

Not the answer you're looking for? Browse other questions tagged or ask your own question.