Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

We have 3 exchange / active directory servers.

exchange.queensberry.com exchange2.queensberry.com exchange3.queensberry.com

In the domain 'queensberry.com'

Our web server is remote from the network, www.queensberry.com but we want to change it to queensberry.com

The problem is that the DNS on the above servers is automatically creating 'a' records for "same name" with the internal ips of those servers. x.x.1.20, x.x.2.20, x.x.3.20 and there is also my record for the external server.

The problem is that on each lan the ip address being returned is for the local active directory server not the external web server.

Can anyone please tell me why these records are being automatically and how to fix/stop please.

Thanks Stephen

share|improve this question

1 Answer 1

up vote 1 down vote accepted

Domain controllers always register A records for the name of the domain (queensberry.com) with their own IP address.

This is by design and should not be tampered with under any circumstances. This is primarily required in order for domain members to find the SYSVOL share.

See the following posts which discuss this situation:

http://serverfault.com/questions/31686/active-directory-is-it-required-that-the-a-record-for-a-domain-point-to-a-doma

http://serverfault.com/questions/40612/issues-with-using-real-domain-for-active-directory-domain

http://serverfault.com/questions/38208/sharing-domain-name-between-domain-controller-and-webserver

share|improve this answer
    
Thanks Graeme. I find myself going grrrr at the organization that set up our active directory. I can see us changing the website now. But thank you –  Stephen Baugh Aug 14 '09 at 10:51
    
You're welcome. You can give them some more 'grrrr' for putting Exchange on Domain Controllers, which is generally frowned upon. ;-) –  ThatGraemeGuy Aug 14 '09 at 11:19

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.