I'm trying to replace our old Windows 2000 Server by a Windows Server 2008 R2. I followed the guide at MSDN. Coming to the step "Install Active Directory Domain Services..." the option to install the DNS-Server was grayed-out. According to Microsoft Support I skipped the DNS Server Installation at this point. (Because of the single-label DNS name)

I then installed the DNS-Server role and created a forward-lookup-zone for the domain. When running the Best Practices Analyzer of the DNS-Server role I get these two messages for both domain controllers (the old win2k and the new win 2008 R2):

The TechCenter articles suggest to use a proper DNS Server - that's pointless when I try to configure a proper DNS Server.

How do I configure the DNS Server in a way that it resolves these zones? Or are these errors irrelevant?

dcdiag /v /test:DNS

Seems to run fine...


dcdiag /test:dns options tests some of the records relevant for DCs. It doesn't test all of them. However, if that works, thats a good start.

I dont know why you created a forward lookup zone for the domain. What type of zone storage were you using in Windows 2000? I would have expected that zone to replicate when you promoted the new DC.

If you can resolve records in the zone using tools like nslookup pointed against the Windows 2008 R2 DNS server, I would ignore this. However, feedback on the BPA functionality is welcomed as per http://blogs.technet.com/b/windowsserver/archive/2009/02/11/best-practices-analyzer-resolution-guidance-now-available-online.aspx

You could feedback to support engineers that monitor the official AD support blog at http://blogs.technet.com/b/askds/archive/2010/08/02/new-dns-and-ad-ds-bpa-s-released-or-the-most-accurate-list-of-dns-recommendations-you-will-ever-find-from-microsoft.aspx or at http://connect.microsoft.com/ADBPA .

  • I have no idea what storage was used on 2k. The whole update thing was a bit tricky because of the single label DNS name. It's a bad idea to use these, but we didn't want to change it... After running for one year there were no issues regarding DNS, so maybe that's really neglectable. Maybe I'll investigate that further and give some feedback to BPA.
    – Scolytus
    Jan 20 '12 at 13:24

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.