We've got a branch office with no on-site services at the moment, and we'd like to change that. The biggest goal is to setup some file servers but faster logins and DNS resolution will be welcome as well.
I'm doing some experiments with some VMs on a separate subnet/VLAN so let's say I've got forest and domain
- There is a single site
Officewith a subnet
192.168.1/24and a single Primary DNS zone
- Added a secondary site
TestSitewith a subnet
192.168.100reverse lookup zone in DNS
- Created a VM
Branch-DC01running Server 2012, with IP address
- Added to
AD DSas a Read Only Domain Controller (RODC) in
- The main
- Setup DHCP scope for the new server and configured for DHCP to always update DNS
Branch-PC01VM running Windows 8 and added to
Branch-PC01got IP address of
192.168.100.20from DHCP, DNS server
192.168.100.1, entry for the member in the forward lookup zone
domain.compresent but not in the reverse lookup zone (significant?)
nslookup domain.com- result came back with IP addresses of the main
Now this isn't right in my mind - shouldn't it return
192.168.100.1? Or am I misunderstanding the whole concept--and how are the logons supposed to be quicker?
Do I need a separate DNS zone (how would that work without a subdomain which I don't want to create, unless required)?
Any ideas/articles which I can be pointed to would be great; I've read through a bunch of TechNet articles and am none the wiser.
Many thanks to @TheCleaner and @charleswj81 your efforts are appreciated.
I've just tried nltest and the result is the same from the branch DC and client PC:
U:\>nltest /dsgetdc:domain.com /server:Branch-DC01.domain.com DC: \\Branch-DC01.domain.com Address: \\192.168.100.1 Dom Guid: d97516d3-4afb-4f0a-8c3f-04a800cd69fb Dom Name: domain.com Forest Name: domain.com Dc Site Name: TestSite Our Site Name: TestSite Flags: GC DS LDAP KDC TIMESERV DNS_DC DNS_DOMAIN DNS_FOREST CLOSE_SITE P ARTIAL_SECRET WS DS_8 The command completed successfully
- Cleaned DNS entries so any _sites containers with TestSite has only SRV records for
Branch-DC01which after restart of the client didn't help.
nltest on the client:
DC: \\DC01.domain.com Address: \\192.168.1.3 Dom Guid: d97516d3-4afb-4f0a-8c3f-04a800cd69fb Dom Name: domain.com
Forest Name: domain.com
Dc Site Name: Office
Our Site Name: TestSite
Flags: PDC GC DS LDAP KDC TIMESERV GTIMESERV WRITABLE DNS_DC DNS_DOMAIN
DNS_FOREST FULL_SECRET WS
The command completed successfully`