2

Best practices indicate that one should list 127.0.0.1 in the DNS list for the network adapter configuration for a Domain Controller, but not as the first one. With that said, what is the best place to put it in a list with more than two DNS servers listed? Second, last, or it doesn't matter? Also helpful would be an explanation as to why.

Related question: What should the order of DNS servers be for an AD Domain Controller and Why?

Bigbio2002
  • 2,873

3 Answers3

1

In Windows 2000 era, typically you would criss cross them:

DC/DNS Server A: Primary DNS points to Server B Secondary DNS points to Loopback

DC/DNS Server B: Primary DNS points to Server A Secondary DNS points to Loopback

That was how I last understood it to be at least, and I believe it was someone on here who even corrected me about it.

EDIT: It looks like that best practices link in the other question linked above indicates the above to be correct. I suggest you follow that. I have removed my other lines as I do not want to confuse anybody!

Your primary nameserver should be another server with low latency, preferably in the same site in AD Sites and Services. That way replication partners can be quickly discovered and if something is wrong with the DNS service starting you can still perform resolution. You can also specify tertiary servers, but the order past the primary is for the most part irrelevant.

1

You aren't limited to two DNS entries per network adapter, that's just the default view.

If you go into IPv4 properties > Advanced > DNS tab, you can configure as many DNS servers as your heart desires. Just make 127.0.0.1 last.

MDMarra
  • 101,323
0

My understanding is that you should lists other dns servers as primary and secondary, then the 3rd one would be your loopback.

Although you can list additional dns servers "till your hearts desire, it will cause additional overhead.

Your computer will put a request out to every single dns server in the list and then accept the first response back. If you have a list of 10 dns servers on every computer you can see how much "traffic" this potentially might create. Use only the closest dns servers.

artifex
  • 1,644
Shelly
  • 9