DNS in Windows Server 2019

After promoting your Windows Server 2019 to a Domain Controller (DC), it's essential to configure the Domain Name System (DNS) to ensure proper domain resolution and network functionality. This guide will walk you through the necessary steps to set up and verify DNS settings post-promotion.

Step 1: Verify DNS Installation

During the DC promotion process, the DNS role is typically installed automatically. To confirm:

  1. Open Server Manager.
  2. Navigate to Manage > Add Roles and Features.
  3. Click Next until you reach the Server Roles section.
  4. Ensure that DNS Server is checked.

Step 2: Access the DNS Manager

  1. Open the Start menu and search for DNS.
  2. Click on DNS Manager to launch the console.

Step 3: Configure Forward Lookup Zones

Forward Lookup Zones translate domain names to IP addresses:

  1. In the DNS Manager, expand your server's name.
  2. Right-click on Forward Lookup Zones and select New Zone....
  3. In the New Zone Wizard, click Next.
  4. Select Primary zone and ensure Store the zone in Active Directory is checked. Click Next.
  5. Choose the replication scope based on your environment. Click Next.
  6. Enter your domain name (e.g., example.com) and click Next.
  7. Select Allow only secure dynamic updates to enhance security. Click Next and then Finish.

Step 4: Configure Reverse Lookup Zones

Reverse Lookup Zones map IP addresses back to domain names:

  1. In the DNS Manager, right-click on Reverse Lookup Zones and select New Zone....
  2. Follow the wizard steps, similar to the forward lookup zone configuration.
  3. When prompted for the Network ID, enter the first three octets of your IP address (e.g., for 192.168.1.x, enter 192.168.1). Click Next.
  4. Complete the wizard with the default settings.

Step 5: Verify DNS Records

Ensure that essential DNS records are present:

  1. In the Forward Lookup Zone you created, verify the existence of the Start of Authority (SOA) and Name Server (NS) records.
  2. Check for the Host (A) record pointing to your DC's IP address.

Step 6: Configure DNS Forwarders

To resolve external domain names:

  1. In DNS Manager, right-click your server's name and select Properties.
  2. Navigate to the Forwarders tab.
  3. Click Edit... and add the IP addresses of your preferred external DNS servers (e.g., 8.8.8.8 for Google DNS).
  4. Click OK to save the settings.

Step 7: Test DNS Functionality

Ensure that DNS is functioning correctly:

  1. Open a command prompt.
  2. Use the nslookup command followed by your domain name to verify resolution.
  3. Test reverse lookup by entering nslookup [your DC's IP address].

Next Steps

By following these steps, you've configured DNS on your newly promoted Domain Controller. Proper DNS configuration is crucial for Active Directory operations and overall network health. Regularly monitor your DNS server and ensure that records are updated as your network evolves.