Active Directory DNS

Copy of DNS records are stored in AD

DNS is a service

Using nslookup

nslookup -q=SRV _gc._tcp.itdrde.local
Server:  localhost
Address:  127.0.0.1

_gc._tcp.itdrde.local   SRV service location:
          priority       = 0
          weight         = 100
          port           = 3268
          svr hostname   = 7-dev-de-dc.itdrde.local
7-dev-de-dc.itdrde.local        internet address = 10.15.7.15

Using ipconfig

ipconfig /displaydns
Windows IP Configuration

    peertube.archive.pocketnet.app
    ----------------------------------------
    Record Name . . . . . : peertube.archive.pocketnet.app
    Record Type . . . . . : 1
    Time To Live  . . . . : 96
    Data Length . . . . . : 4
    Section . . . . . . . : Answer
    A (Host) Record . . . : 94.156.128.17


    1.16.18.172.in-addr.arpa
    ----------------------------------------
    Record Name . . . . . : 1.16.18.172.in-addr.arpa.
    Record Type . . . . . : 12
    Time To Live  . . . . : 94809
    Data Length . . . . . : 8
    Section . . . . . . . : Answer
    PTR Record  . . . . . : DESKTOP-0DRJUG2.mshome.net


    peertube601.pocketnet.app
    ----------------------------------------
    Record Name . . . . . : peertube601.pocketnet.app
    Record Type . . . . . : 1
    Time To Live  . . . . : 98
    Data Length . . . . . : 4
    Section . . . . . . . : Answer
    A (Host) Record . . . : 185.148.147.143


    112.0.168.192.in-addr.arpa
    ----------------------------------------
    Record Name . . . . . : 112.0.168.192.in-addr.arpa.
    Record Type . . . . . : 12
    Time To Live  . . . . : 94809
    Data Length . . . . . : 8
    Section . . . . . . . : Answer
    PTR Record  . . . . . : mac


    1.208.30.2.in-addr.arpa
    ----------------------------------------
    Record Name . . . . . : 1.208.30.2.in-addr.arpa.
    Record Type . . . . . : 12
    Time To Live  . . . . : 94809
    Data Length . . . . . : 8
    Section . . . . . . . : Answer
    PTR Record  . . . . . : DESKTOP-0DRJUG2.mshome.net


     ...


    mac
    ----------------------------------------
    No records of type AAAA


    mac
    ----------------------------------------
    Record Name . . . . . : mac
    Record Type . . . . . : 1
    Time To Live  . . . . : 94809
    Data Length . . . . . : 4
    Section . . . . . . . : Answer
    A (Host) Record . . . : 192.168.0.112


    48.101.30.172.in-addr.arpa
    ----------------------------------------
    Record Name . . . . . : 48.101.30.172.in-addr.arpa.
    Record Type . . . . . : 12
    Time To Live  . . . . : 94809
    Data Length . . . . . : 8
    Section . . . . . . . : Answer
    PTR Record  . . . . . : son

What is IPConfig /registerdns

The ipconfig /registerdns command updates the DNS server with the current IP address and hostname of the computer that runs the command. It tells the DNS server to create or update a DNS record for that computer so that other computers on the network can find it by its hostname.

When a computer receives a new IP Address from the DHCP server, it will normally also register the DNS record. The computer will also update the DNS record automatically after a reboot or when you leave it on, every 24 hours. But when you change the IP Address manually on the computer, then the DNS record on the server will be incorrect.

Now you could reboot the computer, but another option is to use the IPConfig /RegisterDNS command. This will update or create the DNS records on the server.

Register an Active Directory domain in DNS

To register an Active Directory domain in DNS, you need to install and configure Active Directory Domain Services (AD DS) and DNS Server roles on a Windows Server, then promote the server to a domain controller. This process automatically integrates the domain and DNS, creating necessary records for domain functionality and communication. 

3 Responses to Active Directory DNS

  1. dmitriano says:

    Лекция 3. Active Directory. Основные понятия
    https://www.youtube.com/watch?v=8QxyrO4y_Cs&t=3741s

    Лекция 12. DNS
    https://youtu.be/P2mq2pEQAzc?si=Io3FoIKoZI7uFZlU

  2. dmitriano says:

    You are correct, ipconfig /registerdns only registers the main A and PTR records for a server; netdiag is obsolete and dcdiag only tests whether the proper DNS records are correctly registered, it doesn’t actually fix them if they are not.

    You can use nltest /DSREGDNS for this purpose; it should be available on any computer, even client ones; if running it from a non-DC computer, you can specify the DC you want to run it against using the /SERVER: parameter.

    The quickest and simplest way is anyway to just restart the netlogon service on the DC that needs re-registering its DNS records.
    https://serverfault.com/a/1067637/831608

Leave a Reply

Your email address will not be published. Required fields are marked *