Hello All,

Hope this post finds you in good health and spirit.

AD-integrated DNS

An -Active Directory-integrated zone is a primary DNS zone that is stored in Active Directory . It does not contain data in DNS database. This zone is very secure because all data which replication from one domain controller to another domain controller’s database encrypted form hence nobody cannot read these data.It is an authoritative primary zone in which all of the zone data is stored in Active Directory. As mentioned previously, zone files are not used or necessary.

Integrating DNS with Active Directory produces the following additional benefits:

Directory replication is faster

AD-Integrated zone is replicated using Active Directory replication. Because Active Directory can compress replication data between sites and replicates data securely, hence DNS replication also becomes fast, secure and efficient. This works even over slow links.

Reduced Administrative Overhead

Anytime you can reduce the number of management consoles that you have to work with, you can reduce the amount of time needed to manage information. Without the advantage of consolidating the management of DNS and Active Directory in the same console, you would have to manage your Active Directory domains and DNS namespaces separately. Moreover, your DNS domain structure mirrors your Active Directory domains. Any deviation between Active Directory and DNS makes management more time-consuming and creates more opportunity for mistakes. As your network continues to grow and become more complex, managing two separate entities becomes more involved. Integrating Active Directory and DNS provides you with the ability to view and manage them together as a single entity.

Security

This main advantage of this zone is security . If secure dynamic update is enabled, only authorized clients can update their records in DNS zone which counters the issue of proxy records update.

Redundancy

AD-integrated zones provide redundancy thus, there’s no single point of failure in DNS design. With AD-integrated zones, since all DCs can write on zone hence there is no single point failure.

• New domain controller gets updated automatically without configuring zone transfer for it.
• In locations which are geographically apart, AD sites can be configured to control replication and schedule it during off hours. AD-integrated zone are also part of AD database so their replication also get controlled.

Zone data is stored in application directory partitions by Windows Server 2008’s Active Directory-integrated DNS. (The Windows Server 2003-based DNS integration with Active Directory does not exhibit any behavioural changes.) During AD DS installation, the following DNS-specific application directory partitions are created:

• a ForestDnsZones partition of the application directory that spans the whole forest
• Each domain in the forest has a domain-wide application directory division called a DomainDnsZone.

So, that’s all in this blog. I will meet you soon with some other stuff. Have a nice day !!!

Recommended content

RODC Installation Guide- Step by step guide to install read only domain controller

RODC Filtered Attribute Set

Installing and configuring a RODC in Windows Server-2012

How to find the GUID of Domain Controller

Understanding Group Policy Preferences

Group Policy Verification Tool GPOTool Exe

Group Policy Health Check on Specific Domain Controller

Netlogon Folder in Active Directory

Custom Attributes in Active Directory

Tombstone Lifetime of My Active Directory Forest

Computers AD Site From the Command Line

Active Directory Database Integrity

Disabling and Enabling the Outbound Replication

DFS Replication Service Stopped Replication

Strict Replication Consistency

The replication operation failed because of a schema mismatch between the servers involved

Troubleshooting ad replication error 8418 the replication operation failed because of a schema mismatch between the servers

Replication information in txt file

Repadmin Replsummary

Enabling the outbound replication

Guys please don’t forget to like and share the post.Also join our WindowsTechno Community and where you can post your queries/doubts and our experts will address them .

You can also share the feedback on below windows techno email id.

If you have any questions feel free to contact us on admin@windowstechno.com also follow us on facebook@windowstechno to get updates about new blog posts.