The Process of Working With an External Domain Name

Future configurations are easier when using one DNS namespace.

Setting up an external domain name can allow a domain to be administered on different subnets or sites by different administrators. Authority can be delegated to one administrator for one external domain name.



Making an internal domain a subdomain of the external domain will allow for an external Internet presence and give the flexibility needed to have an internal domain secure from the outside world. This option is easier to create and administer than using completely different domain names.

Things You'll Need

• Windows Server 2003
• i386 folder or Windows Server 2003 CD

Instructions

Install DNS services if needed

1. Backup and create a recovery plan for any servers that will be changed.

2. Assign a static IP address to the DNS server(s).

3. Click "Start," "Control Panel," and then select "Add or Remove Programs" from the Windows 2003 server.

4. Click the "Add/Remove Windows Components" button on the left of the dialog box.

5. Highlight "Networking Services" and click the "Details..." button. Put a check mark in the "Domain Name Services (DNS)" box and then click "OK." Start the installation by clicking the "Next" button. This will install the DNS services on the server.

Install Active Directory domain services if needed

1. Click "Start" and select "Run..." and then type in "dcpromo" and hit "Enter." This will start the Active Directory Domain Services installation. Follow the wizard onscreen instructions.

2. Read the "Operating System Compatibility" help section and click "Next."

3. Choose the "Domain Controller Type" and click "Next."

4. Select which domain type is appropriate for this forest, and click "Next."

5. Enter the new domain name and click "Next."

6. Click "Next" to accept the NetBIOS name chosen, or enter a different name.

7. Click "Next" to accept the file path to save the Active Directory database and log files, or browse for a different path in the directory tree.

8. Select the "Shared System Volume" file path or click "Next" to accept the default.

9. Click "Install and Configure the DNS Server. . ." radio button, or troubleshoot or bypass any indicated errors as desired, and press "Next."

10. Click "Next" to verify support.

11. Click the appropriate permissions option and choose "Next."

12. Create a password for "Restore Mode" and confirm the password and choose "Next."

13. Read and confirm the summary screen and choose "Next."

14. Click the "Finish" button. "Active Directory Users and Computers" will now appear on the servers "Administration Tools" in the "Start" menu.

Use the DNS management tool to configure domain names

1. Click "Start," "Administration Tools," and then select "DNS."

2. Click the server name in the left panel and then right-click it and choose "Configure a Server." The DNS Server Wizard will appear, click "Next."

3. Click "Next" to "Create a Forward Lookup Zone."

4. Enter the domain name in the "Zone name" box and click "Next."

5. Click "Next" to create a new file for this zone, or if desired, you may choose to use one copied from another DNS server.

6. Click the radio button next to "Allow Only Secure Dynamic Updates" and choose "Next."

7. Choose whether to allow this server to forward DNS queries and then click "Next," and "Finish."

8. Right-click the blank white space under the records to get a menu and choose "New Host (A)."

9. Type in the subdomain name in the "New Host" dialog box and add the IP address. Click the "Add Host" button and then click the "Done" button.

Tips & Warnings

• The user must be logged in as an administrator to perform these tasks.

• Dnscmd.exe can be used on one server to configure DNS for other servers.

• The DNS services inside "Add or Remove Programs" can be run either before or after the Active Directory installation.

• Multiple reboots may be required during installations and any configuration changes.

References

• Microsoft: Creating Internal and External Domains
• Microsoft: dcpromo
• Microsoft: Using the Configure DNS Server Wizard

Resources

• Microsoft: The Difference Between a Workgroup and a Domain