How To Change Primary Dns Suffix Windows 10

The Academy of Washington has an unusual and complex DNS configuration. The root is washington.edu. The next level of domain names are assigned to different organizations inside the University. The UW-Information technology networking team is managing literally hundreds of DNS zones and IP address blocks under washington.edu. The DNS servers managing these UW zones are not AD-integrated.

I wanted to have a static IP on my main UW PC and then I could run a test web server. I had to brand a asking to our Network Operations folks for this static IP. My department has long used the zone cac.washington.edu for its computers, and then the IP for my PC was assigned out of that zone.

My department manages an Agile Directory domain that is named netid.washington.edu. This domain provides Windows authentication services to the UW community, well-nigh of whom accept a UW NetID which maps to a user object in our NETID domain. Consequently I wanted to join my PC to this domain for ease of accessing those services that leverage its authentication. The fact that I joined a figurer with a DNS suffix that does not friction match the domain'due south results in a non-standard AD configuration known as a disjoint DNS namespace.

What is a Computer DNS Suffix?

The DNS suffix of a computer is the part of the reckoner's DNS name that follows the host name element. If you take a computer named mypc.bookkeeping.contoso.com, the host name is mypc and the DNS suffix is accounting.contoso.com. Exercise not confuse this with the "connection-specific DNS suffix." The latter is related to the Network Adapter TCPIP settings. The computer DNS suffix tin be set up or viewed in several different places. You can view theFull computer name on the Organisation Properties Control Panel applet'southward Computer Name page. You can use the netdom.exe tool with the control line "netdom computername <name> /enum" which BTW fails under some circumstances related to a disjoint DNS suffix. The Windows API GetComputerNameEx volition as well return it (this is the phone call that netdom is making under the covers). Finally yous can use your favorite AD browsing tool to expect at the computer object's dNSHostName attribute. More beneath on setting and changing the computer DNS suffix.

Ramifications of a Disjoint DNS Namespace

Active Directory provides the means of limiting the DNS namespaces that joined computers tin can employ. There is an attribute on the domain object that exists for this purpose. You can set up the msDS-AllowedDNSSuffixes attribute to contain the list of allowable figurer DNS suffixes. If you practise this, attempts to join a computer with a different DNS suffix will fail. Having said this, it must be pointed out that there is an enormous amount of misinformation around the utilise of this domain attribute. Unfortunately the biggest source of this misinformation is Microsoft'south Commutation team documentation and best practise analyzers. They merits that this attribute must be fix to incorporate all DNS suffixes in your disjoint namespace or unspecified bad things will happen. Well, the reality is this is apparently wrong. Y'all tin have computers with different DNS suffixes joined to your domain and it will have no consequence at all on Exchange. The UW has no values set on its msDS-AllowedDNSSuffixes attribute for the NetID domain and information technology runs an Exchange 2010 service in that domain with no issues. Nonetheless, I am not making any claims about the DNS names of the Substitution servers themselves. They may exist express to the domain DNS name for their suffixes, but I just don't know one way or the other.

Setting or Changing a Reckoner's DNS Suffix

When yous initially install Windows at that place is no DNS suffix. If yous proper noun your PC "mypc" then the System Backdrop Reckoner Proper name page volition say its full computer name is "mypc". You can requite it a DNS suffix by clicking the "Change" button on the Computer Proper name page. This will bring up the "Computer Name/Domain Changes" dialog (I am using Windows 7 as an instance but Vista and Windows 8 are like). Expect, don't change annihilation, you aren't at that place yet. You have to click the More button which brings up the "DNS Suffix  and NetBIOS Computer Proper name" dialog. Yikes, dialogs opening dialogs opening dialogs! If I remember correctly, this behavior goes all the way back to Windows 2000. I worked on that team and can adjure that much of the UI was designed by developers such as myself who had no real understanding of usability. But I digress. The "DNS Suffix" dialog is shown beneath:

Notation the checkbox "Modify chief DNS suffix when domain membership changes". This is very important in relation to Ad and disjoint namespaces. If yous do not want a disjoint namespace, leave this box checked. The figurer volition automatically exist given the domain's DNS name as its DNS suffix when you lot join it to Advertisement. In fact, this is the default. If you bring together a computer to a domain without every visiting this dialog, it will be named to adjust with the domain'southward DNS name. However, if y'all want your figurer to have a different DNS suffix, then you must uncheck this checkbox and fill up in the desired DNS suffix.

I will discuss more ramifications of a disjoint DNS namespace in a subsequent web log post. A particularly thorny issue is renaming an AD-joined computer that has a disjoint DNS suffix.

Source: https://blogs.uw.edu/uwwi-blog/2012/12/14/computer-primary-dns-suffix/

Posted by: pattersonackwoure.blogspot.com

Share this post