Azure Private DNS not resolving

Question

We have a client moving to everything Azure, cloud VM, AzureAD, ADDDS etc.

Setup Remote published APP on the VM and have it setup with a certificate remote.example.com which is configured on server 10.0.0.5
Created a Private DNS Zone: example.com then added an A Record and setup Virtual Network links to the Virtual Network hosting the servers/other services. DNS on the Virtual Network is using Azure ADDS IP and now "Default azure-provided) / no change.
A Record: remote.example.com 10.0.0.5

Problem is this isn't resolving from the server or AzureVPN dial in users.

I tested this further by creating another DNS zone called test.com and added similar entries like remote.test.com 10.0.0.5 and this worked fine, both from server and AzureVPN, successful ping resolutions.

The only difference besides domain name is that Azure ADDS is setup using example.com which is maybe somehow conflicting with DNS?

tested with hostfile directly on server/my pc during VPN and that works no problems but not a viable solution with multiple users on the VPN. I could also install DNS role on the server directly and configure that way but would like to make use of the Azure services available.

Any ideas?

Answer 1

Hello @CloudTech88 ,

As per this article, Azure AD DS provides its own DNS service. The virtual network must be configured to use these DNS service addresses. Name resolution for additional namespaces can be accomplished using conditional forwarders. So basically, you don't need any other DNS server for name resolution and can install the DNS server tools in your management VM and administer DNS in the DNS management console by following below article:
https://learn.microsoft.com/en-us/azure/active-directory-domain-services/manage-dns#install-dns-server-tools

But if you want to use Private DNS zone, you should be able to create a conditional forwarder in your AD DS DNS server to forward queries to your Private DNS zone as explained in the below article:
https://learn.microsoft.com/en-us/azure/active-directory-domain-services/manage-dns#create-conditional-forwarders

Hope this helps!

----------------------------------------------------------------------------------------------------------------

Please don’t forget to close the thread by clicking "Accept the answer" wherever the information provided helps you, as this can be beneficial to other community members.