can't resolve the dns queries made by Azure VM to onpremise resources

Question

Hi everyone,

we have a managed domain in Azure AD Domain Services, which is managed by a local DNS Server as well.

Since both Azure and Local DNS use the same domain (i.e. contoso.com), we can't resolve queries made by azure vm to onprem resources. Because when I start a query for something in contoso.com, it only tries to talk with Azure DNS Servers. Since the domain is not different, it doesn't look up external DNS servers.

I prepared a visual sample of the problem. What is the best practice for achieving this DNS resolution?

Thanks

Answer 1

Thank you for asking this question on the Microsoft Q&A Platform.

Assuming that you can ping the On-Premises DNS Server, you should add a third DNS Server (192.18.1.5) on your Azure VNET

Hope this helps!

---

Accept Answer and Upvote, if any of the above helped, this thread can help others in the community looking for remediation for similar issues.

NOTE: To answer you as quickly as possible, please mention me in your reply.

Answer 2

Hi,

One potential option would be to create necessary DNS entries for on premises hosts in Azure AD Domain Services. Another option depending on your needs is to run DCs in Azure for your on premises Active Directory instead of using Azure AD DS.

Please reference below article for creating DNS entries in AAD DS:

Administer DNS and create conditional forwarders in an Azure Active Directory Domain Services managed domain

https://learn.microsoft.com/en-us/azure/active-directory-domain-services/manage-dns

Please click Accept Answer if the above was useful.

Thanks.

-TP