Using only a specific DNS Server while connected to a specific Subnet

Question

Hi,

Is it possible to restrict the domain connected pcs to use only a specific DNS Server address when they connect to a specific Subnet regardless of the number of DNS Servers in a domain?

Thanks.

Answer 1

Hi @create share I'm not sure where is your deployment, so here there is for Onprem and on Azure:

On-premise:

On your DHCP Scope you can specify the DNS server fo an specific subnet , this will depends how you are setting up the dns configuration on your machines.

On Azure

At vnet level you can specify the dns server target:

Another option is doing at interface level , so you be specify on dns server configuration by VM:

Beside you can use command with the "Set-AzNetworkInterface" PowerShell commandlet to change DNS settings on a network interface. (https://learn.microsoft.com/en-us/powershell/module/az.network/set-aznetworkinterface?view=azps-4.4.0#description)

Or you can use the Azure CLI "az network nic update" cmdlet. ( https://learn.microsoft.com/en-us/cli/azure/network/nic?view=azure-cli-latest#az-network-nic-update)

Cheers,

Luis Arias

---

If the information helped address your question, please Accept the answer.

Answer 2

Hi,

It is on-premise. I am already using the correct DNS Entry in the DHCP Scope. I think I asked the wrong question. The problem is actually with the DNS Domain Name. I need all the PCs to be authenticated by a specific DC which is not happening now. When I am pinging the dns domain name "domain.com", instead of pinging the DC in the same office, it is pinging the main office DCs and then I have to run ipconfig /flushdns multiple times to let it ping the required DC..

Thanks.

Answer 3

I think the problem has been resolved after removing the IP Addresses of other DCs from the NIC on the branch DC.

Answer 4

No, the problem has come back. Any other suggestions?

Answer 5

Hi @create share additional actions that you can do are setup a Multisite Infrastructure in your active directory onpremise with a new site and new subnet:

• Open AD site and services create a Site
• Create new Site
• Create subnet using the network CIDR that you want to create specific configuration , linked to the new site
• Go to you default site and move the DC that you want to use to authenticate this subnet

You can configure Multisite infrastructure and the additional requirement:

• https://learn.microsoft.com/en-us/windows-server/remote/remote-access/ras/multisite/configure/configure-a-multisite-deployment
• https://learn.microsoft.com/en-us/windows-server/remote/remote-access/ras/multisite/configure/step-2-configure-the-multisite-infrastructure

Cheers,

Luis

---

If the information helped address your question, please Accept the answer.