Best Practice DNS settings for a domain controller (VM) in Azure

Sam Na 46 Reputation points

We have extended our on-prem services to Azure, and we have multiple Azure VMs (2022 domain controllers) in different regions. (no networking issues at all) Just wanted to know the best practices when it comes to DNS settings:

1- Which option on the Azure side would be the best-> the "Inherit from Vnet" or "Custome DNS Servers" option? (NIC settings, the Azure side)

2- Should we leave the DNS settings as "Obtain DNS Server automatically" or we should enter the preferred DNS server addresses? (On the NIC, inside the Azure VM-2022 Server).

3- DNS forwarders-> is using necessary? (if we are NOT planning to use private DNS features).

Azure DNS
Azure DNS
An Azure service that enables hosting Domain Name System (DNS) domains in Azure.
568 questions
Azure Virtual Network
Azure Virtual Network
An Azure networking service that is used to provision private networks and optionally to connect to on-premises datacenters.
2,026 questions
Windows Server
Windows Server
A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.
11,708 questions
{count} votes

Accepted answer
  1. Konstantinos Passadis 16,481 Reputation points

    Hello @Sam Na !

    Your questions are valid , allow me to help !

    1. Usually for the reason of central management and configuration it i better to manage global settings rather than specifics. Unless your needs instruct otherwise better stay inherited
    2. For an Azure VM we never touch the NIC setting. It is a SOS !
    3. Yes , Azure DNS is perfectly fine for a standard DNS resolver , unless you have specific needs via VPN , On Prem Applications.

    Keep in mind it is not a one size fits all ! Your needs are setting the stage !

    Reference Links


    I hope this helps!

    Kindly mark the answer as Accepted and Upvote in case it helped! Regards

    1 person found this answer helpful.
    0 comments No comments

0 additional answers

Sort by: Most helpful