Migrate off non AD integrated DNS to AD integrated DNS

Question

I am looking to migrate to AD integrated DNS so I installed a new DC into the existing domain and installed the DNS role onto this server. My expectation was that a zone for the AD environment would be created automatically but that does not seem to be the case. Do I need to create the zone manually?

Answer 1

Can you confirm that upon installation the first DC created the Active Directory DNS records on the DNS server?

Yes, as you can see the picture below(this is my standalone DNS server -192.168.10.3):

DC1:192.168.10.1
DC2:192.168.10.2

When you added your second DC and then added the DNS role was DNS installed with forwarders pointing to the same DNS servers on the NIC?

Yes, DC1 and DC2's primary DNS server are all pointing to the standalone DNS server(192.168.10.3).

As you can see below:

--------------------------------------------------------------

If the Answer is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

A couple of options here.
https://www.techrepublic.com/blog/the-enterprise-cloud/how-to-migrate-dns-information-to-windows-server-2008/
https://social.technet.microsoft.com/Forums/ie/en-US/2fb62639-35fe-450b-adc8-1c4036663bc5/migrate-public-dns-non-adintegrated-to-new-servers-new-namesip?forum=winserveripamdhcpdns

--please don't forget to Accept as answer if the reply is helpful--

Answer 3

Hi ,

A zone can't be AD integrated if it isn't on a Domain Controller. Promote the standalone DNS servers to Domain Controllers and then the zone will replicate across the other DC/DNS servers.

Did you mean that you have promoted the standalone DNS servers to Domain Controllers but the zone cannot be replicated? Please feel free to let me know if I have anything misunderstanding. If yes, we might need to check AD replica.

Run the following command on your PDC:

repadmin /replsum    
repadmin /showrepl * /csv >c:\repsum.csv  

Also, refresh DND manager to see if the zone can be reloaded successfully.

Best Regards,

Candy

--------------------------------------------------------------

If the Answer is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 4

Hi ,

I did a test in my lab, install AD without DNS role and then install DNS role onto the existing DC. The zone matching the domain name are created automatically.

In your case, it seems the DNS role not be installed successfully. Please reinstall DNS role again or install DNS role on other DC to do a check. The zone for the AD environment should be created automatically.

Best Regards,

Candy

Answer 5

Thank you for testing. I will do as you say and circle back with my results.