Is configuring reverse DNS zones for Entra Domain Services best practice?

Question

Hi,

It looks as if I can configure reverse DNS easily enough on an Entra Domain Services instance using the DNS Remote Server Administration Tools, but - should I?

I'm surprised that I can't find much about reverse DNS for Entra Domain Services, yet it's one of the things I'd always do when creating a regular on-prem AD. Other than the Microsoft Entra Domain Service documentation, is there a list of best practises somewhere that I'm missing?

Cheers,
jmi

Answer 1

This indicates you can and should I would think:

https://learn.microsoft.com/en-us/entra/identity/domain-services/manage-dns#open-the-dns-management-console-to-administer-dns

Answer 2

Hello @jmi,

Thank you for posting your query on Microsoft Q&A.

You can set up reverse DNS in Microsoft Entra Domain Services using the DNS Remote Server Administration Tools, but whether it’s necessary depends on your needs. Reverse DNS helps with IP verification and troubleshooting, so it could be useful if those are priorities for you. However, follow Entra Domain Services guidelines—avoid redirecting zones like windowsazure.com or core.windows.net to prevent support issues. Limit redirections to individual hostnames if needed.

For further guidance, refer to https://learn.microsoft.com/en-us/entra/identity/domain-services/manage-dns

 

hope this information is helpful. Please feel free to reach out if you have any further questions.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".