Creating DNS record

Hi,
Our external facing web server was recently moved to an external hosting provider but when they set it up they set the address as Home - Dilworth School instead of Home - Dilworth School. There is a database backend to this and changing the name of the server would be a major undertaking. The problem is that any emails that are generated from within this website have links pointing to Home - Dilworth School. The company that manages our external DNS records have put in an appropriate record so people outside get sent to the right place but I cannot work out how to do this internally.
When I go to create a resource record in the DNS/DHCP management console it insists that I must fill in the owner name field so I am not sure how to get around this.
thanks
Keith

Thanks - that worked. Windows would not let me do it - tried to create a DNS key when I asked it to create a resource record. Running the DNS/DHCP management console directly on the server worked.

Similar Messages

Correct way of creating DNS record

I want to create a DNS record for below
Project.mumbai.contoso.com with IP 215.67.X.X
I already have existing forward lookup zone created for contoso.com.
Is it better to create a host record 'Project.Mumbai' with ip 215.67.X.X?
or create one more forward lookup zone 'Project.Mumbai.Contosso.com' and cerate A record for 'Projec'?
Mahi

Hi Mahi,
Are you asking if you should create "project.mumbai" in the contoso.com domain, or if you should create "project" in the mumbai.contoso.com domain?
The choice depends on how you want to manage these records. If there will be a need to manage contoso.com and mumbai.contoso.com separately, then you should create two domains. You might have this need, for example, if the contoso.com domain is very
large, or if you want to host mumbai.contoso.com on a different DNS server, or if mumbai.contoso.com corresponds to an Active Directory domain elsewhere.
If none of these things are true, it will probably be easier to manage a single domain so you can just create contoso.com and add the host project.mumbai in this single domain.
-Greg

Creating a little GUI with adding DNS record functionality

Hi all,
Creating a DNS record (A record) is pretty straight forward in Powershell. I wonder if somebody knows how to create a little GUI with the powershell commands in the background to create DNS records.
For example something like a HTML form in where u can enter the DNS name, the Zone and the IPv4 address. Click Add and Powershell will add it on the background. I cannot find any good information on this when i google on it.
Thanks!

Hi Bennekommer,
I‘m writing to check if the suggestions were helpful, if you have any questions, please feel free to let me know.
If you have any feedback on our support, please click here.
Best Regards,
Anna
TechNet Community Support
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Dnscmd's OpenAcl option doesn't seem to change DNS record permissions

I'm creating DNS A records with dnscmd /recordadd, and I can't see a difference in the A record's permissions whether I use the OpenAcl option or not. Is this normal?
I was expecting with OpenAcl to see permissions similar to Write permissions for Authenticated Users or something. Instead I can't see any difference in the permissions at all and the permissions for non-admins are Read permissions for Everyone.
The DCs run win 2008 R2 SP1. The syntax I've been using for dnscmd.exe is:
dnscmd /recordadd mydomain.com mycomputer /aging /openacl A 192.168.0.123
I want to migrate from Infoblox DNS to AD-integrated. So I'm expecting to export to csv from Infoblox, reformat the csv file a bit and use dnscmd.exe to read the reformatted csv and create DNS records in AD. I'll also enable the option on the Windows computers
to register their DNS records.
I think that the records that dnscmd.exe creates in AD won't have permissions that allow the Windows computers to overwrite them unless I use the OpenAcl option. But OpenAcl doesn't seem to make any difference to the permissions. Very confusing! Thanks for
any help.

Thanks Kumar and sorry for replying so late. What you said is correct and what solved my problem was running Windows Update. I was testing using W2K8 R2 with SP1 but no updates after that. After I ran Windows Update, then creating a DNS record using dnsmd.exe
with the /OpenAcl argument did indeed set the permissions on the DNS record so that Authenticated Users could write to it.

Can we generate the Offfice 365 MX-Token needed for the MX-DNS-Record by ourselves?

Hi there
As a hosting company we programmed a DNS-zone-editor in which our customers can edit their DNS-zone. A new feature we are offering is a so-called "DNS-Template-Service", in which our customers can select predefined record templates like GoogleApps
and then trigger by one click the installation of the predefined records.
We also would like to offer them "Office 365" as a template. According to this article https://support.office.com/en-ie/article/Create-DNS-records-at-any-DNS-hosting-provider-for-Office-365-7b7b075d-79f9-4e37-8a9e-fb60c1d95166#BKMK_add_CNAME we
understand that all we need to do is to add a couple of CNAME, TXT and SRV records which is great.
However, there is also an MX record with a dynamical component (the "MX-Token") that is required:
<MX token>.mail.protection.outlook.com
We understand that this token can be fetched by the customer from their office installation. However that would break the purpose of our templating system that is designed to work like an on/off switch.
So our question is if there is any way that our system could generate this token by itself since we have knowledge of the customers domain anyway.
According to some customers who already installed those records manually we can see some patterns:
Example 1: domain1.com results in an MX with a value of
domain1-com.mail.protection.outlook.com
This is easy: just replace the dot with a hyphen.
However for domains with hyphens in the name a special conversion is made and appended on the back of the first part:
Example 2: domain-withdash.com results in an MX with a value of domainwithdash-com01e.mail.protection.outlook.com
Example 3: dom-ainwithdash.com results in an MX with a value of domainwithdash-com0i.mail.protection.outlook.com
Example 4: doma-in-withadash.ch results in an MX with a value of domainwithdash-com01bb.mail.protection.outlook.com
So what is the algorithm for this (probably bidirectional) conversion?
Thanks for letting us know and make it easier for our customers to use office 365 with their own domain name.
Regards
Lukas
Developer @ cyon GmbH

We actually spent the last 1.5h to reverse-engineer the pattern and (hopefully) found the right answer on how these hyphen-replacements are substituted.
* This functions generates a token as done in office 365
* @return mixed|string
private function getOffice365MxToken($domain)
$delimiter = '0'; // delimiter between the domain part and the hyphen replacement part
$token = $domain;
$hyphenReplaceToken = '';
// split domain string into chunks of 4 chars
$chunkSize = 4;
$chunks = str_split($token, $chunkSize);
// transform the hyphens (their position) in the domain name to an alphanumerical character string
$skipCount = 0;
$intOfA = ord('a'); // get the decimal value of the letter 'a' as start value
foreach($chunks as $chunk){
$digit = $intOfA;
for ($i = 0; $i < $chunkSize; $i++){
if('-' === $chunk[$i]){
$digit += pow(2, $i);
if($intOfA === $digit){ // if the value is a it means no hyphen was found
$skipCount++;
continue;
if (0 !== $skipCount) {
$hyphenReplaceToken .= $skipCount;
$hyphenReplaceToken .= chr($digit);
$skipCount = 0; // rewind skip count
if(strlen($hyphenReplaceToken) > 0){
$token .= $delimiter . $hyphenReplaceToken;
$token = str_replace('-', '', $token); // remove - from domain name
$token = str_replace('.', '-', $token); // replace dots with -
return $token;
Short-hand explanation: The pattern showed that the domain string simply gets chunked into pieces of 4 chars. For each setting at which hyphen(s) can be located at the index value (seen as bit mask 0124) is added up. The resulting number we get per chunk
then can be added to starting decimal value of the letter 'a' (97) and thus gives us another letter that substitutes the hyphens locations in this chuck. If no hyphen is found, the algo simply counts for how many chunks none were find and adds this up sa a
number.
These concatenated letters + skip-numbers then result in the replacement token that gets appended on the end of the domain name (hyphens removed, dots replaced with hyphens).
Oh and yeah, between these two parts a '0' is added as delimiter.
That's it. I hope we got it correct.
Regards
Lukas @ cyon GmbH

DNS record ownership and the DnsUpdateProxy group

I have a 2 x 2003 domain controller that have DNS and DHCP Services installed
I was thinking of configuring DHCP to use a service account to update DNS records.
If I set this, do the DHCP Servers need to be members of the DNSUpdateProxy security group for the service account to work?>

I have to agree with John here. I don't think it's reasonable to just say 'ms told us so'. We need a
technical before and answer is given. I have multiple DHCP servers and I use a security account on them to register the records and never use the
DNSUpdateProxy Group and I have no problems. My thinking is this:
Assume we are using Integrated Secure Zones in AD:
Scenario 1:
Windows DHCP server i registering records on behalf of clients
Not a member of DNSUpdateProxy Group and not using dedicated account
Records will have owner as dhcpserver$ and only that account can update
This is a problem if that DHCP server fails
Also, non Windows DHCP server with no AD account cannot update
Scenario 2:
Windows DHCP server i registering records on behalf of clients
Member of DNSUpdateProxy Group and not using dedicated account
Records will have owner as SYSTEM and authenticated users can updated meaning any user or client on that domain
No problem if that DHCP server fails as any other authorized DHCP server can update
Non Windows DHCP servers can updated if they have a domain machine account
Scenario 3:
Windows DHCP server i registering records on behalf of clients
Using a dedicated account
Records added with owner same as this dedicated account
Another DHCP server that also uses this same account can updated the records
A non windows DHCP server that can use this account can also update the records
Now, can someone from MS please clarify the technical reason they say that in Scenario 3, you must add the DHCP servers to the
DNSUpdateProxy group ?
http://technet.microsoft.com/en-us/library/cc780538(v=ws.10).aspx
I guess this link didn't help?
DNS Record Ownership and the DnsUpdateProxy Group
"... to protect against unsecured records or to permit members of the DnsUpdateProxy group to register records in zones that allow only secured dynamic updates, you must create a dedicated user account and configure DHCP servers to perform DNS dynamic updates
with the credentials of this account (user name, password, and domain). Multiple DHCP servers can use the credentials of one dedicated user account."
http://technet.microsoft.com/en-us/library/dd334715(WS.10).aspx
Just to add:
Why is the DnsUpdateProxy group needed in conjunction with credentials?
The technical reason is twofold:
DnsUpdateProxy:
Objects created by members of the DNSUpdateProxy group have no security; therefore, any authenticated user can take ownership of the objects.
DHCP Credentials:
Forces ownership to the account used in the credentials, which the DnsUpdateProxy group allowed to take ownership other than the registering client.
Otherwise, the default process is outlined below, and this applies to non-Microsoft operating systems, too, but please note that non-Microsoft operating systems can't use Kerberos to authenticate to dynbamically update into a Secure Only zone, however
you can configure Windows DHCP to do that for you.
1. By default, Windows 2000 and newer statically configured machines will
register their own A record (hostname) and PTR (reverse entry) into DNS.
2. If set to DHCP, a Windows 2000, 2003 or XP machine, will request DHCP to allow
the machine itself to register its own A (forward entry) record, but DHCP will register its PTR
(reverse entry) record.
3. If Windows 2008/Vista, or newer, the DHCP server always registers and updates client information in DNS.
   Note: "This is a modified configuration supported for DHCP servers
         running Windows Server 2008 and DHCP clients. In this mode,
         the DHCP server always performs updates of the client's FQDN,
         leased IP address information, and both its host (A) and
         pointer (PTR) resource records, regardless of whether the
         client has requested to perform its own updates."
         Quoted from, and more info on this, see:
http://technet.microsoft.com/en-us/library/dd145315(v=WS.10).aspx
4. The entity that registers the record in DNS, owns the record.
   Note "With secure dynamic update, only the computers and users you specify
        in an ACL can create or modify dnsNode objects within the zone.
        By default, the ACL gives Create permission to all members of the
        Authenticated User group, the group of all authenticated computers
        and users in an Active Directory forest. This means that any
        authenticated user or computer can create a new object in the zone.
        Also by default, the creator owns the new object and is given full control of it."
        Quoted from, and more info on this:
http://technet.microsoft.com/en-us/library/cc961412.aspx
More on this discussed in:
http://social.technet.microsoft.com/Forums/windowsserver/en-US/6f5b82cf-48df-495e-b628-6b1a9a0876ba/regular-domain-user-uses-rsat-to-create-dns-records?forum=winserverNIS
If that doesn't help, I highly suggest to contact Microsoft Support to get a definitive response. If you do, I would be highly curious what they say if it's any different than what I found out from the product group (mentioned earlier in this thread).
And of course, if you can update what you find out, it will surely benefit others reading this thread that have the same question!
Thank you!
Ace Fekay
MVP, MCT, MCSE 2012, MCITP EA & MCTS Windows 2008/R2, Exchange 2013, 2010 EA & 2007, MCSE & MCSA 2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer
Microsoft MVP - Directory Services
Complete List of Technical Blogs: http://www.delawarecountycomputerconsulting.com/technicalblogs.php
This posting is provided AS-IS with no warranties or guarantees and confers no rights.

DHCP creating DNS entries in domain root.

Hello,
I have a Windows DHCP server in a child domain that serves leases to Windows and Linux clients. It also create DNS records for all current leases as well. Recently I noticed it it was creating the DNS records for a few Linux machines in the domain
root DNS and not the client domain DNS.
Is there a way to prevent the dynamic account from creating dns records in the domain root dns?
Thanks!
Shawn

Can we get some more info on your config?
- Is this only affecting non Windows boxes?
- Are your DNS zones forest integrated or just domain integrated?
- Are the DNS servers configured for the scope in the child domain and only hosting the child DNS zones?
- Is the DHCP in the child or root domain?
When dynamic DNS registration happens, it sends the DNS update to the DNS server. What I'm looking for right now in the technical manual is whether the DHCP server sends it to the scope's DNS servers or if it's using it's own DNS servers. If
the DNS server is in the root domain, maybe that could be an issue.
- If you find my posts to be helpful (or the answer), please mark them appropriately.
Chris Ream

How many DNS record need to create in Internal & external DNS server for exchange?

Hi friends,
I recently installed Exchange Server 2010 in my organization for testing purpose and I've register a pubic ip too for exchange server on godaddy.com. How many
internal & External DNS records reqired to configure on external & Internal dns server so my all feature like Auto-discover, Activ -sync,& webmail start working perfectly.
It's my first time configuring exchange for a organization.
Thanks & Regards,
Pradeep Chaugule

Hi,
Just as what ManU Philip said, you need to create
Autodiscovery.domaincom and mail.domain.com for external dns server.
Generally, you configure your Exchange Servers as DNS clients of your internal DNS server.
Refer from:
http://technet.microsoft.com/en-us/library/aa996996(v=exchg.65).aspx
Best Regards.

How do I create a DNS record on my Mac Server?

How do I create a DNS record on my Mac Server?

The following is info that I found in another post that I have been trying to follow.
MrHoffman New England
Re: Configure DNS - OS X Server Next Steps
Feb 13, 2011 6:36 AM (in response to Jimbooooooo)
You're setting up internal DNS services, you referenced your ISP DNS servers and you should not have, and now those servers have no translations for your hosts. This is a common misconfiguration.
See [configuring DNS on Mac OS X Server|http://labs.hoffmanlabs.com/node/1436] for how to set up your internal DNS server.
And if there are any references to your ISP DNS servers here (within your client settings, within your server settings, your Airport settings, etc), then you're usually going to have DNS and connectivity problems. You're running a server now, so you'll be running your own services, and (particularly because of NAT here) referencing only your own DNS server(s).
You may be setting up external DNS (if and when you need that), but that should happen after you set up your internal DNS. The above article has a link to setting up external DNS, when you get around to that, if/when you need in-bound connections into your LAN.

How to create a DNS record for a domain itself (without a hostname)

Hi,
Normally, you can create a DNS record that points to the zone itself, e.g.:
@ 10800 IN A 196.197.200.201
How do you accomplish that on a Mac OSX Lion Server? The DNS requires you to enter a hostname and it does not accept "@" as the hostname as it normally appears in the zone file.
(manually modifying the host file does not work - I tried that ;-) )
Any help is appreciated
Thanks
Bjoern Dirchsen

Create either a blank record with a ., or a FQDN such as 'domain.com.' (note the trailing dot). Either of these should map to the domain name.

Allow a user to create/change records in 2008 R2 DNS

Hi,
We currently have a 2008 R2 domain with two AD servers running DNS. I want to grant permission to a regular user to be able to create/modify records on the DNS server for the primary domain (company.com).
I have done some reading but everything keeps pointing to a zone delegation, which sounds overly complex and I am not sure it is what I want to do (I don't want a sub-domain).
I think the DNSAdmins group will give them too much control over the server (change forwarders, etc..).
I somehow managed to do this on a 2003 server DNS setup, but when I look at the security tabs for both the domain and the server, I cannot find any mention of the user who is able to create records, so I am not sure what I did to get this working.
Can someone please clarify how I might be able to go about accomplishing this task.
Thanks in advance!

I think the DNSAdmins group will give them too much control over the server (change forwarders, etc..).
Create a custom MMC snapin and assign related permissions. The picture below may give you an idea:
Mahdi Tehrani |
|
www.mahditehrani.ir
Please click on Propose As Answer or to mark this post as
and helpful for other people.
This posting is provided AS-IS with no warranties, and confers no rights.
How to query members of 'Local Administrators' group in all computers?

DNS record is not dynamically created in DNS Zone, when joining to DNS domain

hi
in my test lab i have deployed two virtual machines (both are windows server 2008 R2 enterprise).
on vm1 i have installed just DNS role (without Active directory) and created a primary non-ADintegrated zone.
on this DNS zone, i have enabled dynamic update set to
non-secure & secure .
now in my vm2 (as a DNS client) , i set the ip address of this DNS server as preferred DNS server and then in system properties, on the primary DNS suffix field, i entered the name of my DNS domain (mydomain.lab)& rebooted VM2, but the a record of this
client (vm2) is not registered (created ) in mydomain.lab zone.
i respect the record be created like the situations which we join a client to AD domain

Hi John ,
When registering DNS record ,client will send a SOA query to find the primary server of the zone .Then send register message to the server .
We can use nslookup to find the problem :
Open Command Prompt
type nslookup
type set type=soa
type zone name
1. If there is positive response ,check the name of
primary name server and the IP address of the server .
Its name should be vm1.mydomain.lab .If not ,edit the SOA record in the zone .
If no IP address ,edit NS record in the zone .
2. If there is no response ,check the SOA record in the zone .
We can manually delete and recreate the records to ensure there are right SOA and NS records .
Here is the guide for using nslookup :
Nslookup :
https://technet.microsoft.com/en-us/library/cc940085.aspx
Best Regards,
Leo
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]
Hi Leo, thanks for reply.
i did all steps you mentioned but still no result.
i put an screenshot of my desktop here , everything is shown here:

Creating a DNS Record for a Host with Two or More IP???

Can we create DNS A Record for a Host with Two or More IP ... ( we like to use my website "mysite.com" pointing to two Ips )
Please help...

Sure, no worries.
In a production environment DNS will query always the first record it will stores in cache, you need to find a dynamic or NLB way to achieve the automatic fail over else when you will have an outage with the first IP, then you need to ask your clients to
clear the cache and register to DNS again, this i will not suggest in a production environment, lots of manual efforts and doesnt sound like a solution in a production environment, i would suggest you to explore windows NLB, it's easy to set and use the OS
license.
Thanks
Inderjit

2012R2 hyper-v failover cluster Cluster name object has no DNS record created

I’m trying to setup a 2-node ws2012R2 cluster using ws2008R2 AD(with DNS) but got an issue with DNS entry creation on AD. I also tried ws2012 AD but it's the same problem.
The individual node DNS entries were created on AD automatically upon joining AD but I can’t get AD to create DNS entry for my cluster name object automatically. AD will have cluster name computer
created but no record for cluster name in DNS entries
Got the following event ID 1196 error with the info below.
Cluster network name resource 'Cluster Name' failed registration of one or more associated DNS name(s) for the following reason:
DNS server failure.

Hi hjma29,
How about your issue now? I just want to confirm the current situations.
Please feel free to let us know if you need further assistance.
Regards.
We
are trying to better understand customer views on social support experience, so your participation in this
interview project would be greatly appreciated if you have time.
Thanks for helping make community forums a great place.

Create a DNS record that switches IP address based on active server

Good morning,
I am trying to create a DNS record that will automatically update which server is the "primary" server. We use a utility to lock the data and mirror between two servers on our network. I have been investigating scripting the
DNS record edit when we change over to the backup server but am still working on that.
So essentially,
I have SERVER-SQL record created. When SERVERSQL1 is the primary with an ip of 1.1.1.1, I want SERVER-SQL to have the IP address of 1.1.1.1. When SERVERSQL2 is the primary with an ip of 2.2.2.2, I want SERVER-SQL record to have the IP address
2.2.2.2.
Any help would be appreciated.

Hi,
According to your description, I suppose that you have two SQL server, one is active and another is passive. I noticed that the
name is record is presented as SERVER-SQL which is different from both of the two servers. So we need create a CNAME record here.
Based on my knowledge, A record can be created dynamically. But we still need create CNAME record manually. So I think the solution
is back to the scripts.
Hope this helps.

Creating DNS record

Similar Messages

Maybe you are looking for