none
RODC and domain.local zone, ping does not return local site RODC RRS feed

  • Question

  • Hello,

    I don't know if this is by design for Read Only Domain Controllers that are also RO DNS servers.

    When pinging domain.local (the AD zone) we get a list of results that match all the DCs but *not* the RODCs.

    DFS though is properly resolving to the local RODC.

    \\domain.local resolves to 192.168.1.10 (RODC)

    ping domain.local resolves to another site's DC 192.168.10.10

    We have 3 RODCs and none of them has their A record in the zone name.

    domain.local A writeable_dc1
    domain.local A writeable_dc2

    etc.

    Is this is a normal behavior?

    Thank you

    Tuesday, March 7, 2017 9:43 AM

All replies

  • Hi Alexander,

    >>ping domain.local resolves to another site's DC 192.168.10.10

    Yes, this behavior is normal.

    >>DFS though is properly resolving to the local RODC.

    Please check if DFS configuration is correct.

    Please check link below to understand it:

    DFS Namespaces and DFS Replication Overview

    https://technet.microsoft.com/en-us/library/jj127250(v=ws.11).aspx

    Best Regards

    John


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Wednesday, March 8, 2017 8:37 AM
  • Thanks for the quick reply! So if one has 5 DCs out of which all are DNS servers (4 writable , 1 RODC), resolving the domain name will only return the 4 writable IPs. Can I manually add the RODC A record as well ? I need to be sure that this wouldn't break anything . Cheers Alex

    Hi Alexander,

    >>ping domain.local resolves to another site's DC 192.168.10.10

    Yes, this behavior is normal.

    >>DFS though is properly resolving to the local RODC.

    Please check if DFS configuration is correct.

    Please check link below to understand it:

    DFS Namespaces and DFS Replication Overview

    https://technet.microsoft.com/en-us/library/jj127250(v=ws.11).aspx

    Best Regards

    John


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.


    Wednesday, March 8, 2017 4:42 PM
  • Hi Alexander,

    >>Can I manually add the RODC A record as well ? I need to be sure that this wouldn't break anything

    No, you cannot add any records on RODC DNS server, but you could add A records on primary DNS server, and then reload data on RODC DNS server.

    Best Regards

    John


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Thursday, March 9, 2017 2:01 AM
  • Hi Alexander,

    >>Can I manually add the RODC A record as well ? I need to be sure that this wouldn't break anything

    No, you cannot add any records on RODC DNS server, but you could add A records on primary DNS server, and then reload data on RODC DNS server.

    Best Regards

    John


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Thanks for your reply but maybe I haven't made myself clear on this.

    I know that the RODC DNS isn't writable. The question is more like "Am I allowed to have an A record pointing domain.local to an RODC?"

    Thanks again for your effort.

    Alex

    Monday, March 20, 2017 2:36 PM
  • Hi Alex,

    >>Am I allowed to have an A record pointing domain.local to an RODC?"

    You could create A record that points to RODC on primary DNS server.

    Best Regards

    John


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    • Proposed as answer by John Lii Monday, April 10, 2017 10:15 AM
    Wednesday, March 22, 2017 8:01 AM
  • Hi,

    Just want to confirm the current situations.

    Please feel free to let us know if you need further assistance.

    Best Regards,

    John


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Monday, April 10, 2017 10:15 AM