DNS Scavenging Multiple Sites?

[Guest /u/The_Great_Sephiroth]

I've never had a problem using scavenging before, but I've always worked with a setup slightly different from the place I work at now. In previous ventures we had our top-level stuff at the admin area, like "mycompany.lan" as the top-level AD domain. Each remote site was a sub-domain, such as "site01.mycompany.lan" and "site02.mycompany.lan". The place I work now only has one giant domain across about twenty sites, all remote. So "mycompany.lan" is used everywhere. Each site DOES has a unique subnet, but DNS entries are all dumped into the "mycompany.lan" area in DNS no matter what site they come from.

 

In the past, you'd have a DC in each site deal with scavenging that subnet. The site01 DC would scavenge "site01.mycompany.lan" DNS and the admin DC would scavenge "mycompany.lan", etc. Simple. On this new setup, I only have the admin area DC scavenging right now. Is this correct? Should I have one DC per site scavenging since each site has its own subnet despite there only being one domain/forest?

 

More info before it is requested. When I started here, ADSS was not configured at all and reverse zones did not exist. I created reverse zones for each subnet and setup ADSS and got it working. I'm just not sure if I should leave all scavenging up to the admin DC or if each site should be doing it.

 

submitted by /u/The_Great_Sephiroth

[link] [comments]

 

Continue reading...