Differences between revisions 16 and 17
Revision 16 as of 2017-09-10 18:12:50
Size: 1545
Editor: scot
Comment:
Revision 17 as of 2017-10-03 21:18:15
Size: 1262
Editor: scot
Comment:
Deletions are marked like this. Additions are marked like this.
Line 5: Line 5:
 1. Install a new Windows 2016 Server (with GUI, we will remove the GUI later).
 1. Give it an IP address of 192.168.1.4 and name it cpte230c
 1. Join it to the primary domain, but don't make it a Domain Controllerd (same way we did for windows 10)
 1. Use server manager to add the DNS role to the new server
 1. Configure your original sever to allow zone transfers to the new server.
 1. Create a secondary Zone on the server for your original domain
 1. Perform a zone transfer
 1. Configure DNSSEC on the primary zone (make sure both servers are showing the DNSSEC entries)
 1. Configure cpte230a sever to allow zone transfers to cpte230b and vice versa.
 1. Create a secondary Zone on cpte230a for your subdomain
 1. Create a secondary Zone on cpte230b for your root domain
 1. Perform a zone transfers for each secondary zone
 1. Configure DNSSEC on the primary zones of each domain
    1. Make sure both servers are showing the DNSSEC entries.
    1. You may have to perform an additional zone transfer.
Line 26: Line 25:
||Video Shows: New installation of core only (no gui) ||30 ||
||Video Shows: That the new core server is added to the domain - be creative there are a lot of ways to do this. ||10 ||
||Video Shows: DNS configuration as described in the instructions ||20 ||
||Video Shows: DNS configuration as described in the instructions Both primary and secondary zones of each domain ||60 ||

Lab 05

When you installed your initial Windows 2016 server with AD, you also installed a DNS server as part of the installation. In this lab you will install a core server version of Windows 2016.

  1. Configure cpte230a sever to allow zone transfers to cpte230b and vice versa.
  2. Create a secondary Zone on cpte230a for your subdomain
  3. Create a secondary Zone on cpte230b for your root domain
  4. Perform a zone transfers for each secondary zone
  5. Configure DNSSEC on the primary zones of each domain
    1. Make sure both servers are showing the DNSSEC entries.
    2. You may have to perform an additional zone transfer.

Documentation

Include the following information:

  • Updated network diagram and documentation.
  • Document the DNS system as it is at the end of this lab in the networking page.
    • DNS Servers
    • DNS Zones
    • Security features
    • Secondary DNS installation procedures

Video Grade Guide

Topics

Points

Video Shows: DNS configuration as described in the instructions Both primary and secondary zones of each domain

60

Video talks through the documentation required.

40

WindowsAdministration/Lab05SetupSecondaryDns (last edited 2023-10-18 21:06:51 by scot)