Question : DNS and AD authentication

DNS and AD authentication

I have 2 sites site1 and site2
I created an Active Directory structure in site1 then in site2 I create a domain controller and configured its preferred DNS server to be the DNS server in Site1.
I have also installed DNS service in the DC of the Site2.
Now if I run nslookup domainname.com in site2 the reply will come from the DNS server in site1.
I am afraid clients in site2 will get autheticated by the DC in site1 eventhough in DHCP scope I put their preferred DNS server is the DNS of Site2.

SO my question is do I need to leave the DNS settings the way they are or I need to change the DNS server in Site2 to have as preferred DNS to point to its own IP address instead of the one in Site1??

Thanks


 

Answer : DNS and AD authentication

The clients will use the DNS server as configured in DHCP (check with ipconfig /all).
The setting you made with "and configured its preferred DNS server to be the DNS server in Site1" only affects how queries *originating* at server 2 are handled and possibly those forwarded because they arenot directly known to server2.

It may however be preferable to have both servers prefer themselves once AD and AD-integrated DNS zones are ready