Active Directory External DNS
I often want to use Microsoft's Active Directory service alongside an existing DNS server. In my case it's usually pfSense but sometimes varies. Whenever I come around to setting it up again it takes me a while to find the TechNet article I need for reference.
These subdomains need delegating to your Active Directory server, which also needs the DNS role installed.
_tcp.<domain name>
_udp.<domain name>
_msdcs.<domain name>
_sites.<domain name>
It's quite straightforward to do this in pfSense.
- Open the DNS settings, Services -> DNS Resolver.
- Scroll down to the 'Domain Overrides' section at the bottom
- Create the overrides above, pointing to your AD server.
Other DNS services like BIND, you need to create some nameserver entries like these.
_msdcs.<domain name>. IN NS <domain name>.
_tcp.<domain name>. IN NS <domain name>.
_udp.<domain name>. IN NS <domain name>.
_sites.<domain name>. IN NS <domain name>.
Just for reference, here's the original TechNet link.