Best Practices Analyzer for Domain Name System: Operation

Applies To: Windows Server 2008, Windows Server 2008 R2

Topics in this section can help you bring DNS running on Windows Server® 2008 or Windows Server® 2008 R2 into compliance with operation best practices. Content in this section is most valuable to administrators who have completed a Best Practices Analyzer or Microsoft Baseline Configuration Analyzer scan of DNS, and who want information about how to interpret and resolve scan results that identify areas of DNS that are noncompliant with operation best practices.

Operation rules are applied to identify best-practice-related possible causes of a role’s failures to carry out its prescribed tasks in the enterprise. An example of a violation of operation rules that a Best Practices Analyzer scan might find is a service that is paused or stopped.

For more information about Best Practices Analyzer and scans, see Best Practices Analyzer.

• DNS: The DNS server <IP address> on <adapter name> must be able to resolve names in the forest root domain name zone

• DNS: The DNS server <IP address> on <adapter name> must be able to resolve names in the primary DNS domain zone

• DNS: The DNS server <IP address> on <adapter name> must resolve Global Catalog resource records for the domain controller

• DNS: The DNS server <IP address> on <adapter name> must resolve Kerberos resource records for the domain controller

• DNS: The DNS server <IP address> on <adapter name> must resolve LDAP resource records for the domain controller

• DNS: The DNS server <IP address> on <adapter name> must resolve PDC RRs for the domain controller

• DNS: The DNS server <IP address> on <adapter name> must  resolve the name of this computer

• DNS: DNS servers assigned to the network adapter should respond consistently

• DNS: Zone <zone name> master servers must respond to queries for the zone

• DNS: Zone <zone name> secondary servers must respond to queries for the zone

• DNS: Zone <zone name> master server <IP address> must respond to queries for the zone

• DNS: Zone <zone name> secondary server <IP address> should respond to queries for the zone

• DNS: Root hint server <IP address> must respond to NS queries for the root zone

• DNS: At least one name server in the list of root hints must respond to queries for the root zone

• DNS: The DNS server configured on the adapter <adapter name> should resolve the name of this computer

• DNS: Zone <zone name> is an Active Directory integrated DNS zone and must be running

Best Practices Analyzer for Domain Name System: Configuration