The Best Damn Windows Server 2003 Book Period- P78:The latest incarnation of Microsoft’s server product,Windows Server 2003, brings many new features and improvements that make the network administrator’s job chapter will briefly summarize what’s new in 2003 and introduce you to the four members of the Windows Server 2003 family: the Web Edition, the Standard Edition, the Enterprise Edition, and the Datacenter Edition. | 736 Chapter 20 Planning Implementing and Maintaining a Name Resolution Strategy default the DNS server will allow zone transfers to only those DNS servers listed as name servers for the zone. However you might need to reconfigure these restrictions so that you specify the IP addresses of computers that are authorized to pull zone information. Another cause of failed zone transfers is the use of nonstandard characters in DNS names. By default Microsoft DNS servers are configured to load the zone even if they encounter bad data. However BIND servers are not as forgiving. In addition WINS forward and reverse lookup records can cause problems if replicated to BIND can prevent WINS records from replicating to BIND servers. If you are replicating to BIND servers you should use only standard DNS characters. Another common cause of zone transfer problems is an incorrect version number in the SOA of the primary or secondary determine whether to request a zone transfer from the primary server the secondary server will compare the version number of the primary s SOA with its own. If the primary s number is higher the secondary will request either a full or an incremental zone transfer. If the version number is reset on the primary so that it is lower than the version number in the secondary s SOA the zone transfer will fail. If queries to subdomains are failing the cause is most likely a lame delegation of authority. A lame delegation occurs when the name server and glue address records do not point correctly to the servers that are authoritative for the subdomain. NSLookup and DNSLint are useful tools in helping to troubleshoot problems with delegations. If dynamic updates are failing the cause of the problem might be related to the security settings and ownership of RRs in their ACLs. For example if a DHCP server is the original owner of a record and a client subsequently gets its IP address from another DHCP server the dynamic update will fail. Another
