Special Edition Using Microsoft Active Directory

Delegating a Zone

Companies that have an existing investment in BIND are likely to want to retain BIND as their primary name server. One way to do that is simply to configure BIND for dynamic update, as you have seen in this chapter. However, another way will work even if the version of BIND does not support SRV and dynamic update.

You can delegate authority for a zone from one DNS server to another. In the following example, assume that fis.local is the root of your DNS namespace and is running on BIND. You want to create an AD domain called ad.fis.local, and you don't want the BIND administrators to be responsible for it.

You can pass the responsibility for the DNS zone, which is necessary for your new Active Directory domain, by delegating ...