Resource Records Used by Active Directory

When you promote a domain controller into a domain, a file containing the necessary resource records for it to function correctly within Active Directory is generated in %SystemRoot%\System32\Config\netlogon.dns.

The contents of the file will look something like the following for a DC named moose.mycorp.com in the mycorp.com domain with IP address 10.1.1.1. We've reordered the file a bit to group records of similar purpose together. Note that some lines may wrap due to their length.

    mycorp.com. 600 IN A 10.1.1.1
    ec4caf62-31b2-4773-bcce-7b1e31c04d25._msdcs.mycorp.com. 600 IN CNAME moose.mycorp.
    com.
    gc._msdcs.mycorp.com. 600 IN A 10.1.1.1
    _gc._tcp.mycorp.com. 600 IN SRV 0 100 3268 moose.mycorp.com.
    _gc._tcp.Default-First-Site-Name._sites.mycorp.com. 600 IN SRV 0 100 3268 moose.
    mycorp.com.
    _ldap._tcp.gc._msdcs.mycorp.com. 600 IN SRV 0 100 3268 moose.mycorp.com.
    _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.mycorp.com. 600 IN SRV 0 100 3268
    moose.mycorp.com.
    _kerberos._tcp.dc._msdcs.mycorp.com. 600 IN SRV 0 100 88 moose.mycorp.com.
 _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.mycorp.com. 600 IN SRV 0 100 88 moose.mycorp.com. _kerberos._tcp.mycorp.com. 600 IN SRV 0 100 88 moose.mycorp.com. _kerberos._tcp.Default-First-Site-Name._sites.mycorp.com. 600 IN SRV 0 100 88 moose. mycorp.com. _kerberos._udp.mycorp.com. 600 IN SRV 0 100 88 moose.mycorp.com. _kpasswd._tcp.mycorp.com. 600 IN SRV 0 100 464 moose.mycorp.com. _kpasswd._udp.mycorp.com. ...

Get Active Directory, 3rd Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.

Start your free trial