In a typical Microsoft Windows network, all the workstations look to the domain controllers for DNS. The domain controllers have to look to their own DNS servers so that they can resolve data about the network. If any computer has to resolve anything else that isn't hosted internally, it needs to know where to look. This is where DNS Forwarders come in. Windows 2012 uses a different method to setup DNS forwarding than Windows 2008, which is also different from Windows 2000 and 2003. Refer to section B. Windows 2008 of this article if you are using Windows 2008 server. Refer to section C. Windows 2003/2000 of this article if you are using Windows 2003 or Windows 2000 server.
SecureSchool, ISBossBox, LibraryDoor, Microsoft Windows Server
A. Windows 2012
A1. On your Windows Server 2012/2012 R2 server, bring up the Start Menu and click on Administrative Tools.
A2. When the Administrative Tools open, double-click the DNS console icon.
This will open the DNS Manager.
A3. In the DNS Manager, double-click on Forwarders.
You should be taken to the Forwarders tab in the server’s Properties.
A4. Click the Edit… button.
This will open the Edit Forwarders dialog.
A5. Type in the IP addresses for your SecureSchool appliance.
It should look something like this when you’re done.
A6. Click OK to close the dialog box.
After clicking OK, you’ll be taken back to the DNS server’s Properties. It should look something like the screenshot below.
A7. By default, the "Use root hints if no forwarders are available" box will be checked. Uncheck it.
A8. When you’re done, click OK.
Now that you've updated your Forwarders. You’ll need to clear the DNS cache.
A9. Click the View menu and then Advanced. This will enable you to see the Cached Lookups section in the DNS console.
A10. Right-click on Cached Lookups in the DNS Manager and choose Clear Cache.
You’re done! Remember, if you have more than one Windows Server 2012/2012 R2 DNS server, you’ll need to perform this change on each one. You’ll also need to run an ipconfig.exe /flushdns on your clients if you want this to start using the SecureSchool appliance immediately. Otherwise, you can wait and they’ll move over on their own as items in the DNS cache expire.
B. Windows 2008
B1. To setup forwarders in Microsoft Windows Server 2008, go to "Start" -> "Programs" -> "Administrative Tools" -> "DNS". This will launch the DNS management console.
B2. Once it's launched, right click on the name of one of the servers and go to Properties. You'll be presented with a window that looks like this:
B3. As shown above, select the "Forwarders" tab.
- Click "Edit" and add the IP address of your SecureSchool appliance in as a forwarder.
- Remove any other forwarders you may have in that list.
- Uncheck the box for "Use root hints if no forwarders are available".
Repeat this process for every one of your DNS servers on your network
C. Windows 2003/2000
C1. To setup forwarders in Microsoft Windows Server 2003 or 2000, go to "Start" -> "Programs" -> "Administrative Tools" -> "DNS". This will launch the DNS management console.
C2. Once it's launched, right click on the name of one of the servers and go to Properties. You'll be presented with a window that looks like this:
C3. As shown above, select the "Forwarders" tab.
- Add the IP address of your SecureSchool appliance in as a forwarder.
- Remove any other forwarders you may have in that list.
- Check the box for "Do not use recursion for this domain".
Repeat this process for every one of your DNS servers on your network.