Windows DNS
Best Practices
Domain Conroller + DNS Server
If this is only DC+
DNS server
Set client
DNS setting to local (private) IP address
Not 127.0.0.1
If there is another DC+
DNS server
Set the primary client
DNS setting to the private IP address of the other DC+
DNS server
Set the secondary client
DNS setting to the private IP address of this DC+
DNS server
Domain Members
Set workstation/member server primary to closest/local
DNS server
Set workstation/member server secondary to remote/alternate
DNS server
Do not use public
DNS servers
Reverse Lookup Zones
Dynamic Updates
Forwarding