Thanx Tom and John. What I did was to make ALL internal PCs Primary DNS server IP the W2K AD DNS Server IP, made the Secondary DNS server IP the ISA internal adapter IP addr. I left the ISA Server Primary DNS server IP that of the internal adapter IP addr of the ISA server. Hope this is ok, cause it works. -Tom > -----Original Message----- > From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx] > Sent: Monday, July 12, 2004 2:27 PM > To: [ISAserver.org Discussion List] > Subject: [isalist] RE: DNS Using Quick Start Guide > > > http://www.ISAserver.org > > Hi Tom, > > The QS guide is for simple deployments. However, it will work find as > long as you have configured the DNS server on the ISA firewall with a > stub zone for the Internal network's domain. When the ISA > firewall uses > itself as its preferred DNS server, it uses the information > in the stub > zone to query the Internal network's DNS server. I put one of these > together today for a customer and it worked a treat, so I > know it works > :-) > > HTH, > > Tom > www.isaserver.org/shinder > Get the book! > Tom and Deb Shinder's Configuring ISA Server 2004 > http://tinyurl.com/3xqb7 > MVP -- ISA Firewalls > > > > -----Original Message----- > From: Tom Rogers [mailto:trogers@xxxxxxxxxxxxxxxxxx] > Sent: Monday, July 12, 2004 1:09 PM > To: [ISAserver.org Discussion List] > Subject: [isalist] DNS Using Quick Start Guide > > > http://www.ISAserver.org > > According to the Quick Start guide that I used to get my ISA server up > and running, I need to put the IP Addr of the ISA server as > the Primary > DNS server IP for my DHCP clients. > > I have a W2K Active Directory domain with a DNS server already on the > internal network. I have noticed that if I do as the Quick Start guide > says, (Use the IP of the ISA Server as my primary DNS > server), I can no > longer ping my domain name. Also, select services on servers, that use > the Domain Admin acct, will not start because they cannot find the > Domain Admin acct. Also, when joining a new computer to my domain, I > have to use the old NetBIOS domain name because I get an error stating > that mydomain.net does not exist or cannot be found. (I have WINS IP > doled out by the DHCP running on ISA) > > Now, I setup the DNS service on the ISA server EXACTLY as the Quick > Start guide states. So why is this happening? > > (As a work around, I have made the Primary DNS IP Addr that of the > Internal DNS server, and the ISA server IP Addr is now the secondary > DNS. Everything works fine this way. PLUS all clients that are allowed > Internet Access, have it.) > > TIA, > > -TRR > > > ------------------------------------------------------ > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ > ------------------------------------------------------ > Other Internet Software Marketing Sites: > World of Windows Networking: http://www.windowsnetworking.com > Leading Network Software Directory: http://www.serverfiles.com > No.1 Exchange Server Resource Site: http://www.msexchange.org > Windows Security Resource Site: http://www.windowsecurity.com/ > Network Security Library: http://www.secinf.net/ > Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com > ------------------------------------------------------ > You are currently subscribed to this ISAserver.org Discussion List as: > tshinder@xxxxxxxxxxxxxxxxxx > To unsubscribe visit > http://www.webelists.com/cgi/lyris.pl?enter=isalist > > ------------------------------------------------------ > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ > ------------------------------------------------------ > Other Internet Software Marketing Sites: > World of Windows Networking: http://www.windowsnetworking.com > Leading Network Software Directory: http://www.serverfiles.com > No.1 Exchange Server Resource Site: http://www.msexchange.org > Windows Security Resource Site: http://www.windowsecurity.com/ > Network Security Library: http://www.secinf.net/ > Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com > ------------------------------------------------------ > You are currently subscribed to this ISAserver.org Discussion > List as: trogers@xxxxxxxxxxxxxxxxxx > To unsubscribe visit > http://www.webelists.com/cgi/lyris.pl?enter=isalist > >