• Link to Facebook
  • Link to LinkedIn
  • Link to Youtube
Priasoft
  • O365 & Exchange Server Management Tools
    • Office 365 & Exchange Migration Solutions
      • Public Folder Migration & Synchronization Manager
      • Priasoft Migration Suite for Exchange & Office 365
      • Mailbox Migration Manager
      • Office 365 Tenant-to-Tenant Migration
      • Collaboration Suite for Exchange (GALSync) – Two-way Sync AD organizations
      • Outlook Rules Migration Utility
      • Outlook Profile Update Manager for M365
    • eDiscovery & Compliance for Exchange
      • Exchange Data Discovery Lab
        • Exchange Data Discovery Lab – For Government Agencies
        • Exchange Data Discovery Lab – For HR & Compliance
        • Exchange Data Discovery Lab – For AI & Data Science
        • Exchange Data Discovery Lab – For IT Operations
        • Exchange Data Discovery Lab – For Legal Professionals
    • Exchange Data & Reporting Tools
      • Public Folder Analyzer for Office 365
      • Super-ExMerge – ExMerge for Exchange
    • Other Solutions and Free Tools
      • AutoDiscover Test Tool
  • Office 365 Migration Services
    • Expert Exchange Public Folder Cleanup & Discovery Services
    • Public Folder Migration Service for Office 365
    • Microsoft 365 Migration Success & Planning Workshop
  • Exchange Insights & Tips
    • How to Migrate Public Folders – Complete Guide
    • How to Backup Public Folders to PST
    • Best Way to Import Quickly PST’s to Office 365
    • Resources Library
  • Company
    • About Priasoft
    • Contact Us
    • Customer Success Stories
    • Press and Latest News
    • Priasoft Community Blog
    • Product Support
      • FAQs
      • Knowledge Base
      • Contact Support Team
      • Support Documents
    • Partners
      • Recommend a Partner
    • Why Priasoft?
      • What’s New Priasoft
      • Priasoft Migration Suite Features
  • Start Evaluating
  • Menu Menu
Exchange Migration Knowledge Base › Category: Mailbox Migration Questions › How should DNS be configured in a cross-forest migration scenario?
0 Vote Up Vote Down
Anonymous asked 10 years ago

During initial testing of the Priasoft tools, we realized that because the host was a member of the target domain that it would naturally receive DNS from the target environment.
However, the migration host then is unable to resolve the names of our source exchange servers and domain controllers.  What’s the best way to handle this?

Question Tags: conditional forwarding, Cross-forest, DNS
1 Answers
0 Vote Up Vote Down
Eriq VanBibber Staff answered 8 years ago

DNS is a very important component of cross-forest (and cross-premises) migrations.  Failure to consider and configure for DNS resolution not only can create issues for migration, but can also negatively impact end users.
Here’s Priasoft’s guidance on DNS setup:

  1. The migration host must be able to resolve server names in both the source and target environments.
    1. The migration host must be able to resolve fully qualified DNS names, like server01.domain.com
    2. The migration host must also be able to resolve single-label names like server01
      1. For single-label names, windows will attempt a NetBIOS lookup first, before using DNS.  If WINS is being used, it must work properly.
      2. If NetBIOS lookups fail, or are not configured, windows will append DNS suffixes to the name before send the request to the DNS server.  As such, proper configuration of DNS suffixes that support both the source and target environments are necessary.
      3. The migration host (at a minimum) should have DNS suffixes for all the target domains first, followed by suffixes for all the source [windows] domains.  However, it is better to make this an organizational configuration via Group Policy or DHCP (or both).  It is quite likely that there are other hosts in the target environment that will need to access source computers.
  2. Conditional Forwarding is best
    1. Windows 2008 and later DNS support the use of Conditional Forwarders.  This feature allows a DNS server in one environment to forward domain specific queries to one or more hosts that are likely responsible and authoritative for the request.
    2. DNS servers in the target environment should be configured for Conditional Forwarders for each source [windows] domain that is part of the migration.  Be sure to include children and parent domains in the forwarding.
    3. When an application (such as the Priasoft tools) cause a name lookup, the FQDN of the name will be sent to the DNS server.  If that server sees a domain specific forwarder for the domain in the request, it can immediately forward that request to the other side.
    4. Conditional forwarders are simpler to setup and are more relevant than a secondary or stub zone since no zone replication is necessary.
  3. Client hosts (computers, laptops, mobile devices) will need to be able to resolve the names of the target exchange servers and domain controllers.
    1. The configuration of DNS is not exclusive to the target domain nor to just the migration host(s).
    2. Very often there will be computing devices in the source environment that still receive DNS server IPs from the source environment.  If the source is not also configured with suffixes and conditional forwarding, those devices may not be able to connect to the target exchange servers after migration.
    3. Client devices then should also receive, via Group Policy or DHCP (or both), the DNS suffixes of the target environment.

 
Name resolution is even more important in new versions of exchange due to the heavy reliance on SSL and Certificates.  Then name of the host that an application is to use to connect to a server is compared to the names on the certificate from that server.  If DNS (or a ‘hosts’ file) attempts to point a name like ‘server01.domain.com’ to the IP address of ‘server04.domain.com’, the connection will fail because the name ‘server01’ does not exist on the certificate for ‘server04’.  Do not attempt to ‘trick’ applications by hard-coding IP addresses to names that don’t match.
Specific to Exchange 2013 configurations, Priasoft recommends using the same URL for both the Internal Host Name and External Host Name.  Local DNS can provide one or more IP addresses that relate to the local servers and public DNS can point to addresses at the company’s edge and DMZ.
Alternatively, if two separate values are to be used [to avoid split-DNS], setting the internal name to a generic common name is more appropriate, like: ‘internal.mail.domain.com’.  Then local DNS would supply multiple IP addresses for that generic name, each pointing to an exchange server.  Public DNS would server the external name, like ‘mail.domain.com’.
 
Note that Outlook receives both the internal and external values in the AutoDiscover response.  Outlook ALWAYS tries the internal hostname value FIRST, and if that fails will then try the external value.  Given this behavior, Priasoft highly recommends configuration values for both fields in Exchange 2013.
 
-Support

The Exchange Experts – Who Are We?

Priasoft, a Microsoft Partner, offers enterprise-class solutions for Exchange migration, management, and eDiscovery. Supporting Exchange 2010, 2013, 2016, 2019, and Office 365/Exchange Online, our platform enables secure migration, management, and organization of email data, with advanced tools for compliance, public folder analysis, and AI-driven insights.


YouTube Play Button  LinkedIn LogoFacebook Logo

Exchange Quick Links

• Exchange Data Discovery Lab (eDiscovery)
• Public Folder Migration to Office 365
• Public Folder Analyzer for Office 365
• Super-ExMerge for Office 365
• Collaboration Suite (GalSync)
• Microsoft Outlook Profile Update Manager
• Privacy Policy
• Terms of Use

Recent Posts

  • Tenant-to-Tenant Migration Checklist: What to Do Before You Move a Single Mailbox
  • What Is Super-ExMerge and Why Do IT Teams Still Need It in 2026?
  • Exchange 2019 Patches Just Ended. Here Is What IT Teams Need to Do This Month.

Contact Priasoft – The Exchange Experts

Have questions? Speak to a Priasoft Engineer
Email: sales (at) priasoft.com
+1 (480) 520-0873

Scroll to top Scroll to top Scroll to top

This site uses cookies. By continuing to browse the site, you are agreeing to our use of cookies.

OKLearn more

Cookie and Privacy Settings



How we use cookies

We may request cookies to be set on your device. We use cookies to let us know when you visit our websites, how you interact with us, to enrich your user experience, and to customize your relationship with our website.

Click on the different category headings to find out more. You can also change some of your preferences. Note that blocking some types of cookies may impact your experience on our websites and the services we are able to offer.

Essential Website Cookies

These cookies are strictly necessary to provide you with services available through our website and to use some of its features.

Because these cookies are strictly necessary to deliver the website, refusing them will have impact how our site functions. You always can block or delete cookies by changing your browser settings and force blocking all cookies on this website. But this will always prompt you to accept/refuse cookies when revisiting our site.

We fully respect if you want to refuse cookies but to avoid asking you again and again kindly allow us to store a cookie for that. You are free to opt out any time or opt in for other cookies to get a better experience. If you refuse cookies we will remove all set cookies in our domain.

We provide you with a list of stored cookies on your computer in our domain so you can check what we stored. Due to security reasons we are not able to show or modify cookies from other domains. You can check these in your browser security settings.

Other external services

We also use different external services like Google Webfonts, Google Maps, and external Video providers. Since these providers may collect personal data like your IP address we allow you to block them here. Please be aware that this might heavily reduce the functionality and appearance of our site. Changes will take effect once you reload the page.

Google Webfont Settings:

Google Map Settings:

Google reCaptcha Settings:

Vimeo and Youtube video embeds:

Privacy Policy

You can read about our cookies and privacy settings in detail on our Privacy Policy Page.

Privacy Policy
Accept settingsHide notification only