Question
Your network contains an Active Directory Domain Services (AD DS) forest. The forest contains three domains. Each domain contains 10 domain controllers.
You plan to store a DNS zone in a custom Active Directory partition.
You need to create the Active Directory partition for the zone. The partition must replicate to only four of the domain controllers.
What should you use?
- A. dnscmd.exe Correct
- B. Active Directory Sites and Services
- C. Set-DnsServer
- D. New-ADObject
Explanation
A custom DNS application directory partition is created with dnscmd. Run dnscmd /CreateDirectoryPartition <partitionFQDN> to create the partition, then run dnscmd <server> /EnlistDirectoryPartition <partitionFQDN> on each of the four domain controllers that must hold a replica. The partition replicates only to the DCs enlisted in its replica set, and the zone can then be stored in it. Active Directory Sites and Services manages sites, site links and connection objects, not application partitions. Set-DnsServer applies a whole DNS server configuration object and does not create a directory partition (the DNS PowerShell cmdlet for that is Add-DnsServerDirectoryPartition, which is not offered). New-ADObject is the generic cmdlet for creating directory objects and is not the supported way to create and enlist a DNS application partition.
