Now when we have lawyers journals manager we can create a nice zone by right clicking forward look zone
and select prime or a zone to create it so we click next to me where we can select replication scope
we select forest level replication score and select also the main level endlessly and I give it a name
like the name which is needed for you or I'll create a test name and this researcher is selective allow
secure dynamic updates so we can allow only secure dynamic updates or secure and unsecure updates and
we can not allow secure updates.
We can see a completion of use zone wizard to just type information and look up.
You can always have a look at that DNS manager if it is here and if all the default records are great
like this time to create secondary forward Look-Up zone to do this right click on the forward lookup
zone click next and select secondary's zone again click next and we have to give it a name like in my
case it is just to dot local again next and on this sport we have to give it a server address so it
should contain an address which gives the primary zone and primary zone will be kept on the DC to server.
Let's pin it.
See if it is available.
So it is available and as 0.02 an IP address.
So that's when the screen and let's invoke commanders invoke command.
We will check if the server has the roll of DNS server.
Let's check it remotely.
We use invoke command then use parameter computer name state the name Lebda CITU in this case and type
credentials.
It will be Lapo install user which has the credentials to install and install the software on the server
and use script block parameter with get Windows feature slash name DNS so this command will check if
the server has got DNS server or so as you can see it doesn't contain DNS Arrau.
So let's install this role with the same command invoke command.
We just change it for install Windows feature name DNS and we also will have to install windows and
DNS management tools and DNS folders please include management tools parameter and include my subfolder
as parameter.
So let's run this command.
It asks for credentials as usual because we need the credentials to run this command and give us the
results of the DNS role is installed on the server remotely with invoke command in power shell as you
can see it has an exit go to of success and restart isn't needed but we will restart this server just
in case.
Restart computers last computer name give it a remote name.
LOPP Leptis in this case Lebda it too.
And we will do it with force parameter.
If some users are logged in on this server it will force the restart.
It gives us an error that access is denied.
So I must state I must type credentials WEP and install a user which has a credential a right to reboot
this remote computer.
So it goes to reboot and we can check if the server is opera's been commensal a real pin with Slash
T which gives a pin command not to finish it.
Real been so many times so ringette as we can see it just up and we can now check if this feature is
installed we'll get a Windows feature command.
And as you can see it is installed on the remote server.
Now let's get to this remote server and check DNS manager to see if we can manage that on the second
server leopardess it to.
So we have to log in with our domain credentials.
In this case it is in STOL user which has the credentials the rights to administer DNS manager will
again and launch DNS manager wire server manager.
So we'll launch it from the left pane where we can find DNS manager.
Select the local server and trum DNS manager.
Here we can check our DNS server.
It has got forwork look up slow in reverse lookup zone.
All we need for administer.
So let's create a primary zone for us to have a possibility to create a secondary zone on Leptis see
one.
So to create a primary zone to create a secondary zone we need to have a primary zone and some others
are created and we created to raise a file which has a DNS extension.
And as you can see as it is not Adey integrated zone it cannot have all these features about security.
So here is the results of our creation that says that this zone is created.
It has got an adult local and now we can continue on our shores to Labadee see one continue Real's creation
of secondary DNS zone.
So here we can type Now the d the IP address of the server which keeps primaries on as you can see it
has got green result and we can create it.
And it appears in our primary lockup zone pain but it is not updated.
Why is that.
Because we have not allowed to to get zone information from the primary zone keeper.
So let's try to update it once more.
And after this we have to go to DC to Lebda to and in Propertius we have to
allow zone transfer to the server which will keep a secondary additional a zone.
So let's add this or we have to here Lapidus the wan and it will be allowed to get transfers from these
primaries zones and we Khaliq apply.
Yes.
Yeah we check once more.
Click OK.
And now we can see that this zone transfers are allowed only to and servers which we have added right
now.
So it is here and it is added now.
This zone transfer is allowed to this first.
This the one server.
So let's let's switch to the server and try to refresh once more so refresh.
And it's up and running now.
The transfers are allowed and we can do it.
So things for watchin and I'm waitin for you in the next lesson.