Configuring DNS Settings for Active Directory Trusts

Sign up to access this lesson

Click here to sign up and get access to this lesson!

Saving Progress...

In this lecture we are going to configure DNS settings for both and so each domain can resolve the other domain name. This is a requirement if you’re trying to establish a domain trust between two domains.

Our domain consists of the following servers all on the same network: - -

Test DNS name resolution

First, we can test the DNS name resolution from each domain, by running the nslookup command in each domain. On domain, I will run:


Which returns the following error:

*** localhost can’t find Non-existent domain

And on domain, I will run:


Which also returns:

*** localhost can’t find Non-existent domain

These errors will prevent us from establishing a domain trust because we can’t find the domain we want to establish a trust with. To fix this, we need to create a DNS stub zone in each domain that points to the other domain.

Create a DNS stub zone

On the domain controller for, open Server Manager then select Tools > DNS:

Next, left-click the server CODC01 to expand it. Now right-click on Forward Lookup Zones and select New Zone…

Click next until you reach the Zone Type page. Select Stub Zone and click Next:

We want this stub zone to be replicated for all domain controllers in our domain, so proceed with the default selection on the next page and click Next:

For the Zone name, type in the name of the domain we are going to create the stub zone for:

Click Next. On the next page we need to enter the IP address of a DNS server in Our primary Domain Controller (also the DNS server)’s IP is so we will enter that:

You should see a green checkmark added to the entry and Validated should read OK. If this does not occur, make sure you enter the correct IP address of a DNS server in and that you have network connectivity to that server.

Now click Next and Finish.

Note: We can also save a lot of time and accomplish the same thing with the following PowerShell command:

Add-DnsServerStubZone -Name “” -MasterServers “” -ReplicationScope Domain -PassThru

Now we can retest our nslookup command for from, and it should be able to resolve it’s IP address:

Note: If you still can’t resolve the domain, you may need to run the command below:

ipconfig /flushdns

If that doesn’t work you may need to restart the server.

Repeat these steps on

From this point, we need to repeat these steps but inside of the domain on SADC01. We need to create a stub zone for and use the IP address of CODC01 which is

You can chose to do it through the console or with PowerShell like this:

Add-DnsServerStubZone -Name “” -MasterServers “” -ReplicationScope Domain -PassThru

Once you do that - you should be able to resolve the domain from If you can’t, just give your server a quick reboot and run the ipconfig /flushdns command and try again.

And that’s all we need to do for this lecture!

Sign up to access the rest of this lesson

You must either log in or sign up to access this lesson.

Saving Progress...

0 0 votes
Lesson Rating
Notify of
Inline Feedbacks
View all comments

Active Directory & Identity with Windows Server


0/1 Lessons

Course Introduction

• 2min

0 / 1 lessons complete

Getting Started with Active Directory Domain Services

• 52min

0 / 6 lessons complete

Introduction to Active Directory Users & Computers

• 1hr 24min

0 / 10 lessons complete

Adding a Second Domain Controller

• 1hr 31min

0 / 7 lessons complete

Active Directory Backups

• 1hr 24min

0 / 5 lessons complete

How to Administrate Active Directory with Windows PowerShell

• 1hr 58min

0 / 7 lessons complete

Administrating AD SS (Active Directory Sites and Services)

• 1hr 3min

0 / 5 lessons complete

Active Directory Trusts

• 54min

0 / 5 lessons complete

Modifying the Active Directory Schema

• 43min

0 / 3 lessons complete

Course Conclusion

• 2min

0 / 1 lessons complete