The Author Online Book Forums are Moving

The Author Online Book Forums will soon redirect to Manning's liveBook and liveVideo. All book forum content will migrate to liveBook's discussion forum and all video forum content will migrate to liveVideo. Log in to liveBook or liveVideo with your Manning credentials to join the discussion!

Thank you for your engagement in the AoF over the years! We look forward to offering you a more enhanced forum experience.

John Connett (1) [Avatar] Offline
I'm a volunteer at a museum with fairly modest IT requirements. We are hoping to set up Active Directory and integrate it with Office 365 to provide single sign on. We plan to have two sites, one on-site and the other off-site using an Amazon AWS VPC. Each of the two sites will have its own Domain Controller initially based on Windows Server 2012 R2 (we might later consider a non-Microsoft alternative on-site using Samba).

Our existing DNS hosting service is not able to serve the necessary resource records for Active Directory. As a temporary work around I have set up conditional forwarders to an Amazon Route 53 Hosted Zone to host the ad.<domainname> resource records. Running dcdiag /test:dns on a Domain Controller identifies the missing resource records and their values which are then used to manually update the Hosted Zone.

Although Amazon Route 53 does support a secure dynamic DNS update mechanism it is not compatible with the Microsoft one described here: . Is there a more recent description?

Are there any DNS hosting services that do provide Microsoft compatible secure dynamic DNS updates?

How do others manage their DNS hosting service with Active Directory?