New Active Directory Documents for IT Pros
A common warning message for anyone who has installed Active Directory on Windows Server 2008 or Windows 2008 R2, especially on the first domain controller in a forest or domain is:
A delegation for this DNS server cannot be created because the authoritative parent zone cannot be found or it does not run Windows DNS server. If you are integrating with an existing DNS infrastructure, you should manually create a delegation to this DNS server in the parent zone to ensure reliable name resolution from outside the domain “treyresearch5.net”. Otherwise, no action is required.
If you are installing a forest root domain controller that is using Active Directory-integrated DNS, you typically do not need to be concerned about this warning message. A more detailed description is given on TechNet in the article Known Issues for Installing and Removing AD DS under Active Directory Domain Services Installation Wizard (Dcpromo.exe) issues.
Title what I wanted but a blank page?
Not sure how that happened, but visit
Known issues for Installing and Removing AD DS
Somehow the content of the blog message was deleted and I cannot seem to fix. We've covered the information at
And if you are NOT installing in a forest root domain?
If you are NOT installing in a forest root domain, then you will likely want to create the delegation record manually, see Understanding Zone Delegation: technet.microsoft.com/.../cc771640.aspx
Before setting up secondary nameservers I always test the condition of the zone with tools like www.buddyns.com/delegation-lab or intodns.
Having the issue, while doing Additional DC, shall we ignore it
Yes, you can click Yes to continue the installation. You can update the DNS delegation as needed after the installation is complete. See Update the DNS Delegation Records at
For child domain we will not get that.
You are right. If the wizard can create delegation records in the parent DNS zone, you won't see this message. Because a child domain is created using Enterprise Admin credentials, you would have permissions necessary to create the delegation records in the parent DNS zone, assuming you are installing AD-integrated DNS. In this case, the wizard creates the delegation records for you.
Technorati Tags "technorati.com/.../DNS+delegation+Active+Directory+parent+zone" link does not work anymore