I added a new domain recently to our AD. It was added using the option to add a new domain to an existing forest.
So now we have the original domain.local which is in the forest also called domain.local. We have added the domain newdom.local to the domain.local forest.
Everything was working fine until I went on holiday for a few weeks and the new DC in the newdom.local domain was turned off (luckily there are no active users in that domain yet). When I realised it had been turned off, I turned it back on but could not access through RDP so troubleshooting began. There are various issues but the main issue I think is DNS seems to be broken, which stops replication occurring.
When running commands like dcdiag /test:dns
from the new DC, it cant find itself. It is looking at 31d2ecb5-550c-4111-9f8e-faa78d93eda7._msdcs.domain.local
which is a CNAME entry that points towards the DC, but the FQDN in that DNS entry shows as dc-01.newdom.local,domain.local.
which cant be resolved (I assume because the forest is in there after the comma). I can however resolve dc-01.newdom.local.
no problem.
DNS is replicating this extra ,domain.local
for most CNAME and SRV entries causing the new server to not be found.
Is this normal for a new domain in an existing forest to have the DNS FQDN include the forest name? If so, how do I fix DNS to allow resolution of these FQDNs? Alternatively how do I stop them being added?
Thanks for any help.