Types of DNS Zones

There are several ways of analyzing DNS zones.

Method a) - There are 3 types (scopes) of DNS Zone

• Primary - Read and Write copy of all resource records
• Secondary - Read only copy, gets updates from the primary
• Stub - New in Windows 2003, just has pointers to another domain. For example NS and SOA and A record of the main server in that Stub domain.

Method b) - There are two types (directions) of DNS Zone

• Forward Lookup - You know the hostname, DNS tells you the IP.
• Reverse Lookup - You know the IP, DNS gives you the hostname.

Method c) - There are Active Directory Zones and Secure Zones

• The advantage of Active Directory Zones is that replication is reduced and is simply added to the regular active directory update traffic. The disadvantage is that this replication only works if the DNS server is also a domain controller. Not a severe limitation.
• Secure Zones means that only machines with computer records in active directory can update their Host (A) records with DNS servers. With secure zones you avoid lots of rogue records cluttering your DNS records. This can happen if you get visiting laptops which pick up an IP address from DHCP but do not release it because they do not disconnect gracefully from the network.

The contents of this post is copied from

Types of DNS Zones