Configuring DNS & MX records for exchange 2010

349

There are several things wrong I can see here:

  1. Just so you're clear, a DNS domain on the Internet is not necessarily the same domain you're using in Active Directory. It can be the same, but more often than not (in smaller organizations), you'll choose to use a domain such as centors.local* that's only applicable/resolvable internally by your Active Directory DNS servers.

    Your Internet domain is usually (and really should) be handled by an external DNS server (and typically your domain registrar or a 3rd party company that specializes in DNS like no-ip.com or dnsmadeeasy.com). This is because:

    a) there's usually no beneficial reason for handling your own public authoritative DNS server unless you're a large enterprise or have atypical/legacy reasons to do so; I'm confidently going to say that you don't have any of these requirements.

    b) managing your own Internet facing DNS server is not easy: you need to make sure it's always up, has geographical redundancy (multiple servers, in different physical locations) and is secure (DNS poisoning and amplification attacks ad naseum).

  2. You likely don't need to change your Nameserver (NS) records. These are used to tell the world what DNS servers are authoritative for your Internet domain (centors.com). When you register a domain at networksolutions.com, godaddy.com, etc. they typically offer authoritative nameservers for you (and thus have already assigned their NS records to your domain), so all you need to do is log in to your DNS control panel and modify the records (the zone). Typically a small business will only ever need to create/modify A, CNAME, MX, and possibly TXT (for SPF) records.

  3. To get your mail flowing properly, you need to create an A record and an MX record: typically the A record would be mail.centors.com, and this A record would resolve to the publicly-accessible IP address (assuming 41.233.26.131) that your Exchange Server is either NAT'ed behind or assigned itself (usually the former as the Exchange Server will be on the LAN behind the router/firewall). For the MX record, you would create an entry with a number to denote order of priority. Since you only have (I'm assuming) one mail server, you would just add mail.centors.com with a priority of 5 to your MX records.

  4. As for Active Directory authentication issue, I'm assuming that you haven't configured POP3 yet on your Mail Server. I would strongly recommend you don't add POP3 support unless you have some legacy reasons why. It's a terribly inefficient way of handling mail, especially if you have an Exchange Server. If your Outlook 2010 client is on the LAN (and is on a workstation that's joined to your Active Directory domain), you want to add an Exchange account as the mail type, not POP3.

*As for your DNS in Active Directory, I'm not sure how far you've gotten with it, but I would recommend you change your Active Directory domain to something that you won't use publicly like corp.centors.com or centors.local (the latter is not recommended by Microsoft because it does not guarantee that the domain is unique and if you ever merged with another "centors" you would need to change your domain; it's up to you whether that's a risk or not).

Share:
349

Related videos on Youtube

Michael
Author by

Michael

Updated on September 18, 2022

Comments

  • Michael
    Michael over 1 year

    I need to debug an application for an embedded device. A problem with this application might be timing related so I try to decrease the speed of execution on my development machine.

    I have a setup which is quite useful but needs a little tweaking for convenience, basically I followed the advice given here:

    https://blogs.msdn.microsoft.com/vijaysk/2012/10/26/tools-to-simulate-cpu-memory-disk-load/

    Linked in the article there is the tool "CPUSTRES.exe" which generates high CPU usage. To prevent the tool to eat up all my CPU I start it like so (the tool will only run on the 8th core):

    START "Stress" /affinity 0x80 /HIGH CPUSTRES.EXE
    

    Then I start the debugging session in the Qt Creator (version 4.1.0). Using the windows task manager I can set the same processor affinity for the application as the stress tool has. Doing so gives me an app that more or less sluggish like on the embedded device but the debugger and all other apps behave nicely.

    I find it a little inconvenient to set the affinity in the task manager manually. I want this application always only on the same single core. This is only for debugging purposes, so would not like to change this in code. How can I achieve that?

    • Mahmoud Saleh
      Mahmoud Saleh over 11 years
      @bortzmeyer, i am a developer and i have to do this administration task quickly, what should i do ?
    • ni1ight
      ni1ight about 7 years
      I know you don't want to change it in the code but this might work for you: stackoverflow.com/questions/12803585/… If you only want it only when debugging, you could use preprocessor to enable this block of code only for debug.
  • Mahmoud Saleh
    Mahmoud Saleh over 11 years
    thanks for detailed answer, since i already have an A record and mx record for the mail, do i have to remove the configuration in the first 3 stpes ? also i tried to create an exchange email account in outlook (on other machine) and entered the server as centors.com and the username [email protected] but i am getting the error: connection to microsoft exchange is unavailable outlook must be online or connected to complete the action, please advise.
  • Mahmoud Saleh
    Mahmoud Saleh over 11 years
    the ping for mail.centors.com works fine, my issue now is that i can't login to my exchange email accounts, and i posted an issue about it here serverfault.com/questions/432092/…
  • Mahmoud Saleh
    Mahmoud Saleh over 11 years
    ,the ping for mail.centors.com works fine, my issue now is that i can't login to my exchange email accounts, and i posted an issue about it here serverfault.com/questions/432092/…
  • bortzmeyer
    bortzmeyer over 11 years
    In that case, it is not a DNS issue at all and I suggest changing the subject