Mar 102008

We have already discussed about how to install windows server 2003 domain controller with DNS server setup and DHCP server setup.Now we are going to discuss one more important topic how to create reverse lookup zone.

DNS allows two main types of queries: forward lookups and reverse lookups. A forward lookup searches for an IP address based on a provided host name.

A reverse lookup performs the opposite. It queries DNS for a host name based on an IP address. For example, some e-mail servers perform a reverse DNS lookup on a sending mail server to determine that the host name offered by the remote mail server actually matches the IP address of the SMTP connection attempting to deliver the message.

Follow the steps below to create a Windows server 2003 DNS Reverse lookup zone

Note: This procedure assumes that you have the appropriate permission to perform this task and that you already have a DNS Forward Lookup Zone created.

Creating A Reverse Lookup Zone

Click Start—>Administrative Tools—>DNS MMC.

This will open DNS MMC right mouse click on “Reverse Lookup Zones” and from the context menu select “New Zone”.

Now this will begin the New Zone Wizard and click “Next” to continue.

Select “Primary Zone” to create a copy of your zone and click “Next” to continue.

Tip: You can select the check box at the bottom of the New Zone Wizard on a Domain Controller (DC) to store the zone information in Active Directory (AD).

From the “Active Directory Zone Replication Scope” dialog box select one of the radial button options or accept the default of “To all domain controllers in the Active Directory domain Name.Com and click “Next”.

At the “Reverse Lookup Zone Name” dialog box for the “Network ID:” enter the first three octets of the IP address for the IP addresses for the zone and click next to continue. For example if your IP Addresses are then enter 10.10.10.

From the “Dynamic Update” dialog box select one of the radial button options or accept the default of “Allow only secure dynamic updates (recommended for Active Directory)” and click next to compete the task.

Review the “Completing the New Zone Wizard” dialog box for any errors by reviewing the following for the example above and click “Finish” to create the reverse lookup zone:


Type: Active Directory – Integrated Primary

Lookup type: Reverse

Finally review the new zone by expanding the “10.10.10.x Subnet” where you should see the newly created records including an A Record for the DNS server.

Tip: If you do not see any records right mouse click on the newly created zone and from the context menu select “Reload”.

Creating PTR Records

You can do this in two ways

1) Manually Create PTR Record

2) Automatically creating A and PTR records

1) Manually Create PTR Record

Now you need to create a Pointer (PTR) record for your reverse lookup for the DNS server by following the steps below

Right click on “10.10.10.x Subnet” and from the context menu select “New Pointer (PTR)…” to bring up the New Resource Record dialog box.

For the “Host IP Number:” enter the last octet of the DNS server’s IP address. For example if the IP Address is then enter: 2. For the “Host name:” browse for the DNS server or enter the DNS servers Fully Qualified Domain Name (FQDN) such as MyAdDomain.Com and when you are finished click “OK”.

Finally right mouse click on “10.10.10.x Subnet” and from the context menu refresh the new information by selecting “Reload”.

2) Automatically creating A and PTR records

If you are using DHCP with DNS server you can use this with the following procedure

Go to Start–>Administrative tools—>DHCP

This will open DHCP MMC snapin now you need to right click on your DHCP select properties this will bring properties windows now click on DNS tab under this select “Always dynamically Update DNS A and PTR Records.

Incoming search terms:

  16 Responses to “How to create DNS Reverse Lookup Zone in Windows Server 2003”

  1. very effective

  2. Excellent job, thanks

  3. Awesome job. Fixed my NSLOOKUP Non-existant domain problem.

  4. Excellent tutorial. I spent a lot of time on other sites who didn’t go through this rather simple explanation. I really appreciate this information!

  5. Thanks a million !!

  6. Nicely done! Thanks

  7. I you’d like to to receive information about this subject.

  8. Hey

    All I can say is a I found a new home, I currently attend a CNS School and are looking for some tips to help me understand PTR records . Excellent work and very easy to understand .

    Thank you


  9. I found the info very helpfull. Thank you. My worry is if i demote a Windows 2003 domain controller can i promote it to become a primary parent domain and it would still function very well?

    How do i go about this.

    Thank you


  10. Can you help me sir?
    I don’t know how I’m going to setup our dns server in office because we a three range of ip in one domain.. clients using system, clients for internet, and for servers.
    All clients are DHCP and servers are static ip is the setup: default gateway server, dhcp server but it has two ip sending two range to clients.. leases) and
    what setup do I’m going to do?

  11. @jeff
    I’ve got the same setup. Create one large zone 192.168.X.X and the different subnets will appear in subfolders, for DHCP leases
    Create the new domain manually for your servers since they have static IPs: right click your 192.168.X.X domain -> New domain and add your subnet number

  12. Very good article. Helped me during a change when i found that the reverse lookup was not there.

    Great work and thanks for the screenshots.

  13. I had the same issue as Dave and I am used to using SBS server so this is done during setup, this article was much appreciated once I found it. Thanks again for the step by step setup.

  14. Thank you. The article was concise and to the point.

  15. Thanks for the good directions. I’ve created the Reverse lookup and added the DNS host as a PTR .

    Toadd other hosts to the Reverse lookup do I add them
    as “A” records or “PTR” records? I need to do this manually since I’m not running DHCP.


 Leave a Reply



You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>