View source for MacOS DNS Configuration

__TOC__

= Introduction =

Active Directory (AD) uses DNS to locate other Domain Controllers (DC) and services, like Kerberos. Thus, AD domain members and servers must be able to resolve the AD DNS zones.

The following describes how to configure a macOS client manually to use DNS servers. If using DHCP, then configure the DHCP server instead.

= Configure System Preferences =

* Open <code>System Preferences</code>, then click on <code>Network</code>.
: macOS security settings may require clicking on the padlock in the bottom left of the window and entering a local administrator account's credentials, before being able to make changes.

* In the left pane, choose the network adapter that is connected to the network running the Active Directory (AD) (Wi-Fi, Ethernet, etc.), then click on the <code>Advanced…</code> button.

* Click on the <code>DNS</code> tab.

* In the <code>DNS Servers:</code> pane:
:* Remove any existing addresses, by clicking on it and then clicking the minus button.
:* Add your DNS server by clicking on the plus button and entering the IP address.

* In the <code>Search Domain:</code> pane:
:* Remove any existing Search Domains
:* Add your Search Domain by clicking on the plus button and entering it, for example <code>samdom.example.com</code>.

* When finished editing, click <code>OK</code>, then <code>Apply</code>.
: If your security settings initially required you to click on the padlock, click on it again to lock the preferences.

* Close <code>System Preferences</code>.

= Testing DNS Resolution =

To test the DNS configuration, the <code>nslookup</code> command can be used with the Terminal app on macOS. The instructions on the page [[Testing_the_DNS_Name_Resolution|Testing the DNS Name Resolution]] work on macOS.

----
[[Category:Active Directory]]
[[Category:Domain Members]]