Microtik and AD

RouterOS General
1

Dear Mikrotik Users

I have a problem integrating my Mikrotik and Domain Controller Active Directoy

my mikrotik IP is: 192.168.1.98/24
and my DC IP is 192.168.10.10/24
These IPs are NAT so can see each other on the network
My domain is for example xxx.yyy
Mikrotik is my DHCP server and gets these DNS to clients:
DNS1: 192.168.10.10 (my DC)
DNS2: 8.8.8.8

The Problem is here:
sometimes clients that login to windows can not access to xxx.yyy on my domain and instead go to xxx.yyy domain on the internet so they don’t get policies
and I have to change DNS manually for them with just 192.168.10.10 getting policies and after that add 8.8.8.8 again for accessing to internet

Please help what is the issue?

Best Regards

2

If you don’t want them to use the 8.8.8.8, don’t give it to them. Simple as that. Define the DNS in ip->dhcp->networks so only your DC DNS will be distributed to clients.

If you provide the 8.8.8.8 to your clients, there is no way to guarantee they won’t use it.

Is there any reason to give your clients this public DNS?

3

Thanks for yor reply
I get them That DNS for connecting to internet
I want my clients get policies from local domain and also can browsing the internet

please help

4

For clients to resolve hosts in your AD you have to use your DC as their DNS server. The DC itself should act as a recursive resolver for any other DNS requests.