Owen

An authoritative DNS server can provide more reliable and secure DNS resolution for clients located behind a firewall. By default, a DNS server does not use its own address to resolve DNS queries, but instead relies on the addresses of other DNS servers.

If the DNS server is located on the same network as the clients, this approach can result in DNS resolution that is faster and more reliable than if the DNS server is located on a separate network.

However, if the DNS server is located on a separate network, the server may be unable to resolve DNS queries for clients that are located on the same network. In this situation, it may be necessary to configure the clients to point to the DNS server located on the same network as the clients.

There are a number of factors to consider when deciding whether to configure a domain controller to point to itself as the DNS server. These factors include the location of the domain controller, the security and performance requirements of the domain controller, and the configuration of the clients.

Overall, it is generally recommended that domain controllers point to themselves as the DNS server. This approach provides the most reliable and secure DNS resolution for clients located behind a firewall.