{"id":85,"title":"Etki Alan\u0131 Denetleyicisi Ke\u015ffi DNS ve SRV Kay\u0131tlar\u0131","content":"Active Directory (AD) ortamlar\u0131nda istemcilerin etki alan\u0131 denetleyicilerini (Domain Controller) ke\u015ffetmesi, kimlik do\u011frulama, politika uygulama ve di\u011fer kritik i\u015flemler i\u00e7in temel bir gerekliliktir. Bu s\u00fcre\u00e7te en yayg\u0131n ve standart y\u00f6ntem, DNS sorgular\u0131 ve SRV kay\u0131tlar\u0131 <\/strong>kullanarak etki alan\u0131 denetleyicilerinin konumunu belirlemektir. Bu yaz\u0131da, bu y\u00f6ntemin nas\u0131l \u00e7al\u0131\u015ft\u0131\u011f\u0131, neden tercih edildi\u011fi ve di\u011fer alternatif y\u00f6ntemlerden fark\u0131n\u0131 detayl\u0131ca inceleyece\u011fiz

DNS ve SRV Kay\u0131tlar\u0131 Nedir?<\/strong><\/h3>

Active Directory, DNS hizmetine dayal\u0131 olarak kurulur. Etki alan\u0131 denetleyicileri, kendilerini DNS sunucular\u0131nda \u00f6zel SRV (Service) kay\u0131tlar\u0131 <\/strong>olarak kaydeder. Bu kay\u0131tlar, istemcilerin a\u011fdaki DC'leri otomatik olarak bulmas\u0131n\u0131 sa\u011flar.<\/p> Active Directory i\u00e7in tipik SRV kay\u0131tlar\u0131 \u015funlard\u0131r:

  • _ldap._tcp.dc._msdcs.<etki_alani_adi><\/strong>
    • \u00d6rnek: _ldap._tcp.dc._msdcs.example.com<\/code><\/li> <\/ul>
      <\/div><\/li>
    • _kerberos._tcp.<etki_alani_adi><\/strong>
      • Kerberos kimlik do\u011frulama i\u00e7in kullan\u0131l\u0131r.<\/li> <\/ul> <\/li> <\/ul>

        Bu kay\u0131tlar, DC'nin IP adresini, port numaras\u0131n\u0131 ve \u00f6ncelik\/a\u011f\u0131rl\u0131k bilgilerini i\u00e7erir.<\/p>

        \u0130stemcinin DC Ke\u015fif S\u00fcreci<\/strong><\/h3>

        Bir istemci, etki alan\u0131 denetleyicisini bulmak i\u00e7in a\u015fa\u011f\u0131daki ad\u0131mlar\u0131 izler:<\/p>

        \u00a0DNS Sorgusu<\/strong><\/h4>
        1. \u0130stemci, _ldap._tcp.dc._msdcs.<DomainName><\/code> gibi SRV kay\u0131tlar\u0131n\u0131 sorgular.<\/li>
        2. DNS sunucusu, bu kay\u0131tlara kar\u015f\u0131l\u0131k gelen DC'lerin listesini d\u00f6nd\u00fcr\u00fcr.<\/li> <\/ol> <\/div>

          SRV Kay\u0131t Detay\u0131<\/strong><\/h4> Her SRV kayd\u0131 \u015fu bilgileri i\u00e7erir:
          • Hedef (Target): <\/strong>DC'nin FQDN (Tam Nitelikli Alan Ad\u0131).<\/li>
          • Port: <\/strong>LDAP (389) veya Global Catalog (3268) gibi hizmetin \u00e7al\u0131\u015ft\u0131\u011f\u0131 port.<\/li>
          • \u00d6ncelik (Priority): <\/strong>Daha d\u00fc\u015f\u00fck de\u011fer \u00f6nce tercih edilir.<\/li>
          • A\u011f\u0131rl\u0131k (Weight): <\/strong>Ayn\u0131 \u00f6ncelikteki DC'ler aras\u0131nda y\u00fck dengeleme i\u00e7in kullan\u0131l\u0131r.<\/li> <\/ul>

            En Uygun DC'yi Se\u00e7me<\/strong><\/h4> \u0130stemci, SRV kay\u0131tlar\u0131ndaki \u00f6ncelik ve a\u011f\u0131rl\u0131k bilgilerine g\u00f6re en uygun DC'yi se\u00e7er. \u00d6rne\u011fin:
            • \u00d6ncelik 0 olan DC'ye \u00f6ncelik verilir.<\/li>
            • Ayn\u0131 \u00f6ncelikteki DC'ler aras\u0131nda a\u011f\u0131rl\u0131k oran\u0131nda da\u011f\u0131t\u0131m yap\u0131l\u0131r.<\/li> <\/ul>

              Ba\u011flant\u0131 Kurma<\/strong><\/h4>

              \u0130stemci, se\u00e7ilen DC'nin IP adresine ba\u011flant\u0131 kurar ve kimlik do\u011frulama veya di\u011fer i\u015flemleri ba\u015flat\u0131r.<\/p> <\/div>

              Bu Y\u00f6ntem Neden Standartt\u0131r?<\/strong><\/h3> DNS ve SRV kay\u0131tlar\u0131 \u00fczerinden DC ke\u015ffi, a\u015fa\u011f\u0131daki avantajlarla standart bir y\u00f6ntemdir:

              \u00a0Otomatik Ke\u015fif<\/strong><\/h4>
              • \u0130stemciler, manuel yap\u0131land\u0131rma gerektirmeden DC'leri otomatik olarak bulur.<\/li>
              • Bu, b\u00fcy\u00fck a\u011flarda y\u00f6netim maliyetini azalt\u0131r.<\/li> <\/ul>

                \u00a0\u00d6l\u00e7eklenebilirlik ve Esneklik<\/strong><\/h4>
                • Yeni DC ekledi\u011finizde otomatik olarak DNS'e kaydolur ve istemciler taraf\u0131ndan g\u00f6r\u00fcl\u00fcr.<\/li>
                • A\u011f b\u00fcy\u00fcd\u00fck\u00e7e SRV kay\u0131tlar\u0131 dinamik olarak g\u00fcncellenir.<\/li> <\/ul>

                  \u00a0Y\u00fck Dengeleme ve Yedeklilik<\/strong><\/h4>
                  • \u00d6ncelik ve a\u011f\u0131rl\u0131k ayarlar\u0131 ile trafi\u011fi dengeler.<\/li>
                  • Bir DC devre d\u0131\u015f\u0131 kald\u0131\u011f\u0131nda istemciler di\u011fer DC'lere y\u00f6nlendirilir.<\/li> <\/ul>

                    \u00a0Microsoft Taraf\u0131ndan Resmi Destek<\/strong><\/h4>
                    • Active Directory mimarisi do\u011frudan DNS'e ba\u011f\u0131ml\u0131d\u0131r.<\/li>
                    • SRV kay\u0131tlar\u0131, Microsoft taraf\u0131ndan belgelenmi\u015f ve tercih edilen y\u00f6ntemdir.<\/li> <\/ul>

                      Alternatif Y\u00f6ntemler ve S\u0131n\u0131rl\u0131l\u0131klar\u0131<\/strong><\/h3>

                      Di\u011fer y\u00f6ntemler DC ke\u015ffi i\u00e7in kullan\u0131lsa da, standart de\u011fildir ve baz\u0131 dezavantajlara sahiptir:<\/p>

                      <\/div>
                      Y\u00f6ntem<\/strong><\/div><\/th>
                      Nas\u0131l \u00c7al\u0131\u015f\u0131r?<\/strong><\/div><\/th>
                      Dezavantajlar<\/strong><\/div><\/th> <\/tr> <\/thead>
                      GPO ile Manuel Ayar<\/strong><\/div><\/td>
                      GPO ile DC IP'si sabit olarak atan\u0131r<\/div><\/td>
                      Esnek de\u011fil, \u00f6l\u00e7eklenemez<\/div><\/td> <\/tr>
                      DHCP \u00dczerinden<\/strong><\/div><\/td>
                      DHCP sunucusu DC bilgisi sa\u011flar<\/div><\/td>
                      DHCP ba\u011f\u0131ml\u0131l\u0131\u011f\u0131, s\u0131n\u0131rl\u0131 destek<\/div><\/td> <\/tr>
                      A\u011fda Yay\u0131n (Broadcast)<\/strong><\/div><\/td>
                      NetBIOS gibi eski protokollerle yay\u0131n yap\u0131l\u0131r<\/div><\/td>
                      Yava\u015f, g\u00fcvenli de\u011fil, modern a\u011flarda devre d\u0131\u015f\u0131<\/div><\/td> <\/tr>
                      Statik IP Yap\u0131land\u0131rmas\u0131<\/strong><\/div><\/td>
                      \u0130stemciye manuel olarak DC IP'si girilir<\/div><\/td>
                      Y\u00f6netimi zor, esneklik yok<\/div><\/td> <\/tr> <\/tbody> <\/table>

                      SRV Kay\u0131tlar\u0131n\u0131 G\u00f6r\u00fcnt\u00fcleme ve Sorun Giderme<\/strong><\/h3>

                      DNS Sorgusu Yapmak \u0130\u00e7in Ara\u00e7lar<\/strong><\/h4> nslookup:<\/strong> 
                      nslookup -type=SRV _ldap._tcp.dc._msdcs.example.com<\/pre> PowerShell:<\/strong> 
                      Resolve-DnsName -Name \"_ldap._tcp.dc._msdcs.example.com\" -Type SRV<\/pre> 
                      Hatalar ve \u00c7\u00f6z\u00fcmler<\/strong><\/h4> 
                       
                       
                        
                        
                      Hata<\/strong><\/div><\/th> 
                      		 
                      Nedeni<\/strong><\/div><\/th> 
                      		 
                      \u00c7\u00f6z\u00fcm<\/strong><\/div><\/th> <\/tr> <\/thead> 
                       
                        
                      DC Bulunam\u0131yor<\/div><\/td> 
                      		 
                      DNS yap\u0131land\u0131rmas\u0131 eksik<\/div><\/td> 
                      		 
                      DC'nin SRV kay\u0131tlar\u0131n\u0131dcdiag \/test:dns \/v<\/code>ile kontrol edin<\/div><\/td> <\/tr> 
                        
                      Yanl\u0131\u015f DC'ye Ba\u011flant\u0131<\/div><\/td> 
                      		 
                      \u00d6ncelik\/a\u011f\u0131rl\u0131k ayarlar\u0131 hatal\u0131<\/div><\/td> 
                      		 
                      DNS SRV kay\u0131tlar\u0131n\u0131 yeniden yap\u0131land\u0131r\u0131n<\/div><\/td> <\/tr> 
                        
                      DNS Yan\u0131t\u0131 Yok<\/div><\/td> 
                      		 
                      DNS sunucusu eri\u015filemez<\/div><\/td> 
                      		 
                      ipconfig \/flushdns<\/code>veipconfig \/registerdns<\/code>komutlar\u0131n\u0131 \u00e7al\u0131\u015ft\u0131r\u0131n<\/div><\/td> <\/tr> <\/tbody> <\/table> <\/div> Troubleshooting \/ Sorun giderme: <\/div> 
                         
                      • DNS Sa\u011fl\u0131\u011f\u0131n\u0131 \u0130zleyin:<\/strong> 
                           
                        • DC'lerin DNS'e do\u011fru \u015fekilde kay\u0131t yapt\u0131\u011f\u0131n\u0131 kontrol edin.<\/li> 
                        • dcdiag<\/code> ve repadmin<\/code> gibi ara\u00e7lar\u0131 kullan\u0131n.<\/li> <\/ul> 
                          <\/div><\/li> 
                        • Statik IP Kullan\u0131m\u0131:<\/strong> 
                             
                          • DC'lerin statik IP adresleri olmal\u0131d\u0131r.<\/li> <\/ul> 
                            <\/div><\/li> 
                          • Zon G\u00fcncellemeleri:<\/strong> 
                               
                            • DNS zonlar\u0131n\u0131n dinamik g\u00fcncellemelere izin verdi\u011finden emin olun.<\/li> <\/ul> 
                              <\/div><\/li> 
                            • Yedekleme ve Kurtarma:<\/strong> 
                                 
                              • DNS yap\u0131land\u0131rmas\u0131n\u0131 d\u00fczenli olarak yedekleyin.<\/li> <\/ul> <\/li> <\/ul> 
                                <\/div> <\/div> <\/div> <\/div>","excerpt":"Active Directory (AD) ortamlar\u0131nda istemcilerin etki alan\u0131 denetleyicilerini (Domain Controller) ke\u015ffetmesi, kimlik do\u011frulama, politika uygulama...","created_at":"2025-05-01 12:17:26","updated_at":"2026-09-06 22:16:08","category_id":6,"view_count":720,"reading_time":4,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2025-05-01 12:17:26","featured_image":"resimyok.jpg","slug":"etki-alani-denetleyicisi-kesfi-dns-ve-srv-kayitlari","category_name":"Sistem","category_slug":"sistem"}