I have looked on the DNS records and found many machines they share the same IP addresses. and I wanted to know if some of the records are stale and waitingto be scavenged, but I can't tell if I don't see the time stamp on them, how can I check that?
Some of the machines they don't cause any problem, but some of them they can not refresh the record.
I have read somewhere here: http://www.eventid.net/display.asp?eventid=11163&eventno=1746&source=DnsApi&phase=1
and it sounds like our issue is similar to what is said in the following comment:
""This problem can also occur on machines which have been cloned. This will result in the machine`s A PTR record being unreadable/writeable by the relevant machine. As per Brian Collins' comment, check the permissions for the A record are not owned by the wrong machine or a deleted account (characterised by unknown SID message).""
In fact in our network, OS has been migrated from W2K PRO to XP PRO using Ghost Image.
DHCP lease is set to 24 Hrs /DNS No Refresh 7 Days /DNS refresh 7 days