We help IT Professionals succeed at work.

Reverse Lookup Zone not updating

Medium Priority
3,929 Views
Last Modified: 2012-05-06
Hi,

Reverse lookup zone in DNS is not updating with current IP address to Host name, also I like to make sure all the DNS settings are correct. Can someone please help, we are running Windows 2003 DC (FSMO roles) and Windows 2008 DC (additional DC) AD Integrated DNS.

Thanks,
Comment
Watch Question

CERTIFIED EXPERT
Top Expert 2013

Commented:
Are your clients getting their IP's from a Windows DHCP server?
Thanks
Mike

Author

Commented:
No our firewall is DHCP

Author

Commented:
Under Forward Lookup zone - Name server tab I have two DC listed, in Zone transfer tab is not enabled. Nothing is checked in aging.

Author

Commented:
and under reverse lookup zone -  Name server tab I have two DC listed and in zone tranfer - enabled with option as only to servers listed on the name server tab

thanks mike.
CERTIFIED EXPERT
Top Expert 2013

Commented:
The aging tab has to deal with scavenging so that is separate.
If from a client you run ipconfig /registerdns do the PTR records appear.
Thanks
Mike

Author

Commented:
On windows 2000 client it comes with following info

Windows 2000 IP Configuration

Registration of the DNS resource records for all adapters of this computer has b
een initiated. Any errors will be reported in the Event Viewer in 15 minutes.

Author

Commented:
All I need is to make sure all the settings in forward and reverse lookup are correct and also DNS setting, my issue might be something to do with scavenging and I just enable it at default settings.

Thanks,
tigermattSite Reliability Engineer
CERTIFIED EXPERT
Most Valuable Expert 2011

Commented:

If your firewall is acting as the DHCP Server, that is probably the reason why the DNS is not working correctly. It's quite likely that the firewall's DHCP scope is incorrectly configured, and as such, workstations are not actively connecting to your DCs to resolve DNS. This can have major knock-on effects, and should be avoided.

I'd appreciate it if you could post the output of an ipconfig /all (at a Command Prompt) from the server and one workstation which uses DHCP.

-Matt

Author

Commented:
Thank you Matt, following is the information you requested.

DNS Server:

Windows IP Configuration

   Host Name . . . . . . . . . . . . : DNS-server
   Primary Dns Suffix  . . . . . . . : dom.testinc.com
   Node Type . . . . . . . . . . . . : Unknown
   IP Routing Enabled. . . . . . . . : No
   WINS Proxy Enabled. . . . . . . . : No
   DNS Suffix Search List. . . . . . : dom.testinc.com
                                                           testinc.com

Ethernet adapter Local Area Connection:

   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : VMware Accelerated AMD PCNet Adapter
   Physical Address. . . . . . . . . : 00-0C-29-4E-E1-69
   DHCP Enabled. . . . . . . . . . . : No
   IP Address. . . . . . . . . . . . : 192.168.250.195
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 192.168.250.250
   DNS Servers . . . . . . . . . . . : 192.168.250.195
                                                    192.168.250.201

Workstation:

Windows IP Configuration

        Host Name . . . . . . . . . . . . : B0VYVD1-POW
        Primary Dns Suffix  . . . . . . . : dom.testinc.com
        Node Type . . . . . . . . . . . . : Unknown
        IP Routing Enabled. . . . . . . . : No
        WINS Proxy Enabled. . . . . . . . : No
        DNS Suffix Search List. . . . . . : dom.testinc.com
                                                               testinc.com

Ethernet adapter Local Area Connection:

        Connection-specific DNS Suffix  . :
        Description . . . . . . . . . . . : Broadcom 440x 10/100 Integrated Controller
        Physical Address. . . . . . . . . : 00-1D-09-06-08-90
        Dhcp Enabled. . . . . . . . . . . : Yes
        Autoconfiguration Enabled . . . . : Yes
        IP Address. . . . . . . . . . . . : 192.168.250.100
        Subnet Mask . . . . . . . . . . . : 255.255.255.0
        Default Gateway . . . . . . . . . : 192.168.250.250
        DHCP Server . . . . . . . . . . . : 192.168.250.200
        DNS Servers . . . . . . . . . . . : 192.168.250.195
                                                         192.168.250.201
                                           
        Lease Obtained. . . . . . . . . . : Thursday, February 19, 2009 7:46:29 AM
        Lease Expires . . . . . . . . . . : Friday, February 20, 2009 7:46:29 AM
tigermattSite Reliability Engineer
CERTIFIED EXPERT
Most Valuable Expert 2011

Commented:

Do you have another server on IP 192.168.250.201?

Author

Commented:
yes, 195 (DC, DNS, FSMO) 201 (additional DC, DNS)
CERTIFIED EXPERT
Top Expert 2013

Commented:
Are the A records being updated in DNS properly?  Is it only the PTR records that are not being updated?

Author

Commented:
After looking at 10 PC all the records are correct A and PTR do you think because I turned on scavenging yesterday?
Also there lots of entry of PC which are no longer being used.

CERTIFIED EXPERT
Top Expert 2013
Commented:
Turning on scavenging shouldn't have affected registrations.  Turning on scavenging should help with the old records.  
A really good article on scavenging can be found here:
http://blogs.technet.com/networking/archive/2008/03/19/don-t-be-afraid-of-dns-scavenging-just-be-patient.aspx
 

Not the solution you were looking for? Getting a personalized solution is easy.

Ask the Experts

Author

Commented:
If I delete computer object from AD will it automatically remove record from DNS? If not what is best way to remove old records from DNS and also from AD there are lots of PC under AD users and Computers which are longer being used. Do you know any easier way to do this not even sure what is being used, we do not have any sort of inventory.

Thanks,
tigermattSite Reliability Engineer
CERTIFIED EXPERT
Most Valuable Expert 2011

Commented:
Deleting a computer object won't automatically delete the DNS record. That is something which has to be done manually, or using something like scavenging.

Author

Commented:
what about zone transfer? should this be enabled?

CERTIFIED EXPERT
Top Expert 2013

Commented:
Are you using active directory integrated DNS?  If so DNS is already replicating to both servers.
That tab is more for if another DNS server needs a copy of your zone.  From what I'm reading in your threads I'm thinking no.

Author

Commented:
Mike,

Last weekend I demoted one of old server from DC role, server still is member server. It went through fine but there is still two entry on DNS, I can understand since server still is member server it will host A entry but what about second.

hosta.jpg

Author

Commented:
Is their any way to tell which A record was last updated?
CERTIFIED EXPERT
Top Expert 2013

Commented:
You should have one of those (same as parent folder) for every domain controller.   That second one is not needed.
CERTIFIED EXPERT
Top Expert 2013

Commented:
Is their any way to tell which A record was last updated?
You can use dnscmd for that
example:
domain = test.com & hostname (A record) = XPSP3
dnscmd /enumrecords test.com XPSP3
 
Thanks
Mike

Author

Commented:
You should have one of those (same as parent folder) for every domain controller.   That second one is not needed.You should have one of those (same as parent folder) for every domain controller.   That second one is not needed.

So I can delete (Same as Parent folder) since this server is no longer DC?
tigermattSite Reliability Engineer
CERTIFIED EXPERT
Most Valuable Expert 2011
Commented:
Mirav,

That's correct. If the server which that (Same as Parent Folder) refers to is no longer a DC, delete the record as it will only complicate matters.

-Matt

Author

Commented:
Mike and Matt thank you for all your help, I will be going through list of active PC and deleting A and PTR records manually since DHCP is via firewall and after reading scavenging article that it might create more issues. Once everything is cleaned then I might turn on scavenging.

Once again thanks,
 
Access more of Experts Exchange with a free account
Thanks for using Experts Exchange.

Create a free account to continue.

Limited access with a free account allows you to:

  • View three pieces of content (articles, solutions, posts, and videos)
  • Ask the experts questions (counted toward content limit)
  • Customize your dashboard and profile

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.