Solved

Help with DNS Entires being purged from DNS Windows 2008 R2

Posted on 2013-02-07
8
1,271 Views
Last Modified: 2013-02-08
Ok folks I have an issue with DNS.  I think I have done about everything I can but I need another set of eyes.

Here is what the issue is.

DNS will accept updates from clients and DHCP.  Based on what I can see any client with a DHCP address is staying in DNS.  However if the machine has a static address the machine is not updating it's DNS records. This in turns causes the DNS records to tombstone and the record get removed.

Upon looking at it a bit more I found that when a PC/Server with a static IP address updates the DNS the record tombstones in about 3 hours.

Looking at the TTL on the record it is showing as 20 min.DNS RecordThat record just happens to be a DHCP entry.  However if it was static in about 3 hours it should show as Tombstoned in ADSI Edit.

My SOA has a refresh interval of 15 min, retry interval of 10 min and expires after 1 day.  The minimum ttl is 1 hour. SOA Tab
In looking at my Zone Aging/Scavenging,  the no-refresh and refresh intervals are at 1 day each. Zone Aging
I am honestly so confused at the moment that I just need someone to set my head right in how I need to troubleshoot this.

Thanks for your advanced assistance.

Tucker
0
Comment
Question by:Neadom Tucker
  • 5
  • 2
8 Comments
 
LVL 17

Accepted Solution

by:
Tony Massa earned 500 total points
ID: 38864220
The TTL is only the time when the record is cached and shouldn't affect registration/tombstoning.  The record timestamp controls when the record becomes stale.  1 day is too short for static registrations because the server doesn't register that often

Here are a few good pieces of info:

http://social.technet.microsoft.com/Forums/uk/winserverNIS/thread/bb556cfb-3217-4dcf-af4f-460366faa1b8
http://blogs.technet.com/b/networking/archive/2008/03/19/don-t-be-afraid-of-dns-scavenging-just-be-patient.aspx
http://support.microsoft.com/kb/932464
0
 
LVL 6

Author Comment

by:Neadom Tucker
ID: 38864593
tmassa99 thanks for that.  I thought the aging was too aggressive.  I need to speak with our IT Team at another site and find out why they did this.  I will give you and update as to our progress.  I may be a few days while we test.

Regards

Neadom
0
 
LVL 79

Expert Comment

by:David Johnson, CD, MVP
ID: 38866153
In your DHCP server have you set the reservations for these static ip's?
0
Ransomware: The New Cyber Threat & How to Stop It

This infographic explains ransomware, type of malware that blocks access to your files or your systems and holds them hostage until a ransom is paid. It also examines the different types of ransomware and explains what you can do to thwart this sinister online threat.  

 
LVL 6

Author Comment

by:Neadom Tucker
ID: 38866195
The static ip's are outside the DHCP Scope.

Neadom
0
 
LVL 6

Author Comment

by:Neadom Tucker
ID: 38866202
tmassa99  we have set the Aging to the defaults.  Now we just have to wait and see what happens in the next 24-36 hours.
0
 
LVL 17

Expert Comment

by:Tony Massa
ID: 38866218
DNS services will require a restart most likely. You may want to confirm via google

Maybe not, neither of these indicate a need to restart DNS:
http://technet.microsoft.com/en-us/library/cc753217.aspx
http://technet.microsoft.com/en-us/library/cc771362(v=ws.10).aspx
0
 
LVL 6

Author Comment

by:Neadom Tucker
ID: 38869882
Well it looks like we are all good.  I hate it when our counter parts play with Active Directory.

Thanks again!
0
 
LVL 6

Author Closing Comment

by:Neadom Tucker
ID: 38869883
Way to go!  Thanks for the head and direction adjustment.
0

Featured Post

Complete VMware vSphere® ESX(i) & Hyper-V Backup

Capture your entire system, including the host, with patented disk imaging integrated with VMware VADP / Microsoft VSS and RCT. RTOs is as low as 15 seconds with Acronis Active Restore™. You can enjoy unlimited P2V/V2V migrations from any source (even from a different hypervisor)

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Find out how to use Active Directory data for email signature management in Microsoft Exchange and Office 365.
A safe way to clean winsxs folder from your windows server 2008 R2 editions
To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…

810 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question