Solved

DNS forward lookup zone - records accuracy

Posted on 2013-12-17
3
874 Views
Last Modified: 2013-12-20
Hi All,
I have a 3-part (hopefully simple) question about my forward lookup zone.  I'm using 2 DCs (Server2008 R2), in a single domain environment.  The functional level is Server2003.

1. When I try to find an "available" IP address, for a static dev server, or whatever, the process is extremely tedious because my forward lookup zones don't include DHCP leases that aren't associated with FQDNs.  This means i have to ping addresses over and over until I find one that seems available.  Is there a way to see all used IPs?  

2. While pinging, I get responses from FQDNs that aren't listed in my forward lookup zone.  Is this related to the secure/non-secure updates checkbox?

3. While perusing the foward lookup zone, I see entries in there from ages ago.  Yet i have scavenging set to 8 days.  I've had this problem for several years now... I thought that upgrading my DC functional level would solve this, but no success...  Any ideas?

Thanks much!
B
0
Comment
Question by:cuiinc
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 71

Expert Comment

by:Chris Dent
ID: 39725221
1. This is not a function of DNS, you need better IP address management I'm afraid.

There are a lot of IPAM solutions out there, Windows 2012 includes some as well if you're near the cutting edge.

2. Perhaps WINS / NetBIOS Broadcast unless you really mean FQDNs. Otherwise it's resolving the request via another name server.

Can you give an example? Does the name you see appear (hierarchically, if not in the GUI) under one of the zones you have configured on your DNS server?

3. When does automatic scavenging run (DNS server properties / Advanced)? The records you see, they have time stamps listed and this is how you're determining age? What have you set Refresh / No-Refresh to?

Functional level has no impact at all on this.

Chris
0
 
LVL 1

Author Comment

by:cuiinc
ID: 39725417
1. thanks!

2. You are correct in that the results of a ping return the WINS hostname (along with the address), but IP and hostname fail to show up in any of my DNS zones.  for example, pinging 192.168.0.36 returns "Dan."  however, neither my reverse nor forward lookup zones have any records of this IP address nor the hostname.

3. thanks!  i realized i had set the scaveng/aging settings under properties of the forward lookup zone, but not under DNS server Properties > Advanced.
0
 
LVL 71

Accepted Solution

by:
Chris Dent earned 500 total points
ID: 39726020
2. That's fine, you either have a WINS server (and the answer is coming from there), or it's broadcasting for a name and the answer is coming from there.

If you want that to be truly predictable you have a couple of choices:

a. Install a WINS server and properly manage NetBIOS naming.
b. Disable NetBIOS over TCP/IP on each client (DHCP can be used to do this).

I always prefer the second, I really don't like NetBIOS. However, if you have something that relies on it you can't make such a clean cut. If you're not sure, disable it on a few and see if it impacts anything. I'd focus on any systems / asset management systems you may use for that.

3. You should find manually initiating scavenging also works for you, but having it run on one of your DNS servers on a schedule is far less effort.

The event log can be reviewed to see a summary of the scavenging operation.

Chris
0

Featured Post

Free learning courses: Active Directory Deep Dive

Get a firm grasp on your IT environment when you learn Active Directory best practices with Veeam! Watch all, or choose any amount, of this three-part webinar series to improve your skills. From the basics to virtualization and backup, we got you covered.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Occasionally you run into the website or two that will not resolve properly using your own DNS servers.  Some people simply set up global forwarders for their DNS server.  I don’t recommend doing this because it can cause problems resolving addresse…
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

739 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question