Solved

DNS Zone File Full of Stale Records, Scavenging not removing anything

Posted on 2014-02-10
2
1,021 Views
Last Modified: 2014-02-28
Windows DNS Server 2008 R2, Active Directory.
I have been looking here, there, and everywhere for tips on how to solve this, but I'm on the verge of just clearing my DNS Database and letting hosts re-register themselves. Extreme, but perhaps better.

So it's pretty straightforward, I have stale records in DNS that will not scavenge out. I have two domain controllers, I only have Scavenging enabled on one. I have issued
dnscmd /AgeAllRecords

Open in new window

to date records that were stale before scavenging was enabled. I have waited, and run scavenging jobs. Still, these records remain in the DNS Database. Scavenging, when run, runs successfully, generating an Event 2501 detailing the results of the Scavenging run. Zones and Nodes are visited, but only a limited number or zero items are scavenged.

Any help beyond what I've already looked at is appreciated.
0
Comment
Question by:LingerLonger
2 Comments
 
LVL 37

Accepted Solution

by:
Mahesh earned 500 total points
ID: 39848339
Scavenging must be enabled at DNS server level and zone level also

Also have you enabled secure dynamic update on your DNS zone ?
If not please enable it.

Dnscmd /ageallrecords is not recommended command and you could execute it only when MS support suggest that in case of any weired issues

Also are you running DHCP on domain controllers ?

In that case you must set standard user account in dhcp console to work with dynamic updates

Check below post for more details
http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/2003_Server/Q_28306544.html 

Mahesh
0
 
LVL 12

Author Closing Comment

by:LingerLonger
ID: 39896243
Link suggested helped clarify some of the settings I had configured a little too broadly, but ultimately I had to just purge most of the stale records from my DNS database. Once purged, Scavenging was doing its job to keep up.
0

Featured Post

Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I was supporting a handful of Windows 2008 (non-R2) 2 node clusters with shared quorum disks. Some had SQL 2008 installed and some were just a vendor application that we supported. For the purposes of this article it doesn’t really matter which so w…
I wrote this article to explain some important DNS concepts that should be known to avoid some typical configuration errors I often see in forums. I assume that what is described here is the typical behavior of Microsoft DNS client. I don't know …
This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…

733 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question