Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1148
  • Last Modified:

DNS Zone File Full of Stale Records, Scavenging not removing anything

Windows DNS Server 2008 R2, Active Directory.
I have been looking here, there, and everywhere for tips on how to solve this, but I'm on the verge of just clearing my DNS Database and letting hosts re-register themselves. Extreme, but perhaps better.

So it's pretty straightforward, I have stale records in DNS that will not scavenge out. I have two domain controllers, I only have Scavenging enabled on one. I have issued
dnscmd /AgeAllRecords

Open in new window

to date records that were stale before scavenging was enabled. I have waited, and run scavenging jobs. Still, these records remain in the DNS Database. Scavenging, when run, runs successfully, generating an Event 2501 detailing the results of the Scavenging run. Zones and Nodes are visited, but only a limited number or zero items are scavenged.

Any help beyond what I've already looked at is appreciated.
0
LingerLonger
Asked:
LingerLonger
1 Solution
 
MaheshArchitectCommented:
Scavenging must be enabled at DNS server level and zone level also

Also have you enabled secure dynamic update on your DNS zone ?
If not please enable it.

Dnscmd /ageallrecords is not recommended command and you could execute it only when MS support suggest that in case of any weired issues

Also are you running DHCP on domain controllers ?

In that case you must set standard user account in dhcp console to work with dynamic updates

Check below post for more details
http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/2003_Server/Q_28306544.html 

Mahesh
0
 
LingerLongerAuthor Commented:
Link suggested helped clarify some of the settings I had configured a little too broadly, but ultimately I had to just purge most of the stale records from my DNS database. Once purged, Scavenging was doing its job to keep up.
0

Featured Post

Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now