Link to home
Start Free TrialLog in
Avatar of Matt
Matt

asked on

DNS problem

Hi all,

Just upgrading my domain to 2012 and now have a few issues with DNS, Weve started to have a few problems with config manager installs, when I looked at DNS I realised that there are multiple host records that have the same IP address? Is this misconfigured in some way? can how can I get around this problem?

You can see the example of the problem in the attachment.

User generated image
Avatar of valmatic
valmatic
Flag of United States of America image

Do you have your scavenge for stale records set at all for that zone? Sure does not appear so. With the time stamp you can tell it is dynamic but it is not purging any old ones. If it was something you added it would say static.
Avatar of Matt
Matt

ASKER

User generated image
Do you have scavenging enabled though on the actual server? That's the zone settings that I see there.

Right click your DNS server in the DNS snapin, and hit properties then click the advanced tab. Look at the bottom where it says "Enable automatic scavenging of stale records"

User generated image
User generated image
Avatar of Matt

ASKER

Ah - thank you. I didnt have this enabled.

Is there anyway to force through a clean up?
Avatar of Matt

ASKER

Also as this is a 2012 server Ive also enabled the following:
User generated image
To force the scavenging now, right click your DNS server and select "Scavenge stale resource records".

Just a word of caution. If you have any dynamic DNS records that are tied to a server or a service that need to stay out there, make sure you right click that DNS record, hit properties and check the box to not delete the record when it becomes stale.

Here's a good article that is a good read on DNS scavenging.

http://blogs.technet.com/b/networking/archive/2008/03/19/don-t-be-afraid-of-dns-scavenging-just-be-patient.aspx
Avatar of Matt

ASKER

So the different settings from the above screen shots. What should they be set to?
How long are your DHCP leases valid before being released?
Avatar of Matt

ASKER

Default 7 days
I would set your no refresh and refresh then to 7 days.
Avatar of Matt

ASKER

So having changed the settings and forced through a scavenge (be careful to uncheck the delete box on static addresses) IM still wondering why I have records in there that are months over the scavenge period:
User generated image
ASKER CERTIFIED SOLUTION
Avatar of themightydude
themightydude

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Matt

ASKER

So is it best to leave it now is is there a safe way to clean it up without having to wait 7 days..
Avatar of Matt

ASKER

Also, in terms of all my other DC's (7 of them on different sites) will these changes be replicated accordingly. Or do I have to repeat the process again? (unchecking the delete box for the static servers)
You can go through and manually delete the records that you know are stale / no longer in use. Just right click and delete.  It should start scavenging in the next week or so automatically and keep the DNS records clean.

That article I posted goes over time frame, scavenging, etc in fairly good detail. I would recommend reading through it.
If the record is deleted on this server / zone and that zone is also replicated / ad integrated with other DNS servers then those deleted records will be updated / replicated to the other DNS servers without having to make the same change.

So just leave it enabled on this server
Avatar of Matt

ASKER

Hi

Been monitoring the DNS with scavenging enabled but the records still dont seem to be being deleted. DNS event shows:

The DNS server has completed a scavenging cycle but no nodes were visited. Possible causes of this condition include:
 
  1) No zones are configured for scavenging by this server.
  2) A scavenging cycle was performed within the last 30 minutes.
  3) An error occurred during scavenging.
 
The next scavenging cycle is scheduled to run in 168 hours.
 
The event data will contain the error code if there was an error during the scavenging cycle.
If you right click your domain under forward lookup zones and hit properties.
Go to Aging.

What does it say for: This zone can be scavenged after:
Avatar of Matt

ASKER

11/12/2014 16:00
I'm assuming 11/12 = december 11?

If so the next run in 168 hours (7 days) should be successful. The zone hasn't aged enough yet to be marked for scavenging since it was enabled. Now that after tomorrow it will have aged enough, the next time it runs it should scavenge your records.

You can manually scavenge if you want on the 12'th.
Avatar of Matt

ASKER

So the message was that it ran at 4 o'clock today? Event shows

The DNS server has completed a scavenging cycle:
Visited Zones     = 14,
Visited Nodes     = 514,
Scavenged Nodes   = 50,
Scavenged Records = 37.
 
This cycle took 1 seconds.
 

But it still has removed old records. Im very confused.
still has or hasn't?

I'm assuming hasn't.

Can you give me a screenshot of a couple records that weren't removed that you expected to be removed?