(A) records disappearing

[Sean D.]

A weird instance has been reoccurring with my internal DNS
(Microsoft). (A) records have been disappearing from DNS
and I've had to recreate them. Aside from someone going
in and manually deleting them, what else can be the cause
of this.

If scavenging is turned on, could it be deleting (a)
records that are not stale?


Sean D.

 

[Kevin D. Goodknecht [MVP]]

In Sean D. <[email protected]> posted a question
Then Kevin replied below:
: A weird instance has been reoccurring with my internal DNS
: (Microsoft). (A) records have been disappearing from DNS
: and I've had to recreate them. Aside from someone going
: in and manually deleting them, what else can be the cause
: of this.
:
: If scavenging is turned on, could it be deleting (a)
: records that are not stale?
:
:
: Sean D.

Which "A" records have been disappearing?
Is the zone AD integrated?
Zone updates allowed?

 

[sean d]

A couple of particular (a) records (win2k servers with
static dns entries) have been disappearing and one cname
record. I'm running AD integrated zones and zone
transfers are allowed.

 

[Kevin D. Goodknecht [MVP]]

In sean d <[email protected]> posted a question
Then Kevin replied below:
: A couple of particular (a) records (win2k servers with
: static dns entries) have been disappearing and one cname
: record. I'm running AD integrated zones and zone
: transfers are allowed.

Zone transfers can be disabled if all DNS servers are DCs in the same
domain, zone data is replicated through AD.
It is the "Allow dynamic updates" that must be at least "Yes" preferrable
secure, but if secure you need IPSec on all machines that must register or
they must have a Domain account that can create/ delete DNS objects.
ON the Machines that the records are going away on, they are not DCs, are
they?

If they are not DC and use static IP, check the TCP/IP Properties for DNS
registration enabled, if they are domain members on the ipconfig /all the
Primary DNS suffix must match the AD Domain name exactly. If they are not
members you can set the Primary DNS suffix on System Properties Network ID
tab, the you can either change the suffix or add them to the domain. If they
are already members of another domain set the DNS Suffix For this Connection
to the AD Zone name.
I just hope I didn't lose you on this.