DDNS Scavenging not working properly

[Ryan Wilderman]

We have been on AD for over a year now, and have allowed
servers to dynamically register to our DNS. A couple of
months ago, we started allowing clients to register
dynamically to DNS and enabled scavenging. Scavenging is
set to one day, yet I have records in DNS that are months
old at this point, have the delete the record when it
becomes stale checkbox checked, and this particular
address has not been used by this particular client for
quite a long time. This isn't a widespread issue, only
happening on maybe 10% of the DDNS registrations. I'm
curious if anyone else has experienced this issue, and if
anyone is aware of the reason/solution as to why it is
happening.

Thanks,

Ryan Wilderman

[Thomas Spencer[MS]]

Ryan,
With respect to your question:

>>"A couple of months ago, we started allowing clients to register
>>dynamically to DNS and enabled scavenging. Scavenging is
>>set to one day, yet I have records in DNS that are months
>>old at this point, have the delete the record when it
>>becomes stale checkbox checked, and this particular
>>address has not been used by this particular client for
>>quite a long time. "

There are several key points to keep in mind when attempting
to enable scavenging:

1) You must enable scavenging in two distinct places in the
DNS MMC snap-in:

First: enable scavenging in the Advanced tab of
the DNS server properties.

-and-

Second: enable scavenging for each zone
in the General tab of the zones properties
using the "Aging..." button.

2) Only records that have been dynamically created can
be scavenged. And notice that the Server (running as a DNS
server)itself does not time stamp its own dynamically registered
record. This feature ensures the DNS server's address will never
be scavenged.

3) You can time stamp any record (so that it will eventually
be scavenged) by using the following command:

dnscmd /AgeAllRecords example.com @ /tree /f

4) I would recommend that your DNS server be at
Windows 2000 SP 3 before taking further troubleshooting steps.

Here are some Microsoft Knowledge Base articles that should
help you understand the scavenging process better:

Configure the Windows 2000 Domain Name System to Age Records [ntrelease]
ID: Q296116

http://support.microsoft.com/support/kb/articles/q296/1/16.asp

There Is No Time Stamp on the Local DNS Resource Record [ntrelease]
ID: Q293291

http://support.microsoft.com/support/kb/articles/q293/2/91.asp

DNS Server "Forced Scavenge" Does Not Start Scavenging [ntrelease]
ID: Q301644

http://support.microsoft.com/support/kb/articles/q301/6/44.asp

SP2 Adds Updates to Several Windows 2000 Support Tools [ntrelease]
ID: Q292003

http://support.microsoft.com/support/kb/articles/q292/0/03.asp

Please let me know if this solves your problem or
if you would like further assistance.

I look forward to hearing from you.

Regards,

Thomas Spencer, MCP, MCSE, MCSA Windows 2000
Microsoft Partner Support

Get Secure! - www.microsoft.com/security

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

[Ryan Wilderman]

Thomas,

You are exactly right. DNS scavenging needed to be turned
on in two distinct areas. I had it enabled on the zone
and not the server. I actually discovered this at the end
of last week, I should have updated the site. Sorry about
that, but thanks for the correct response Thomas.

Ryan

[Thomas Spencer[MS]]

Ryan,

Thanks for the positive feedback.

I'm glad everything is working for you now.