DNS Scavenging issue

Yogesh Bhatia 1 Reputation point
2021-09-22T08:04:57.74+00:00

Hello,

We are facing some issue related to DNS scavenging, When scavenging process runs, it deletes the specific 2 servers HOST A resource record from the zone, This things is happening with only 2 servers, apart from this, other servers Host A record is fine. also, it deletes the entry after 4-5 days.

Can anybody help me to suggest the possible cause of this?

DNS scavenging settings:

Non-refresh interval : 1 day

Refresh interval : 1 day

Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
5,899 questions
Windows DHCP
Windows DHCP
Windows: A family of Microsoft operating systems that run across personal computers, tablets, laptops, phones, internet of things devices, self-contained mixed reality headsets, large collaboration screens, and other devices.DHCP: Dynamic Host Configuration Protocol (DHCP). A communications protocol that lets network administrators manage centrally and automate the assignment of Internet Protocol (IP) addresses in an organization's network.
1,023 questions
0 comments

9 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. cthivierge 4,056 Reputation points
    2021-09-22T09:14:41.86+00:00

    What is the scavenging period on the DNS Server ?
    Properties of the DNS Server / Advanced tab

  2. cthivierge 4,056 Reputation points
    2021-09-22T09:40:41.673+00:00

    Does the DNS Service or the DC has a planned reboot ?

    I think that could be possible...

    The non-refresh interval is a period where the resource record cannot be refreshed. This is only to reduce replication traffic between DC's
    The refresh interval is the period where the resource record can be updated by the computer.

    Let say the scavenging process of the DNS Server is running at 12:00PM each 2 days starting on Sunday (keep in mind that the scavenging is reset when the DNS service restart)

    • Sunday at 12:01PM, ServerA just started and creates his DNS resource record (A record).
    • Sunday at 6:00PM, ServerA is disconnected from network
    • The no-refresh interval ends on Monday 12:00PM
    • Monday at 12:00PM, the resource record (A) has not finished his non-refresh interval because it has not reach his 1 day
    • Tuesday 12:00PM, the resource record (A) has completed the non-refresh interval
    • Wednesday 12:00PM, the resource record (A) has not finished the refresh interval
    • Thursday 12:00PM, the resource record is flagged to be scavenged
    • Saturday 12:00PM, the resource record will be deleted by the scavenging process

    So yes... it's possible depending when the record has been created

  3. cthivierge 4,056 Reputation points
    2021-09-22T10:13:04.113+00:00

    Are they using static IP or DHCP?

  4. cthivierge 4,056 Reputation points
    2021-09-22T10:20:55.983+00:00

    In the DNS, if you open the A record and click on the security tab, do you see the computer account in the list and normally, it should have full control

  5. cthivierge 4,056 Reputation points
    2021-09-22T11:39:08.56+00:00

    Does your DNS Zone is AD integrated ?

    Are you able to see the timestamp of the record in the DNS ?