DNS records are not 100% correct

-

for while we've been noticing dns records not correct. records pointing incorrect ip addresses. 1 one open record, update ip, replicate across domain controllers.

what cause hostname of 1 machine point ip address?

i believe you're seeing dhcp-dns registration. may have duplicates, or incorrect data records can't updated dhcp service or dhcp client due permissions on record. may not have scavenging in place.

in summary:

  • configure dhcp credentials. credentials need plain-jane, non-administrator, user account. give strong password.
  • set dhcp update everything, whether clients can or cannot.
  • set zone secure & unsecure updates. not leave unsecure only.
  • add dhcp server(s) active directory, built-in dnsupdateproxy security group. make sure other non-dhcp servers not in dnsupdateproxy group. example, believe dns servers or other dcs not running dhcp should in it. must removed or won't work. make sure no user accounts in group, either. (i hope that's crystal clear - surprised how many respond asking if dhcp credentials should in group.)
  • on windows 2008 r2 or newer, disable name protection.
  • if dhcp co-located on windows 2008 r2 or windows 2012 dc, can , must secure dnsupdateproxy group running following:
    dnscmd /config /openaclonproxyupdates 0
  • configure scavenging on 1 dns server. scavenges replicate others anyway. set scavenging norefresh , refresh values combined equal or greater dhcp lease length.

*

for specifics , step steps, , discussions on what's going on in background , expect:


dhcp service configuration, dynamic dns updates, scavenging, static entries, timestamps, dnsupdateproxy group, dhcp credentials, prevent duplicate dns records, dhcp has "pen" icon, , more...
http://msmvps.com/blogs/acefekay/archive/2009/08/20/dhcp-dynamic-dns-updates-scavenging-static-entries-amp-timestamps-and-the-dnsproxyupdate-group.aspx  

good summary
how dynamic dns behaves multiple dhcp servers on same domain?
http://social.technet.microsoft.com/forums/en-us/winservernis/thread/e9d13327-ee75-4622-a3c7-459554319a27

another summary:
thread: "dns problem" december 18, 2013
http://social.technet.microsoft.com/forums/windowsserver/en-us/37b8b6b3-6cb1-496c-8492-09ded13bab18/dns-problem?forum=winservernis

ace fekay
mvp, mct, mcitp/ea, mcts windows 2008/r2 & exchange 2007, exchange 2010 ea, mcse & mcsa 2003/2000, mcsa messaging 2003
microsoft certified trainer
microsoft mvp - directory services
technical blogs & videos: http://www.delawarecountycomputerconsulting.com/

this post provided as-is no warranties or guarantees , confers no rights.

facebook twitter linkedin



Windows Server  >  Directory Services



Comments

Post a Comment

Popular posts from this blog

Error: 0x80073701 when trying to add Print Services Role in Windows 2012 Standard

-
hello, i'm getting error when trying add print services role in windows 2012 standard. i'm getting same error whether use gui or powershell. this new server install. the powershell error follows: add-windowsfeature : request add or remove features on specified server failed. installation of 1 or more roles, role services, or features failed. the referenced assembly not found. error: 0x80073701 at line:1 char:1 + add-windowsfeature print-services + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~     + categoryinfo          : invalidoperation: (@{vhd=; credent...name=localhost}:psobject) [install-windowsfeature],     exception     + fullyqualifiederrorid : dismapi_error__failed_to_enable_updates,microsoft.windows.servermanager.commands.addwind    owsfeaturecommand success restart needed exit code      feature result ------- -------------- ---------      -------------- false   no             failed         {} issue appreciated. hi, i think should st
Read more

Disconnecting from a Windows Server 2012 R2 file sharing session on a Windows 7,8,10 machine

-
i've been trying disconnect server while , haven't been able to. there quick way this? i've used net session , net user , work sometime never consistent. can task? hi yrusad, thanks post. does work when check “computer management > system tools > shared folders > open files/sessions”. directly manage from gui. and based on knowledge, quick way mentioned net session /delete /y. mean never consistent? best regards, mary please remember mark replies answers if , unmark them if provide no help. if have feedback technet subscriber support, contact tnmff@microsoft.com . Windows Server  >  Windows Server 2012 General
Read more

Event ID 64,77,1008 Certificates Events Windows Server 2008, 2008R2

-
hi guys, i need event ids. event id 64 clear - expired certificate. problem computers have new certificate ca of them keep old one. can remove them certificate store on computers or should check before? event id 77 - 1 strange me. warning , in same time don't see suspicious: "windows default" policy module logged following warning: active directory connection <domain controller name> has been reestablished <domain controller name>. have 4 dcs. should check or ignore these messages. event id 1008 - "certificate services client: credential roaming not performed because number of tokens in local store has exceeded limit." - i've checked articles credential roaming i'm not sure should do. if give tips , answers, great. in advance. hi, event id 64 clear - expired certificate. problem computers have new certificate ca of them keep old one. can remove them certificate store on computers or should check before? i assume these
Read more