DNS Scavanging Advice for Windows 2008 R2 Domain

-

hey everyone,

we've been having dns issues our dhcp managed clients several years now, , new product we're putting in (package management) needs correct dns info work correctly. have domain of 250 computers, 40 or servers. servers naturally have statically assigned ips, , few exceptions (mostly machines), else dhcp. rebuild our user computer pretty (every 1-1.5 years), gives lot of oportunity junk records build up. our environment consists of 1 large home office our server , half of our client machine, several smaller branch offices on 1.5-4.5 mbps mpls links, , many mobile , home users connect using vpn client on aircards , personal connections.  particularly vpn users, ips apt change frequently, , optimal performance of package management software, need have up-to-date dns information available it.

the dhcp lease time for home office , branch offices 8 days.  far know, there no lease on vpn , asa gives them ip when connect , opens reassignment when disconnect. of our mobile reps connect , discoonnect multiple times day.

when our dns zone, see records computers haven't existed 3 years, , timestamps reflect (the worst being 2010 yet). have spent several hours researching issue , seems dns scavenging @ least part of solution, since clean out old records hostnames (including 3 year old ones) , let new , updated 1 populate , used effectively. run plan people understand better though, since change affect our entire domain, , i'm not keen on breaking things.

what i've read indicates me dns scanvenging timeframe should less dhcp lease timeframe, have no trouble doing. understand reason no-refresh interval prevent unecessary record updates , replication, though since have a small domain , don't have secondary domain controllers on opposite ends of slower mpls links mentioned before, i'm not concerned that.

given vpn situation, think aggressive scavenging configuration best.  configure no-refresh interval nothing, , refresh interval not more.  thinking 1 hour , 4 hours respectively.  configure scavanging period 12 hours.  thinking should keep things fresh, , said, i'm not anticipating performance problems due small size of domain.

if read through , offer feedback, appreciated. tried cover relevant making decision here, may have missed things, please ask if need know.

i started looking stuff , did find people advocated against short intervals (hours) unless way can in situation.

this starting point me: http://blogs.technet.com/b/networking/archive/2008/03/19/don-t-be-afraid-of-dns-scavenging-just-be-patient.aspx



Windows Server  >  Network Infrastructure Servers



Comments

Post a Comment

Popular posts from this blog

CRL Revocation always failed

-
hi all, i try configure radius server nps, somehow certificate authentication client failed with reason: reason = revocation function unable check revocation because revocation server offline. then check certificate client, certutil -f -urlfetch -verify client7.cer, result follow: issuer:     cn=entca     dc=intra     dc=domain     dc=co     dc=sg subject:     cn=computer.intra.domain.co.sg cert serial number: 1c5b00de000000000041 dwflags = ca_verify_flags_allow_untrusted_root (0x1) dwflags = ca_verify_flags_ignore_offline (0x2) dwflags = ca_verify_flags_full_chain_revocation (0x8) dwflags = ca_verify_flags_console_trace (0x20000000) dwflags = ca_verify_flags_dump_chain (0x40000000) chainflags = cert_chain_revocation_check_chain (0x20000000) hcce_local_machine cert_chain_policy_base -------- cert_chain_context -------- chaincontext.dwinfostatus = ce...
Read more

Failed to query the results of bpa xpath

-
Image
i have new server installed hyper v, iis , domain services roles on it.  i checking event log , see warning multiple times, idea how rid of it?? failed query results of bpa xpath: microsoft/windows/fileservices:$reports$\*\result.xml:/resultdatabase/result. error: device attached system not functioning., last error: system cannot find path specified.. follow me on twitter <<< levalencia blog <<< hi, similar issue discussed in forum: to rid of warnings: 1. go dashboard 2. click on add roles , features 3. click next "before begin step" 4. select "role based or feature based installation" , click next 5. select given server server pool , click next 6. in server roles step make sure following checked:   file , storage services > file , iscsi services > file server, click next 7.click next through rest of steps , install server role 8. rerun bpa scan described earlier for more information please refer foll...
Read more

0x300000d errors in Microsoft Remote Desktop client

-
we use rd connect home users office. @ server side remote desktop gateway configured on 2008r2 server. experience following:   for years worked fine, starting last year users apple macbook experienced connection errors after new version of microsoft remote desktop in app store , automatic update. after couple of weeks error disappaered when new updates released. since 6 8 weeks problem again. because don’t have macbook cannot reproduce problem.   starting couple of weeks samsung s6 experiencing problems, here version 8.1.37.135 installed, error displayed is: can’t connect tot remote pc because remote desktop gateway server temporaraily unavailable. try connecting later or contact network administrator assistance. error code  0x300000d   because has worked fine years expect issues on client can configuration error on gateway server.   who pin point real cause?   however, testing other rd gateway server works ok settings identically....
Read more