DNS Scavanging Advice for Windows 2008 R2 Domain

-

hey everyone,

we've been having dns issues our dhcp managed clients several years now, , new product we're putting in (package management) needs correct dns info work correctly. have domain of 250 computers, 40 or servers. servers naturally have statically assigned ips, , few exceptions (mostly machines), else dhcp. rebuild our user computer pretty (every 1-1.5 years), gives lot of oportunity junk records build up. our environment consists of 1 large home office our server , half of our client machine, several smaller branch offices on 1.5-4.5 mbps mpls links, , many mobile , home users connect using vpn client on aircards , personal connections.  particularly vpn users, ips apt change frequently, , optimal performance of package management software, need have up-to-date dns information available it.

the dhcp lease time for home office , branch offices 8 days.  far know, there no lease on vpn , asa gives them ip when connect , opens reassignment when disconnect. of our mobile reps connect , discoonnect multiple times day.

when our dns zone, see records computers haven't existed 3 years, , timestamps reflect (the worst being 2010 yet). have spent several hours researching issue , seems dns scavenging @ least part of solution, since clean out old records hostnames (including 3 year old ones) , let new , updated 1 populate , used effectively. run plan people understand better though, since change affect our entire domain, , i'm not keen on breaking things.

what i've read indicates me dns scanvenging timeframe should less dhcp lease timeframe, have no trouble doing. understand reason no-refresh interval prevent unecessary record updates , replication, though since have a small domain , don't have secondary domain controllers on opposite ends of slower mpls links mentioned before, i'm not concerned that.

given vpn situation, think aggressive scavenging configuration best.  configure no-refresh interval nothing, , refresh interval not more.  thinking 1 hour , 4 hours respectively.  configure scavanging period 12 hours.  thinking should keep things fresh, , said, i'm not anticipating performance problems due small size of domain.

if read through , offer feedback, appreciated. tried cover relevant making decision here, may have missed things, please ask if need know.

i started looking stuff , did find people advocated against short intervals (hours) unless way can in situation.

this starting point me: http://blogs.technet.com/b/networking/archive/2008/03/19/don-t-be-afraid-of-dns-scavenging-just-be-patient.aspx



Windows Server  >  Network Infrastructure Servers



Comments

Post a Comment

Popular posts from this blog

CRL Revocation always failed

-
hi all, i try configure radius server nps, somehow certificate authentication client failed with reason: reason = revocation function unable check revocation because revocation server offline. then check certificate client, certutil -f -urlfetch -verify client7.cer, result follow: issuer:     cn=entca     dc=intra     dc=domain     dc=co     dc=sg subject:     cn=computer.intra.domain.co.sg cert serial number: 1c5b00de000000000041 dwflags = ca_verify_flags_allow_untrusted_root (0x1) dwflags = ca_verify_flags_ignore_offline (0x2) dwflags = ca_verify_flags_full_chain_revocation (0x8) dwflags = ca_verify_flags_console_trace (0x20000000) dwflags = ca_verify_flags_dump_chain (0x40000000) chainflags = cert_chain_revocation_check_chain (0x20000000) hcce_local_machine cert_chain_policy_base -------- cert_chain_context -------- chaincontext.dwinfostatus = ce...
Read more

Failed to query the results of bpa xpath

-
Image
i have new server installed hyper v, iis , domain services roles on it.  i checking event log , see warning multiple times, idea how rid of it?? failed query results of bpa xpath: microsoft/windows/fileservices:$reports$\*\result.xml:/resultdatabase/result. error: device attached system not functioning., last error: system cannot find path specified.. follow me on twitter <<< levalencia blog <<< hi, similar issue discussed in forum: to rid of warnings: 1. go dashboard 2. click on add roles , features 3. click next "before begin step" 4. select "role based or feature based installation" , click next 5. select given server server pool , click next 6. in server roles step make sure following checked:   file , storage services > file , iscsi services > file server, click next 7.click next through rest of steps , install server role 8. rerun bpa scan described earlier for more information please refer foll...
Read more

RDS 2012 r2 collections show black screen and then close

-
Image
greetings,   have deployed 2 server 2012 r2 rds session collections (each 2 rdsh servers, , both going through same gateway/broker server), , during testing had no issues, rolled production, our users have been experiencing black screens when attempting log in, , remote desktop window closes (no actual login performed).   seems happen intermittently, , on both collections @ different times.  thought had solved disabling use of udp in rdp clients, wasn't permanent fix.   looking @ event log of 1 of affected servers, there seems event id 36 generated @ every logon attempt following message: an error occurred when transitioning csrconnected in response evcsrinitialized. (errorcode 0x80070102)   after scouring web looking answers, nothing came up.  here appreciated. edit:  apparently can't screenshot attach, located here: http://imgur.com/rlioxpd so, appears have figured out reason (although, i'm still unsure of root cause).  bi...
Read more