none
DNS Record deletion RRS feed

  • Question

  • We noticed that our random server dns record was deleted and see the below event logs. Scavenging is enabled for that particular zone. The record is static in server end and it was created as dynamic in dns end [automatically created during domain joined procedure]. Our query is why it is happening for random servers even all the servers followed the same dns record registration process. And those servers are accessible all day and we believe refresh interval / non-refesh interval is not an issue and it was set as 7 [default settings]

    Event Logs:

    Security ID: NT AUTHORITY\SYSTEM
    Account Name: SYSTEM
    Account Domain: NT AUTHORITY

    Directory Service:
    Name: example.com
    Type: Active Directory Domain Services

    Object:
    DN: DC=computer_name,DC=example.com,cn=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com
    GUID: DC=computer_name,DC=example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=example,DC=com
    Class: dnsNode

    Attribute:
    LDAP Display Name: dNSTombstoned
    Syntax (OID): 2.5.5.8
    Value: TRUE

    Operation:
    Type: Value Added

    Tuesday, August 18, 2020 4:46 PM

All replies

  • Hi,

    do the server ever update the timestamps of their host records?


    Evgenij Smirnov

    http://evgenij.smirnov.de

    Tuesday, August 18, 2020 7:30 PM
  • Hi Evgenji,

    Thanks for your reply. We checked the dns client event on the respective server. But unfortunately those logs are not enabled on the server end. Is any other way to check this ? since enabling the logs on that server is no use as of now. Because it happen on random servers.   

    Wednesday, August 19, 2020 1:51 AM
  • Hi,

    I would look at the debug logs on the DNS servers.

    But just for sanity: dynamic DNS registration is *NOT* disabled on the servers whose records disappear, is it?


    Evgenij Smirnov

    http://evgenij.smirnov.de

    Wednesday, August 19, 2020 6:48 AM
  • Evgenji,

    Dynamic dns registration is not disabled on the servers. As mentioned there was no modification done on the servers. Also no recent change in our dns server as well.  

    Wednesday, August 19, 2020 10:30 AM