Remove A-record from DNS server permanently...

Sponsored Links

Dear all,

Please help me solve the following problem:
I have a DNS server (Windows Server 2003 R2 SP2 - Domain Controller) which
has two NICs. One is the real network, and the other is a connection to the
SAN (iSCSI).

The DNS server shows two A-records for the local server, one for each NIC.
I removed the record for the SAN because the server is not reachable on this
IP address from other workstations, and it was causeing a delay in all
connections as it was waiting for the timeout before trying the next possible
IP address.

The problem is that the A-record for the SAN NIC automatically comes back
every few hours. I've already unchecked the "Register this connection's
addresses in DNS" in the NIC settings and also removed the IP address from
the "interfaces" tab of the DNS server's properties. Both had no success.

The strange thing is that it is sometimes coming back every hour or so, and
other times it can take a day or two, but eventually it always comes back.

If anybody out there has any tips or tricks for me which will help me remove
this A-record permanently from the DNS server, please let me know!

Thanks and best regards,
M. Smit

FYI: The zone is AD-Integrated, and there are several domain controllers
hosting this zone in different sites.

"M. Smit" wrote:

> Dear all,
>
> Please help me solve the following problem:
> I have a DNS server (Windows Server 2003 R2 SP2 - Domain Controller) which
> has two NICs. One is the real network, and the other is a connection to the
> SAN (iSCSI).
>
> The DNS server shows two A-records for the local server, one for each NIC.
> I removed the record for the SAN because the server is not reachable on this
> IP address from other workstations, and it was causeing a delay in all
> connections as it was waiting for the timeout before trying the next possible
> IP address.
>
> The problem is that the A-record for the SAN NIC automatically comes back
> every few hours. I've already unchecked the "Register this connection's
> addresses in DNS" in the NIC settings and also removed the IP address from
> the "interfaces" tab of the DNS server's properties. Both had no success.
>
> The strange thing is that it is sometimes coming back every hour or so, and
> other times it can take a day or two, but eventually it always comes back.
>
> If anybody out there has any tips or tricks for me which will help me remove
> this A-record permanently from the DNS server, please let me know!
>
> Thanks and best regards,
> M. Smit

Read inline please.

In news:C0D4F106-3C6D-4B9D-AD61-6DF5D7432C66@microsoft.com,
M. Smit <MSmit@discussions.microsoft.com> wrote:
> Dear all,
>
> Please help me solve the following problem:
> I have a DNS server (Windows Server 2003 R2 SP2 - Domain Controller)
> which has two NICs. One is the real network, and the other is a
> connection to the SAN (iSCSI).
>
> The DNS server shows two A-records for the local server, one for each
> NIC.
> I removed the record for the SAN because the server is not reachable
> on this IP address from other workstations, and it was causeing a
> delay in all connections as it was waiting for the timeout before
> trying the next possible IP address.
>
> The problem is that the A-record for the SAN NIC automatically comes
> back every few hours. I've already unchecked the "Register this
> connection's addresses in DNS" in the NIC settings and also removed
> the IP address from the "interfaces" tab of the DNS server's
> properties. Both had no success.
>
> The strange thing is that it is sometimes coming back every hour or
> so, and other times it can take a day or two, but eventually it
> always comes back.
>
> If anybody out there has any tips or tricks for me which will help me
> remove this A-record permanently from the DNS server, please let me
> know!

If you are asking about the A record for the server name, that one is
controlled by the DNS Listening IP address, on the DNS Server properties
sheet, Interfaces tab.

The (Same as parent folder) A record is registered by the Netlogon service,
to prevent these records from being registered you have to use a registry
entry, then you have to manually add the record. Note- do not create this
record to point to your web server, this record must point to the Domain
Controller IP address that has file sharing enabled on it, for the NETLOGON
and SYSVOL DFS shares.
In addition, if the DC is also a Global Catalog, the Netlogon service also
registers A records for the for the Global Catalog here:
<DNSDomainName>._msdcs.gc, you must manually add this record, too.

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters

Registry value: DnsAvoidRegisterRecords
Data type: REG_MULTI_SZ

LdapIpAddress

Note-

If the DC is also a Global Catalog use this registry entry:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters
Registry value: DnsAvoidRegisterRecords

Data type: REG_MULTI_SZ
LdapIpAddress
GcIpAddress


b. Alternately you can use this Key value:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters

On the Edit menu, point to New, and then click DWORD Value to add the
following registry value:
Value name: RegisterDnsARecords
Data type: REG_DWORD
Value data: 0



http://support.wftx.us/Multihomed_Reg_Fix.txt

--
Best regards,
Kevin D. Goodknecht Sr. [MVP]
Hope This Helps

===================================
When responding to posts, please "Reply to Group"
via your newsreader so that others may learn and
benefit from your issue, to respond directly to
me remove the nospam. from my email address.
===================================
http://www.lonestaramerica.com/
http://support.wftx.us/
http://message.wftx.us/
===================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
===================================
Keep a back up of your OE settings and folders
with OEBackup:
http://www.oehelp.com/OEBackup/Default.aspx
===================================