Delete Stale DNS Records

[Eric Guzman]

About 2 weeks ago I Enabled DNS Scavenging on one of my Domain Controllers
and have the "No-Refresh Interval" and "Refresh Interval" set to 4 day's,
which is half of my DHCP lease of 8 days. In addition, I set the Zone
aging/scavenging settings on my Forward Lookup Zone with the same settings I
mentioned above. After checking my DNS records I didn't see a large
reduction and still see stale records.

DNS Scavanging was never been enabled in the past and the domain has been
running for years. I have several DNS records that I know are stale. From
what I researched a Time Stamp is added to DDNS records once Scavenging is
enabled. How do I handle removing stale DDNS records that were created prior
to enabling DNS scavenging as they don't have a tme stamp? What about stale
static DNS entries, etc??

Is there some native tool I can use to review what DNS records are
considered stale since they haven't been online in XX days?

[James Yeomans BSc, MCSE]

Hi there, time stamps are applied to records when ageing\scavenging is
applied. So if you checked dns straight away you will see no difference. You
will have to wait 8 days before they are scavenged (or however many days you
have set the scavenging period to on the server properties). Also manually
created records will not be scavenged they must be done manually i am not
aware of any tools that will do this for you.
James Yeomans, BSc, MCSE


"Eric Guzman" wrote:

> About 2 weeks ago I Enabled DNS Scavenging on one of my Domain Controllers
> and have the "No-Refresh Interval" and "Refresh Interval" set to 4 day's,
> which is half of my DHCP lease of 8 days. In addition, I set the Zone
> aging/scavenging settings on my Forward Lookup Zone with the same settings I
> mentioned above. After checking my DNS records I didn't see a large
> reduction and still see stale records.
>
> DNS Scavanging was never been enabled in the past and the domain has been
> running for years. I have several DNS records that I know are stale. From
> what I researched a Time Stamp is added to DDNS records once Scavenging is
> enabled. How do I handle removing stale DDNS records that were created prior
> to enabling DNS scavenging as they don't have a tme stamp? What about stale
> static DNS entries, etc??
>
> Is there some native tool I can use to review what DNS records are
> considered stale since they haven't been online in XX days?

[Eric Guzman]

o.k. thanks. Scavenging is working and many stale records got deleted. I
reviewed event log ID 2501, but it's just a summary. Is there a way I can
enable a more detailed scavenging log to show me what DNS records were
removed? Would this require some DNS logging settings?

thanks.

"James Yeomans BSc, MCSE" wrote:

> Hi there, time stamps are applied to records when ageing\scavenging is
> applied. So if you checked dns straight away you will see no difference. You
> will have to wait 8 days before they are scavenged (or however many days you
> have set the scavenging period to on the server properties). Also manually
> created records will not be scavenged they must be done manually i am not
> aware of any tools that will do this for you.
> James Yeomans, BSc, MCSE
>
>
> "Eric Guzman" wrote:
>
> > About 2 weeks ago I Enabled DNS Scavenging on one of my Domain Controllers
> > and have the "No-Refresh Interval" and "Refresh Interval" set to 4 day's,
> > which is half of my DHCP lease of 8 days. In addition, I set the Zone
> > aging/scavenging settings on my Forward Lookup Zone with the same settings I
> > mentioned above. After checking my DNS records I didn't see a large
> > reduction and still see stale records.
> >
> > DNS Scavanging was never been enabled in the past and the domain has been
> > running for years. I have several DNS records that I know are stale. From
> > what I researched a Time Stamp is added to DDNS records once Scavenging is
> > enabled. How do I handle removing stale DDNS records that were created prior
> > to enabling DNS scavenging as they don't have a tme stamp? What about stale
> > static DNS entries, etc??
> >
> > Is there some native tool I can use to review what DNS records are
> > considered stale since they haven't been online in XX days?