DNS Scavenging Question

%3CLINGO-SUB%20id%3D%22lingo-sub-3302446%22%20slang%3D%22en-US%22%3EDNS%20Scavenging%20Question%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-3302446%22%20slang%3D%22en-US%22%3E%3CP%3EHello%20All%2C%20I%20have%20a%20question%20I%20would%20like%20to%20get%20resolved%20once%20and%20for%20all.%20I%20have%20DNS%20entries%20in%20out%20AD%20DNS%20that%20are%20over%20a%20year%20old.%20These%20are%20not%20static%20IP's%20(they%20all%20have%20a%20timestamp)%20and%20it%20is%20causing%20issues%20with%20name%20resolution.%20We%20have%20scavenging%20turned%20on%20at%20the%20zone%20level%20but%20I%20have%20noticed%20that%20it%20is%20not%20turned%20on%20at%20the%20server%20level.%20Do%20I%20need%20to%20have%20%22Enable%20scavenging%20of%20stale%20records%22%20turned%20on%20at%20the%20server%20level%20under%20DNS%20server%20Properties%20%26gt%3B%20Advanced%3F%20I%20have%20done%20some%20research%20and%20am%20getting%20mixed%20messages%20about%20how%20to%20properly%20set%20this%20up%20so%20we%20can%20remove%20old%20records%20and%20keep%20DNS%20as%20clean%20as%20possible.%20Any%20help%20or%20suggestions%20is%20greatly%20appreciated.%3CBR%20%2F%3EThanks!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-3302446%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EActive%20Directory%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3Edns%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EWindows%20Server%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-3317219%22%20slang%3D%22en-US%22%3ERe%3A%20DNS%20Scavenging%20Question%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-3317219%22%20slang%3D%22en-US%22%3E%3CP%3EI'd%20suggest%20working%20through%20this%20one.%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Ftroubleshoot%2Fwindows-server%2Fnetworking%2Frecords-arent-deleted%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3ERecords%20aren't%20deleted%20-%20Windows%20Server%20%7C%20Microsoft%20Docs%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-3323605%22%20slang%3D%22en-US%22%3ERe%3A%20DNS%20Scavenging%20Question%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-3323605%22%20slang%3D%22en-US%22%3EHello%2C%3CBR%20%2F%3E%3CBR%20%2F%3EFirst%2C%20you%20should%20activate%20DNS%20scavenging%20on%20all%20AD%20integrated%20DNS%20zones.%20Duration%20settings%20depend%20on%20other%20network%20settings%20like%20DHCP%20lease.%3CBR%20%2F%3EThen%2C%20activate%20DNS%20scavenging%20on%20one%20DNS%20server%20only%20(PDC%20FSMO%20by%20example).%3CBR%20%2F%3EThen%2C%20wait%20until%20DNS%20scavenging%20starts%20to%20kick%20in%20-%20by%20default%2C%20after%202%20weeks.%3CBR%20%2F%3ENever%20trigger%20scavenging%20manually%2C%20it's%20an%20excellent%20way%20to%20screw%20your%20DNS%20records.%3CBR%20%2F%3EDNS%20scavenging%20works%20well%20-%20if%20you%20are%20patient.%3C%2FLINGO-BODY%3E
Contributor

Hello All, I have a question I would like to get resolved once and for all. I have DNS entries in out AD DNS that are over a year old. These are not static IP's (they all have a timestamp) and it is causing issues with name resolution. We have scavenging turned on at the zone level but I have noticed that it is not turned on at the server level. Do I need to have "Enable scavenging of stale records" turned on at the server level under DNS server Properties > Advanced? I have done some research and am getting mixed messages about how to properly set this up so we can remove old records and keep DNS as clean as possible. Any help or suggestions is greatly appreciated.
Thanks!

2 Replies

I'd suggest working through this one.

Records aren't deleted - Windows Server | Microsoft Docs

 

 

Hello,

First, you should activate DNS scavenging on all AD integrated DNS zones. Duration settings depend on other network settings like DHCP lease.
Then, activate DNS scavenging on one DNS server only (PDC FSMO by example).
Then, wait until DNS scavenging starts to kick in - by default, after 2 weeks.
Never trigger scavenging manually, it's an excellent way to screw your DNS records.
DNS scavenging works well - if you are patient.