scavenging issue (fix addresses being scavenged)

Hello,
we have our printers configured to do DHCP with fix reservations. DNS-
entries are being added manually for each printer since DNS security
is activated.
We activated scavenging a few weeks ago and now our printers start
disappearing in DNS, even if manually added adresses normaly should
not get affected by scavenging.

When I had a deeper look with dnscmd, I saw that most of the printers
have the timestamp set to 01.01.1601, so they should be ignored in
scavening. Others have an actual timestamp dating from a few days ago,
so they will be deleted in a few days or weeks when records get
"obsolete".

It seems to me that the time stamps get updated when printers are
rebooted, even if the entry was manally added, but i am not 100% sure
with that.
What can be the issue?

Best regards
CB

"bisi" <(E-Mail Removed)> wrote in message
news:33499a71-9011-4218-b05f-(E-Mail Removed)...
> Hello,
> we have our printers configured to do DHCP with fix reservations. DNS-
> entries are being added manually for each printer since DNS security
> is activated.
> We activated scavenging a few weeks ago and now our printers start
> disappearing in DNS, even if manually added adresses normaly should
> not get affected by scavenging.
>
> When I had a deeper look with dnscmd, I saw that most of the printers
> have the timestamp set to 01.01.1601, so they should be ignored in
> scavening. Others have an actual timestamp dating from a few days ago,
> so they will be deleted in a few days or weeks when records get
> "obsolete".

This should not be happening BUT this is NOT the first report we have
seen here (or elsewhere) indicating that MANUAL entries were being
scavenged.

It is my opinion that (in general) the "experts" on DNS don't see this
behavior and we have never known if this is due to different practices
OR to an unusual bug that they just don't encounter.

One suspicion is that the records is being create (by the Admin) with
the scavenge "when stale" option selected.

This supposition is unsatisfying (in general) because that option takes
some skill to FIND and those who can find it generally know better than
to use it for ordinary manual (or especially Reserved entries.)

> It seems to me that the time stamps get updated when printers are
> rebooted, even if the entry was manally added, but i am not 100% sure
> with that.
> What can be the issue?

Ensure that delete when stale is unchecked (you might need to go to
Advance VIEW in DNS Server console) and make sure you aren't
using any unusual methods of creating the record such that it gets
checked.
> Best regards
> CB

Could you check what permission has been set on the entries that are manually
created? If you tighten up the permission on these entries, will it help?

Yue

"bisi" wrote:

> Hello,
> we have our printers configured to do DHCP with fix reservations. DNS-
> entries are being added manually for each printer since DNS security
> is activated.
> We activated scavenging a few weeks ago and now our printers start
> disappearing in DNS, even if manually added adresses normaly should
> not get affected by scavenging.
>
> When I had a deeper look with dnscmd, I saw that most of the printers
> have the timestamp set to 01.01.1601, so they should be ignored in
> scavening. Others have an actual timestamp dating from a few days ago,
> so they will be deleted in a few days or weeks when records get
> "obsolete".
>
> It seems to me that the time stamps get updated when printers are
> rebooted, even if the entry was manally added, but i am not 100% sure
> with that.
> What can be the issue?
>
> Best regards
> CB
>