7,023 questions
Hi @MISAdmin
Did you enable audit on your DNS zone in order to track any change on DNS records and understand this behavior ?
HOW TO TRACK DNS RECORD CHANGES
Please don't forget to accept helpful answer
DNS Record Changes From Static To Dynamic
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(118.4, 94%, 21%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EM%3C/text%3E%3C/svg%3E)
MISAdmin
386
Reputation points
I have a server with a statically assigned IP address. I'm adjusting Scavenging and several of my servers had A records and PTR records that were dynamic. I have been setting these to static by de-checking the "delete this record when it becomes stale" checkbox. I have one server that keeps reverting back to dynamic... both the A and PTR records. I look at the record and the checkboxes are checked again. How can I find out what is changing these records to dynamic?
Windows for business Windows Client for IT Pros Directory services Active Directory
Windows for business Windows Server User experience Other
20,212 questions
1 answer
Sort by: Most helpful
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(281.6, 80%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ETB%3C/text%3E%3C/svg%3E)
Thameur-BOURBITA 36,261 Reputation points Moderator2024-01-12T20:13:43.73+00:00
-
MISAdmin 386 Reputation points
2024-01-15T17:20:27.37+00:00 Hi, I enabled this now in adsiedit. Now I guess I will see event 566 being logged in the DNS-Server Audit log. It appears as if that site you linked to has the same steps listed under the section "Also more troubleshooting."
-
MISAdmin 386 Reputation points
2024-01-15T17:22:12.5566667+00:00 Duplicate post... please ignore.
-
Thameur-BOURBITA 36,261 Reputation points Moderator
2024-01-15T21:24:08.85+00:00 @MISAdmin No you should have more details about any change made on DNS records.
---Please don't forget to accept helpful answer
-
MISAdmin 386 Reputation points
2024-01-16T12:57:37.93+00:00 I see on a server's A and PTR record a timestamp of 1/16/2024 4:00 AM. I don't see any DNS events at 4:00 AM to match. I see other events at different times such as... A resource record of type 1, name SVR-NSME and RDATA 0x0A0 was deleted from scope Default of zone company.local via dynamic update from IP Address n.n.n.n. and A resource record of type 1, name SVR-NSME, TTL 1200 and RDATA 0x0A0 was created in scope Default of zone company.local via dynamic update from IP Address n.n.n.n. but these records existed before I made the changes to increase the audit level. Also, these events occur on my other servers and their records are not being changed from static to dynamic.
Sign in to comment -