top of page

Windows DNS (Domain Name System) Server - Zone
Knowledge Base Questions & Answers


What is an “AD (Active Directory) - Integrated DNS Zone”?

  • “AD (Active Directory) - Integrated DNS Zone” is a DNS zone stored within the AD database.

  • It can be updated on any DNS server and replicates updates to all DNS servers within the AD domain or forest.

  • All DNS servers running on these DCs (Domain Controllers) can act as primary servers for the zone and accept dynamic updates.


On which servers can the “AD-Integrated DNS Zone” be created?

“AD-Integrated DNS Zones” are created on DCs.


What is Aging/Scavenging?

  • Aging/Scavenging is the process that DNS servers use to identify and remove stale (outdated) resource records. Keeping the DNS database up-to-date and free from unnecessary entries that could cause resolution issues is vital.

  • The process targets dynamically created DNS records, such as those created by DHCP (Dynamic Host Configuration Protocol) clients.

  • Static records, which are manually entered, are not affected by this process unless explicitly configured.

  • By default, Aging/Scavenging is disabled on the DNS servers. It requires explicit activation and configuration on the server, the individual zones, or both.

  • For zones, Aging/Scavenging can be configured for “Forward Lookup Zones” and “Reverse Lookup Zones.”

  • The default Aging/Scavenging period is seven days.

  • Example of default Server Aging/Scavenging properties on DNS server level.

  • Example of default zone Aging/Scavenging properties on DNS zone level.

Experience-Based/Practical Questions & Answers

​

How are DNS dynamic updates configured within the “DNS Manager” MMC (Microsoft Management Console) snap-in? 

  • DNS dynamic updates are configured on the DNS zone levels: Forward and Reverse Lookup zones.

  • If the DNS zone is AD-Integrated, AD replication automatically enables and manages dynamic updates.

  • For “Forward Lookup Zones,” the path is as follows: “DNS Manager” MMC (Microsoft Management Console) snap-in -> DNS –> Server-Name –> “Forward Lookup Zones” -> Zone-Name -> Properties -> General tab -> “Dynamic Updates” drop-down menu.

  • For “Reverse Lookup Zones,” the path and settings are similar. You just need to open the “Reverse Lookup Zones” properties.

 

If DNS dynamic update is enabled, when does the refresh of the DNS record occur?

  • Computers periodically send a refresh request to the DNS server to update their DNS records.

  • The default refresh interval is typically every 24 hours but can be configured differently.

  • Certain network services, such as DHCP servers, may trigger a refresh when they renew client addresses.

 

How do you manually force DNS dynamic updates?
There are the following ways to do it:

  • Restart Netlogon service on Services MMC snap-in.

  • Restart computer.

  • Run command:
    ipconfig /registerdns

If DNS dynamic updates don’t work, what should be done to resolve the issue?

  • If a static IP (Internet Protocol) address is used on a computer, then check if the IP address of the DNS server is specified in DNS fields on network adapter properties.

  • If it is a DHCP client, then check the DHCP configuration. The scope option must contain DNS servers, which the computer gets from the DHCP server.

  • Check if you can ping DCs, which are specified on DNS fields.
     

How can you troubleshoot typical DNS zone related issues?
To troubleshoot DNS zone related issues:

  • Check the DNS server.

  • Check the DNS zone configuration.

  • Verify DNS records.

  • Check DNS replication (if using multiple servers).

  • Check “DNS Forwarders”

  • Examine DNS cache.

  • Review DNS event logs.

  • Use DNS troubleshooting tools like nslookup.

  • Review firewall and security settings.

bottom of page