I have a PTR record in a Reverse Lookup Zone for an old server (not a DC)
that is no longer online. I can delete the record but as soon as I reload the
zone the record comes back. I have searched in AD users and computers for any
instance of this server and can not find it. I don't know where DNS is
getting the request to reload it to the zone, and I really need to delete it
permanently. Any would be greatly appreciated. Thank you.

"daniel" <daniel@discussions.microsoft.com> wrote in message
newsCA02403-59AA-4BD8-B9F1-D844583E702B@microsoft.com...
>I have a PTR record in a Reverse Lookup Zone for an old server (not a DC)
> that is no longer online. I can delete the record but as soon as I reload
> the
> zone the record comes back.

There are only two possibilities:

1) The machine (or some machine) is re-registering itself
2) The record is being replicated in from another DNS-DC

#2 is unlikely since other DCs SHOULD respect the "deletion".

> I have searched in AD users and computers for any
> instance of this server and can not find it.

Which is almost irrelevant if a machine is using that name and
registering.

Do you have "Secure Updates Only" set for this zone. If so,
the machine would have to have a computer account in AD.

Are you certain that NO MACHINE is using that IP address?
(remember the IP is what gets registered for the PTR record.)

> I don't know where DNS is
> getting the request to reload it to the zone, and I really need to delete
> it
> permanently. Any would be greatly appreciated. Thank you.


--
Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com
[phone number on web site]

There is no computer account in AD, I am sure of that. There is another
server using the same IP address, but it has a different name. In the reverse
lookup zone, both the old and new name are being registered with the same IP
address.
Secure updates is enabled on this zone. What else can I look for? Thank you
for your response and time.


"Herb Martin" wrote:

> "daniel" <daniel@discussions.microsoft.com> wrote in message
> newsCA02403-59AA-4BD8-B9F1-D844583E702B@microsoft.com...
> >I have a PTR record in a Reverse Lookup Zone for an old server (not a DC)
> > that is no longer online. I can delete the record but as soon as I reload
> > the
> > zone the record comes back.
>
> There are only two possibilities:
>
> 1) The machine (or some machine) is re-registering itself
> 2) The record is being replicated in from another DNS-DC
>
> #2 is unlikely since other DCs SHOULD respect the "deletion".
>
> > I have searched in AD users and computers for any
> > instance of this server and can not find it.
>
> Which is almost irrelevant if a machine is using that name and
> registering.
>
> Do you have "Secure Updates Only" set for this zone. If so,
> the machine would have to have a computer account in AD.
>
> Are you certain that NO MACHINE is using that IP address?
> (remember the IP is what gets registered for the PTR record.)
>
> > I don't know where DNS is
> > getting the request to reload it to the zone, and I really need to delete
> > it
> > permanently. Any would be greatly appreciated. Thank you.
>
>
> --
> Herb Martin, MCSE, MVP
> Accelerated MCSE
> http://www.LearnQuick.Com
> [phone number on web site]
>
>
>

"daniel" <daniel@discussions.microsoft.com> wrote in message
news:37BBE442-AE67-4B2A-AAB8-8D3B73F5DA24@microsoft.com...
> There is no computer account in AD, I am sure of that. There is another
> server using the same IP address, but it has a different name. In the
> reverse
> lookup zone, both the old and new name are being registered with the same
> IP
> address.

Try logging; if using Win2003 then DEBUG logging should
get your the offender.

> Secure updates is enabled on this zone. What else can I look for? Thank
> you
> for your response and time.
>



--
Herb Martin, MCSE, MVP
Accelerated MCSE
http://www.LearnQuick.Com
[phone number on web site]

>
> "Herb Martin" wrote:
>
>> "daniel" <daniel@discussions.microsoft.com> wrote in message
>> newsCA02403-59AA-4BD8-B9F1-D844583E702B@microsoft.com...
>> >I have a PTR record in a Reverse Lookup Zone for an old server (not a
>> >DC)
>> > that is no longer online. I can delete the record but as soon as I
>> > reload
>> > the
>> > zone the record comes back.
>>
>> There are only two possibilities:
>>
>> 1) The machine (or some machine) is re-registering itself
>> 2) The record is being replicated in from another DNS-DC
>>
>> #2 is unlikely since other DCs SHOULD respect the "deletion".
>>
>> > I have searched in AD users and computers for any
>> > instance of this server and can not find it.
>>
>> Which is almost irrelevant if a machine is using that name and
>> registering.
>>
>> Do you have "Secure Updates Only" set for this zone. If so,
>> the machine would have to have a computer account in AD.
>>
>> Are you certain that NO MACHINE is using that IP address?
>> (remember the IP is what gets registered for the PTR record.)
>>
>> > I don't know where DNS is
>> > getting the request to reload it to the zone, and I really need to
>> > delete
>> > it
>> > permanently. Any would be greatly appreciated. Thank you.
>>
>>
>> --
>> Herb Martin, MCSE, MVP
>> Accelerated MCSE
>> http://www.LearnQuick.Com
>> [phone number on web site]
>>
>>
>>

Is the record in all CAPS or any Caps for that matter? If so, there was an
issue in Windows 2003 pre SP1 that we ran into requiring a hotfix to be able
to delete these records. Same symptoms as you are describing. See
http://support.microsoft.com/kb/842127/

Hope this s
NTNEWS

"Herb Martin" wrote:

> "daniel" <daniel@discussions.microsoft.com> wrote in message
> news:37BBE442-AE67-4B2A-AAB8-8D3B73F5DA24@microsoft.com...
> > There is no computer account in AD, I am sure of that. There is another
> > server using the same IP address, but it has a different name. In the
> > reverse
> > lookup zone, both the old and new name are being registered with the same
> > IP
> > address.
>
> Try logging; if using Win2003 then DEBUG logging should
> get your the offender.
>
> > Secure updates is enabled on this zone. What else can I look for? Thank
> > you
> > for your response and time.
> >
>
>
>
> --
> Herb Martin, MCSE, MVP
> Accelerated MCSE
> http://www.LearnQuick.Com
> [phone number on web site]
>
> >
> > "Herb Martin" wrote:
> >
> >> "daniel" <daniel@discussions.microsoft.com> wrote in message
> >> newsCA02403-59AA-4BD8-B9F1-D844583E702B@microsoft.com...
> >> >I have a PTR record in a Reverse Lookup Zone for an old server (not a
> >> >DC)
> >> > that is no longer online. I can delete the record but as soon as I
> >> > reload
> >> > the
> >> > zone the record comes back.
> >>
> >> There are only two possibilities:
> >>
> >> 1) The machine (or some machine) is re-registering itself
> >> 2) The record is being replicated in from another DNS-DC
> >>
> >> #2 is unlikely since other DCs SHOULD respect the "deletion".
> >>
> >> > I have searched in AD users and computers for any
> >> > instance of this server and can not find it.
> >>
> >> Which is almost irrelevant if a machine is using that name and
> >> registering.
> >>
> >> Do you have "Secure Updates Only" set for this zone. If so,
> >> the machine would have to have a computer account in AD.
> >>
> >> Are you certain that NO MACHINE is using that IP address?
> >> (remember the IP is what gets registered for the PTR record.)
> >>
> >> > I don't know where DNS is
> >> > getting the request to reload it to the zone, and I really need to
> >> > delete
> >> > it
> >> > permanently. Any would be greatly appreciated. Thank you.
> >>
> >>
> >> --
> >> Herb Martin, MCSE, MVP
> >> Accelerated MCSE
> >> http://www.LearnQuick.Com
> >> [phone number on web site]
> >>
> >>
> >>
>
>
>

Yes it has two upper case leters. Do you recommend I get the hotfix from
support?

"NTNEWS" wrote:

> Is the record in all CAPS or any Caps for that matter? If so, there was an
> issue in Windows 2003 pre SP1 that we ran into requiring a hotfix to be able
> to delete these records. Same symptoms as you are describing. See
> http://support.microsoft.com/kb/842127/
>
> Hope this s
> NTNEWS
>
> "Herb Martin" wrote:
>
> > "daniel" <daniel@discussions.microsoft.com> wrote in message
> > news:37BBE442-AE67-4B2A-AAB8-8D3B73F5DA24@microsoft.com...
> > > There is no computer account in AD, I am sure of that. There is another
> > > server using the same IP address, but it has a different name. In the
> > > reverse
> > > lookup zone, both the old and new name are being registered with the same
> > > IP
> > > address.
> >
> > Try logging; if using Win2003 then DEBUG logging should
> > get your the offender.
> >
> > > Secure updates is enabled on this zone. What else can I look for? Thank
> > > you
> > > for your response and time.
> > >
> >
> >
> >
> > --
> > Herb Martin, MCSE, MVP
> > Accelerated MCSE
> > http://www.LearnQuick.Com
> > [phone number on web site]
> >
> > >
> > > "Herb Martin" wrote:
> > >
> > >> "daniel" <daniel@discussions.microsoft.com> wrote in message
> > >> newsCA02403-59AA-4BD8-B9F1-D844583E702B@microsoft.com...
> > >> >I have a PTR record in a Reverse Lookup Zone for an old server (not a
> > >> >DC)
> > >> > that is no longer online. I can delete the record but as soon as I
> > >> > reload
> > >> > the
> > >> > zone the record comes back.
> > >>
> > >> There are only two possibilities:
> > >>
> > >> 1) The machine (or some machine) is re-registering itself
> > >> 2) The record is being replicated in from another DNS-DC
> > >>
> > >> #2 is unlikely since other DCs SHOULD respect the "deletion".
> > >>
> > >> > I have searched in AD users and computers for any
> > >> > instance of this server and can not find it.
> > >>
> > >> Which is almost irrelevant if a machine is using that name and
> > >> registering.
> > >>
> > >> Do you have "Secure Updates Only" set for this zone. If so,
> > >> the machine would have to have a computer account in AD.
> > >>
> > >> Are you certain that NO MACHINE is using that IP address?
> > >> (remember the IP is what gets registered for the PTR record.)
> > >>
> > >> > I don't know where DNS is
> > >> > getting the request to reload it to the zone, and I really need to
> > >> > delete
> > >> > it
> > >> > permanently. Any would be greatly appreciated. Thank you.
> > >>
> > >>
> > >> --
> > >> Herb Martin, MCSE, MVP
> > >> Accelerated MCSE
> > >> http://www.LearnQuick.Com
> > >> [phone number on web site]
> > >>
> > >>
> > >>
> >
> >
> >

Yes, is should be a free call into PSS. Either that or upgrade to SP1

"daniel" wrote:

> Yes it has two upper case leters. Do you recommend I get the hotfix from
> support?
>
> "NTNEWS" wrote:
>
> > Is the record in all CAPS or any Caps for that matter? If so, there was an
> > issue in Windows 2003 pre SP1 that we ran into requiring a hotfix to be able
> > to delete these records. Same symptoms as you are describing. See
> > http://support.microsoft.com/kb/842127/
> >
> > Hope this s
> > NTNEWS
> >
> > "Herb Martin" wrote:
> >
> > > "daniel" <daniel@discussions.microsoft.com> wrote in message
> > > news:37BBE442-AE67-4B2A-AAB8-8D3B73F5DA24@microsoft.com...
> > > > There is no computer account in AD, I am sure of that. There is another
> > > > server using the same IP address, but it has a different name. In the
> > > > reverse
> > > > lookup zone, both the old and new name are being registered with the same
> > > > IP
> > > > address.
> > >
> > > Try logging; if using Win2003 then DEBUG logging should
> > > get your the offender.
> > >
> > > > Secure updates is enabled on this zone. What else can I look for? Thank
> > > > you
> > > > for your response and time.
> > > >
> > >
> > >
> > >
> > > --
> > > Herb Martin, MCSE, MVP
> > > Accelerated MCSE
> > > http://www.LearnQuick.Com
> > > [phone number on web site]
> > >
> > > >
> > > > "Herb Martin" wrote:
> > > >
> > > >> "daniel" <daniel@discussions.microsoft.com> wrote in message
> > > >> newsCA02403-59AA-4BD8-B9F1-D844583E702B@microsoft.com...
> > > >> >I have a PTR record in a Reverse Lookup Zone for an old server (not a
> > > >> >DC)
> > > >> > that is no longer online. I can delete the record but as soon as I
> > > >> > reload
> > > >> > the
> > > >> > zone the record comes back.
> > > >>
> > > >> There are only two possibilities:
> > > >>
> > > >> 1) The machine (or some machine) is re-registering itself
> > > >> 2) The record is being replicated in from another DNS-DC
> > > >>
> > > >> #2 is unlikely since other DCs SHOULD respect the "deletion".
> > > >>
> > > >> > I have searched in AD users and computers for any
> > > >> > instance of this server and can not find it.
> > > >>
> > > >> Which is almost irrelevant if a machine is using that name and
> > > >> registering.
> > > >>
> > > >> Do you have "Secure Updates Only" set for this zone. If so,
> > > >> the machine would have to have a computer account in AD.
> > > >>
> > > >> Are you certain that NO MACHINE is using that IP address?
> > > >> (remember the IP is what gets registered for the PTR record.)
> > > >>
> > > >> > I don't know where DNS is
> > > >> > getting the request to reload it to the zone, and I really need to
> > > >> > delete
> > > >> > it
> > > >> > permanently. Any would be greatly appreciated. Thank you.
> > > >>
> > > >>
> > > >> --
> > > >> Herb Martin, MCSE, MVP
> > > >> Accelerated MCSE
> > > >> http://www.LearnQuick.Com
> > > >> [phone number on web site]
> > > >>
> > > >>
> > > >>
> > >
> > >
> > >

I already have SP1, and as I've been researching after your post this hotfix
is already included in SP1. What should I do now?

"NTNEWS" wrote:

> Yes, is should be a free call into PSS. Either that or upgrade to SP1
>
> "daniel" wrote:
>
> > Yes it has two upper case leters. Do you recommend I get the hotfix from
> > support?
> >
> > "NTNEWS" wrote:
> >
> > > Is the record in all CAPS or any Caps for that matter? If so, there was an
> > > issue in Windows 2003 pre SP1 that we ran into requiring a hotfix to be able
> > > to delete these records. Same symptoms as you are describing. See
> > > http://support.microsoft.com/kb/842127/
> > >
> > > Hope this s
> > > NTNEWS
> > >
> > > "Herb Martin" wrote:
> > >
> > > > "daniel" <daniel@discussions.microsoft.com> wrote in message
> > > > news:37BBE442-AE67-4B2A-AAB8-8D3B73F5DA24@microsoft.com...
> > > > > There is no computer account in AD, I am sure of that. There is another
> > > > > server using the same IP address, but it has a different name. In the
> > > > > reverse
> > > > > lookup zone, both the old and new name are being registered with the same
> > > > > IP
> > > > > address.
> > > >
> > > > Try logging; if using Win2003 then DEBUG logging should
> > > > get your the offender.
> > > >
> > > > > Secure updates is enabled on this zone. What else can I look for? Thank
> > > > > you
> > > > > for your response and time.
> > > > >
> > > >
> > > >
> > > >
> > > > --
> > > > Herb Martin, MCSE, MVP
> > > > Accelerated MCSE
> > > > http://www.LearnQuick.Com
> > > > [phone number on web site]
> > > >
> > > > >
> > > > > "Herb Martin" wrote:
> > > > >
> > > > >> "daniel" <daniel@discussions.microsoft.com> wrote in message
> > > > >> newsCA02403-59AA-4BD8-B9F1-D844583E702B@microsoft.com...
> > > > >> >I have a PTR record in a Reverse Lookup Zone for an old server (not a
> > > > >> >DC)
> > > > >> > that is no longer online. I can delete the record but as soon as I
> > > > >> > reload
> > > > >> > the
> > > > >> > zone the record comes back.
> > > > >>
> > > > >> There are only two possibilities:
> > > > >>
> > > > >> 1) The machine (or some machine) is re-registering itself
> > > > >> 2) The record is being replicated in from another DNS-DC
> > > > >>
> > > > >> #2 is unlikely since other DCs SHOULD respect the "deletion".
> > > > >>
> > > > >> > I have searched in AD users and computers for any
> > > > >> > instance of this server and can not find it.
> > > > >>
> > > > >> Which is almost irrelevant if a machine is using that name and
> > > > >> registering.
> > > > >>
> > > > >> Do you have "Secure Updates Only" set for this zone. If so,
> > > > >> the machine would have to have a computer account in AD.
> > > > >>
> > > > >> Are you certain that NO MACHINE is using that IP address?
> > > > >> (remember the IP is what gets registered for the PTR record.)
> > > > >>
> > > > >> > I don't know where DNS is
> > > > >> > getting the request to reload it to the zone, and I really need to
> > > > >> > delete
> > > > >> > it
> > > > >> > permanently. Any would be greatly appreciated. Thank you.
> > > > >>
> > > > >>
> > > > >> --
> > > > >> Herb Martin, MCSE, MVP
> > > > >> Accelerated MCSE
> > > > >> http://www.LearnQuick.Com
> > > > >> [phone number on web site]
> > > > >>
> > > > >>
> > > > >>
> > > >
> > > >
> > > >

I think the hotfix just s with newley created capital letter records and
it should allow you to delete them after the fix or SP1 as you say you have
installed. It may have occured before you installed SP1. I am pretty sure you
can use the reskit/support tools utility DNSCMD to delete these records
and/or use the link I sent you, as there are examples of script files in it
to delete these existing records. Here is is again:
http://support.microsoft.com/kb/842127/en-us

"daniel" wrote:

> I already have SP1, and as I've been researching after your post this hotfix
> is already included in SP1. What should I do now?
>
> "NTNEWS" wrote:
>
> > Yes, is should be a free call into PSS. Either that or upgrade to SP1
> >
> > "daniel" wrote:
> >
> > > Yes it has two upper case leters. Do you recommend I get the hotfix from
> > > support?
> > >
> > > "NTNEWS" wrote:
> > >
> > > > Is the record in all CAPS or any Caps for that matter? If so, there was an
> > > > issue in Windows 2003 pre SP1 that we ran into requiring a hotfix to be able
> > > > to delete these records. Same symptoms as you are describing. See
> > > > http://support.microsoft.com/kb/842127/
> > > >
> > > > Hope this s
> > > > NTNEWS
> > > >
> > > > "Herb Martin" wrote:
> > > >
> > > > > "daniel" <daniel@discussions.microsoft.com> wrote in message
> > > > > news:37BBE442-AE67-4B2A-AAB8-8D3B73F5DA24@microsoft.com...
> > > > > > There is no computer account in AD, I am sure of that. There is another
> > > > > > server using the same IP address, but it has a different name. In the
> > > > > > reverse
> > > > > > lookup zone, both the old and new name are being registered with the same
> > > > > > IP
> > > > > > address.
> > > > >
> > > > > Try logging; if using Win2003 then DEBUG logging should
> > > > > get your the offender.
> > > > >
> > > > > > Secure updates is enabled on this zone. What else can I look for? Thank
> > > > > > you
> > > > > > for your response and time.
> > > > > >
> > > > >
> > > > >
> > > > >
> > > > > --
> > > > > Herb Martin, MCSE, MVP
> > > > > Accelerated MCSE
> > > > > http://www.LearnQuick.Com
> > > > > [phone number on web site]
> > > > >
> > > > > >
> > > > > > "Herb Martin" wrote:
> > > > > >
> > > > > >> "daniel" <daniel@discussions.microsoft.com> wrote in message
> > > > > >> newsCA02403-59AA-4BD8-B9F1-D844583E702B@microsoft.com...
> > > > > >> >I have a PTR record in a Reverse Lookup Zone for an old server (not a
> > > > > >> >DC)
> > > > > >> > that is no longer online. I can delete the record but as soon as I
> > > > > >> > reload
> > > > > >> > the
> > > > > >> > zone the record comes back.
> > > > > >>
> > > > > >> There are only two possibilities:
> > > > > >>
> > > > > >> 1) The machine (or some machine) is re-registering itself
> > > > > >> 2) The record is being replicated in from another DNS-DC
> > > > > >>
> > > > > >> #2 is unlikely since other DCs SHOULD respect the "deletion".
> > > > > >>
> > > > > >> > I have searched in AD users and computers for any
> > > > > >> > instance of this server and can not find it.
> > > > > >>
> > > > > >> Which is almost irrelevant if a machine is using that name and
> > > > > >> registering.
> > > > > >>
> > > > > >> Do you have "Secure Updates Only" set for this zone. If so,
> > > > > >> the machine would have to have a computer account in AD.
> > > > > >>
> > > > > >> Are you certain that NO MACHINE is using that IP address?
> > > > > >> (remember the IP is what gets registered for the PTR record.)
> > > > > >>
> > > > > >> > I don't know where DNS is
> > > > > >> > getting the request to reload it to the zone, and I really need to
> > > > > >> > delete
> > > > > >> > it
> > > > > >> > permanently. Any would be greatly appreciated. Thank you.
> > > > > >>
> > > > > >>
> > > > > >> --
> > > > > >> Herb Martin, MCSE, MVP
> > > > > >> Accelerated MCSE
> > > > > >> http://www.LearnQuick.Com
> > > > > >> [phone number on web site]
> > > > > >>
> > > > > >>
> > > > > >>
> > > > >
> > > > >
> > > > >