DNS Aging and Scavenging: Safe Cleanup
DNS Aging and Scavenging Without Deleting Valid Records DNS scavenging is useful right up until it removes a record that was still needed. The setting is not the difficult part. The difficult part is knowing the renewal cycle, who produces each record, and how much evidence you will have when something disappears. I would observe timestamps and DHCP leases before enabling cleanup on one zone, never start with every zone. When scavenging is misconfigured, you don't just lose stale records. You lose records that matter: a DC's SRV record, a cluster's A record, or a printer that sleeps on weekends. The fallout ranges from "things feel slow" to "nothing authenticates." Getting the intervals right protects against both stale data and accidental deletion. Collect the baseline before enabling cleanup At least one pilot zone with known records A documented understanding of your DHCP lease durations and renewal patterns Access to DNS event logs (events 250...
