Are the DNS servers known, aka something you or your staff would use? Any possibility that there is a script using netsh, or similar, at play?
-- Espi On Tue, Jul 11, 2017 at 6:40 AM, Melvin Backus <melvin.bac...@byers.com> wrote: > We’ve run across a very strange DNS situation that we can’t explain. We > have suspicions and a temporary fix but I’m hoping someone on the list has > seen it already and give us some pointers. > > > > Recently stood up 2 new Skype for Business servers to replace the existing > Lync 2010 servers. One internal and one edge server in each case. We’ve > successfully migrated the topology and everything is running of the new > servers. But now for the weird part. Every day, the internal DNS entry > for the edge server gets changed. The static IPv4 entry for the internal > interface (LAN facing) gets removed and there are new entries for the > external interface IPs (public facing), both IPv4 and IPv6. The weird > part is that the new entries are static as well, no timestamps. > > > > After much digging and churning we finally disabled the DNS Client service > on that server and it didn’t happen last night, but I’m trying to figure > out how it was happening even with the DNS Client running. DNS on that box > points to a DNS server on the public side, not the internal servers. DDNS > updates should create a dynamic / timestamped entry. I’ve never seen a > static entry created any way other than via manual intervention. > > > > Any one care to solve the puzzle? > > > > -------------------- > Service Desk | 404-497-1599 <(404)%20497-1599> | > https://servicedesk.byers.com > > Melvin Backus | Sr. Systems Engineer | Byers Engineering Company | > 404.497.1565 <(404)%20497-1565> > > -- > There are 10 kinds of people in the world... > those who understand binary and those who don't. > > >
