I have a WS2008 R2 server acting as DC, DHCP and DNS server.
DHCP is set to always dinamically update DNS-A and PTR records on behalf of clients, DHCP name protection is enabled and DHCP credentials are set and secured.
Today I noticed that DNS records were not matching DHCP records. Oddly enough, DNS reverse lookup was working as intended, but forward lookup was showing wrong (ie: old) Ip addresses.
When I checked DNS for Forward Lookup Zone, all entries were listed as static. Furthermore, on DNS domain properties, Dynamic Updates were set to "none" (on Forward lookup). So I reset Dynamic Updates to "Secure only" and after a while some dynamic entries started to appear in DNS alongside a lot of static ones. So I guess it will work as intended from now on.
My questions are:
1- Right now all clients computers have static records in DNS. Do I have to manually remove static entries in DNS for clients or will DHCP update DNS with dynamic entries and overrite static entries by itself?
2- How did it happen that all DNS entries were set to static on Forward lookup? I did not set up the server myself and it has been running for as little as three months, so it's entirely possible we've had this issue from the start, but I'm pretty sure no one added static entries manually.
Just want to make sure this is not something I might have triggered unintentionally.