The issue can be caused by the interaction of DNS entries and how quickly DHCP addresses are renewed.
How do you tell if this is the case? One simple way is to open up DNS look for duplicate IP entries. Look for a single IP address with 2 or more computers registered to it.
How does this happen?
Lets use the following example to illustrate one way the issue can occur.
- DHCP has its lease duration set to 2 days. (why 2 days? The site was running out of usable IP addresses and this was the easiest way to fix it.)
- DNS Scavenging is set to the default of 7 days for both the No-refresh interval and Refresh interval.
- Client A connects to the network gets IP address 10.1.1.100.
- Client A registers with DNS. The person using Computer A goes on a 1 week vacation leaving Computer A turned off.
- Three Days later Client B's computer is turned on after being off for 4 days. It gets IP address 10.1.1.100 from the DHCP server.
- Client B cannot remove Client A's entry so it registers with DNS and creates a duplicate DNS entry.
My rules of thumb for these three settings are:
- DHCP lease - make this a long as you can, but be aware of how many IP addresses you are consuming, etc. If the lease is too long you may run out of available IP's.
- Set No-refresh scavenging at 1/2 of the DHCP lease (no less than 1 day).
- Set Refresh scavenging at 1/2 of the DHCP lease (no less than 1 day).
On my network I have DHCP lease set at 7 days.
No-refresh scavenging set at 3 days.
Refresh scavenging set at 3 days.
To fix my example above? I made the DHCP duration be 5 days, the DNS scavenging 2 days for both No-refresh and Refresh. I also made the wireless network use a different IP range than the wired network.
Josh Jones wrote a great blog about Scavenging check it out. Follow his advice on scavenging. There is a DNScmd switch, if run without knowing the consequences, may cause you to either restore from a good backup or spend hours adding back in static DNS entries.
Happy DHCPing and DNSing!
Lance Caven