Some Reverse Lookup Zones disappeared!

[Miadine]

Last Friday, about 75% of my Reverse Lookup Zones just up and disappeared. As far as I know, no one deleted them manually. I have looked through the event logs on all 9 of my DNS servers (5 are at a primary site, while 4 are at a backup site) and the only event logged is event ID 4005. It says that the server received an indication that a particular reverse lookup zone has been deleted. I have one event for each zone that disappeared. Nothing else. Does anyone have any ideas? Ever seen anything like this before?

 

[Miadine]

By the way, I forgot an important piece of information. I am running Windows 2003 Server in an AD environment.

 

[GlenJohnson]

Have you restarted the dns service at all lately? I understand that sometimes the reverse lookup zones might disappear when the dns service is restarted. Never had it happen to me, just what I heard.

Glen A. Johnson
If you're from Northern Illinois/Southern Wisconsin feel free to join the Tek-Tips in Chicago, Illinois Forum.
[red]Don't forget to shop @ theTek-Tips Store for Christmas![/red]
TTinChicago

 

[Miadine]

That is the hard part. Too many hands with access to the cookie jar. The event logs have been overwritten, so there is no definitive way to tell what really happened and when. I was hoping that someone had seen this happen before. Still hoping.

 

[GlenJohnson]

You may need to lock down the servers. To many hands will cause doom. Start by putting admin passwords on them with limited access. Good luck.

Glen A. Johnson
If you're from Northern Illinois/Southern Wisconsin feel free to join the Tek-Tips in Chicago, Illinois Forum.
[red]Don't forget to shop @ theTek-Tips Store for Christmas![/red]
TTinChicago