Windows DNS Audit
1:38 PMWindows DNS Audit
The following steps will allow you to audit windows servers to check that they have two DNS servers set in network settings.It is very important that all servers have two DNS servers set. Even if customer users their own DNS they should always have two, that way if one fails DNS will still work.
Due to network and firewall restrictions these steps are best run from your local system using the VPN connection.
Requirements:
Powershell - If you are on windows XP powershell can be downloaded here (Windows XP Powershell Download)Download "DNS Audit.zip" - Attchment on this page or This Link
Step 1: Extract "DNS Audit.zip" to your system - Note path you will need later
Step 2: In the "DNS Audit" folder there is a file called "ServerList.txt" remove any IPs in this file and add IPs of the server you want to scan. 1 IP per line
Step 3: In the "DNS Audit" folder there is a file called "dnsaudit.ps1" open this with notepad and make two changes
custname_server.txt replace "custname with your customers name"
custname_Failed.txt replace "custname with you customers name"
Step 4: Connect to VPN of DC customer is in.
Step 5: Run powershell as admin
Step 6: Run the following commands in powershell
Set-ExecutionPolicy Unrestricted |
Step 8: Enter the following command
dnsadudit.ps1 |
custname_server.txt = List of servers with DNS settings
custname_Failed.txt = List of servers connection failed to
Example of custname_server.txt output
IPAddress DNSServerSearchOrder
--------- --------------------
{
10.101
.
129.40
} {
209.34
.
79.68
,
209.34
.
79.69
}
IPAddress DNSServerSearchOrder
--------- --------------------
{
10.101
.
129.29
} {
209.34
.
79.68
,
209.34
.
79.69
}
0 comments