Friday, October 5, 2018

AD DNS Valiator

In a small environment AD integrated DNS is one of those things that can slip through the cracks.  As much as we want to keep it accurate and clean as long as DHCP and dynamic addressing does it's thing it usually just runs.

To keep old stale records cleaned out DNS scavenging is supposed to deal with old stale records.  It doesn't always do that so I created a script to 1: scan the records and check for a live system, and 2: delete them after two subsequent failures.

The delete option is a recent add-on.  Again, an HTML report is emailed to a set of users for review and for a record of what was done.

The script is available on the PowerShell Gallery here:  PowerShell Gallery  and called "DNSValidator".

Example output:  (the inline report is hard to view but the attachments are much cleaner)
Note: Sensitive data blocked out...




No comments:

Post a Comment