DNS Health Check

http://portal.ultradns.com/premium/ultratools.jsp
 

DNS Health Check

http://portal.ultradns.com/premium/ultratools.jsp
 

Dig Web Interface

1.    Browse to http://www.digwebinterface.com/

2.    Enter the list of hosts you wish to test under Hostnames or IP addresses:

3.    Select Resolver under Name Servers:

4.    Check Trace under Options

5.    Click Dig

First section of results are root servers.
Next section are authoritative name servers for the TLD
Next section (your domain) are the NS records from the domain registry.
Next section (your domain) are the NS records provided an authoritative NS

Check DNS Propagation

Great online utility to check propagation of DNS changes.https://www.whatsmydns.net

Reverse DNS records not registered when using DHCP

Reverse DNS records not registered when using DHCP


Windows client > NIC > ipv4 > check the box named:
        Use this connection's DNS suffix in DNS registration

Windows DNS Server: Security Settings

Do a DNS test at:
DNS Stuff


You will get warnings of various kinds.  A couple of important fixes are:

Disable Version Query

dnscmd /config /EnableVersionQuery  0




Disable Recursion

dnscmd  /Config /NoRecursion 1

DNS Name Server Entries in Parent Domain

Your domain registrar, for example Network Solutions, maintains the DNS records that resolve your name servers' names to IP's in the parent domain. Your name servers in your start of authority (SOA) might be, for example, ns1.examplename.com and ns2.examplename.com. Records for resolution of those names to IP numbers need to be in the parent domain, such as .com.
You can verify this with the following procedure:

Input	Result
nslookup l.root-servers.net	199.7.83.42
nslookup	C:\>nslookup Default Server: router.Belkin Address: 192.168.2.1 >
server 199.7.83.42	Default Server: l.root-servers.net Address: 199.7.83.42 >
> set norecurse > set q=NS > EXAMPLENAME.com.	Server: l.root-servers.net Address: 199.7.83.42 com nameserver = a.gtld-servers.net com nameserver = b.gtld-servers.net com nameserver = c.gtld-servers.net com nameserver = d.gtld-servers.net com nameserver = e.gtld-servers.net com nameserver = f.gtld-servers.net com nameserver = g.gtld-servers.net com nameserver = h.gtld-servers.net com nameserver = i.gtld-servers.net com nameserver = j.gtld-servers.net com nameserver = k.gtld-servers.net com nameserver = l.gtld-servers.net com nameserver = m.gtld-servers.net a.gtld-servers.net internet address = 192.5.6.30 b.gtld-servers.net internet address = 192.33.14.30 c.gtld-servers.net internet address = 192.26.92.30 d.gtld-servers.net internet address = 192.31.80.30 e.gtld-servers.net internet address = 192.12.94.30 f.gtld-servers.net internet address = 192.35.51.30 g.gtld-servers.net internet address = 192.42.93.30 h.gtld-servers.net internet address = 192.54.112.30 i.gtld-servers.net internet address = 192.43.172.30 j.gtld-servers.net internet address = 192.48.79.30 k.gtld-servers.net internet address = 192.52.178.30 l.gtld-servers.net internet address = 192.41.162.30 m.gtld-servers.net internet address = 192.55.83.30 a.gtld-servers.net AAAA IPv6 address = 2001:503:a83e::2:30 >
server 192.5.6.30	in-addr.arpa nameserver = a.in-addr-servers.arpa in-addr.arpa nameserver = b.in-addr-servers.arpa in-addr.arpa nameserver = c.in-addr-servers.arpa in-addr.arpa nameserver = d.in-addr-servers.arpa in-addr.arpa nameserver = e.in-addr-servers.arpa in-addr.arpa nameserver = f.in-addr-servers.arpa a.in-addr-servers.arpa internet address = 199.212.0.73 b.in-addr-servers.arpa internet address = 199.253.183.183 c.in-addr-servers.arpa internet address = 196.216.169.10 d.in-addr-servers.arpa internet address = 200.10.60.53 e.in-addr-servers.arpa internet address = 203.119.86.101 f.in-addr-servers.arpa internet address = 193.0.9.1 a.in-addr-servers.arpa AAAA IPv6 address = 2001:500:13::73 b.in-addr-servers.arpa AAAA IPv6 address = 2001:500:87::87 c.in-addr-servers.arpa AAAA IPv6 address = 2001:43f8:110::10 d.in-addr-servers.arpa AAAA IPv6 address = 2001:13c7:7010::53 e.in-addr-servers.arpa AAAA IPv6 address = 2001:dd8:6::101 f.in-addr-servers.arpa AAAA IPv6 address = 2001:67c:e0::1 Default Server: [192.5.6.30] Address: 192.5.6.30 >
EXAMPLENAME.com.	Server: [192.5.6.30] Address: 192.5.6.30 EXAMPLENAME.com nameserver = ns1.EXAMPLENAME.com EXAMPLENAME.com nameserver = ns2.EXAMPLENAME.com EXAMPLENAME.com nameserver = ns3.EXAMPLENAME.com ns1.EXAMPLENAME.com internet address = 72.240.197.35 ns2.EXAMPLENAME.com internet address = 72.240.197.36 ns3.EXAMPLENAME.com internet address = 67.224.124.201 >

Powershell - DNS Check

Check DNS Resolution using Powershell

##########################################################################################
#
#    DNS-CHECK.PS1
#
##########################################################################################


$outfile = ".\results.txt"
$list = ".\LIST.TXT"
$names = Get-Content $list 

$today = get-date
clear-host
write "==========================================================================="
write "  $today"
write "  Checking DNS Resolution"

write "$today" | out-file -encoding ASCII $outfile 
foreach($name in $names) {
    write "---------------------------------------------------------------------------"
    write-host "  $name"
  try {[Net.DNS]::GetHostEntry($name) }
  catch {
   Write-host $server "    ERROR:  $name - NOT FOUND IN DNS"
  "ERROR:  $name - not resolved in DNS" | out-file -encoding ASCII $outfile -append 
    }
}#foreach server
write "==========================================================================="

#end

Export DNS Zone

DNS::Microsoft::Export Zone
DNSCMD is a great utility
One of the many things you can do is backup a zone:

dnscmd SERVERNAME /ZoneExport domain.com DNS-BACKUP.TXT

Oddly, you can't put that output anyplace other than the default:

C:\WINDOWS\SYSTEM32\DNS\

Windows DNS TTL

Microsoft DNS::The pain of "simplicity"

I guess a lot of people just  are going to say "DUH!!!" but I had to look hard today to figure out how to add a TTL to an individual DNS entry on MS DNS server.

VIEW > ADVANCED gives you the secret field to fill in the TTL

Sheesh!

More on aliased server names

regarding authentication during access to machines using a name other than its "real" name.
http://www.marc-antho-etc.net/blog/post/2010/09/08/Multiple-Names-for-a-File-and-Print-Server-Running-Windows-Server-2008-R2.aspx

Disable Strict Name Checking

Allow proper network access to a server using a DNS alias:

See 281308 Connecting to SMB share on a Windows 2000-based computer or a Windows Server 2003-based computer may not work with an alias name

Or copy out the codes below into a .REG file and import it.

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanserver\parameters]
"DisableStrictNameChecking"=dword:00000001

---

Also may need to disable Loopback checking:
926642

DisableLoopbackCheck registry entry in the KEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa registry subkey to 1. To set the DisableLoopbackCheck registry entry to 1, follow these steps on the client computer:
- Click Start, click Run, type regedit, and then click OK.
- Locate and then click the following registry subkey:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa

- Right-click Lsa, point to New, and then click DWORD Value.
- Type DisableLoopbackCheck, and then press ENTER.
- Right-click DisableLoopbackCheck, and then click Modify.
- In the Value data box, type 1, and then click OK.
- Exit Registry Editor.
- Restart the computer.

Windows 2008
It still works for Windows 2008.