I'm looking for a tool that can scan DNS for stale entries that are specific
to AD, such as , a DC crashed and a metadata cleanup was performed, but it
wasn't removed from the reverse lookup zone only the forward. And also to
check the stub zones (or delegated zones since we have 2000) and check that
all DC's that need to be there are and that old ones are out.

Is there such a tool? Or has someone made a master list of places to check
for these types of things so I can do this weekly or monthly?

Any advice appreciated

Anybody? I tried DNSLint it's just not quite what I need.


<-> wrote in message news:ufWO42KGHHA.5104@TK2MSFTNGP03.phx.gbl...
> I'm looking for a tool that can scan DNS for stale entries that are
> specific to AD, such as , a DC crashed and a metadata cleanup was
> performed, but it wasn't removed from the reverse lookup zone only the
> forward. And also to check the stub zones (or delegated zones since we
> have 2000) and check that all DC's that need to be there are and that old
> ones are out.
>
> Is there such a tool? Or has someone made a master list of places to
> check for these types of things so I can do this weekly or monthly?
>
> Any advice appreciated
>