Friday, January 25, 2013 4:32 PM
I'm looking to decommission several legacy domain controllers which are also running DNS -- my boss is concerned about the implications the change may have on DNS. We have already brought up new DCs running DNS and modified all client settings. We have even double and triple checked the environment to ensure nothing is configured to use the legacy servers for DNS resolution.
He is still not satisfied and insists there must be a way to track DNS queries on any given name server. Does anyone know if this is possible?
My suggestion was to use NETSTAT which would give me specific point in time results as to whether any connections were established on port 53, or a utility like Wireshark for results over a longer period of time.
Any other recommendations? Sadly this is something I've done 10's if not 100's of times, but given it is a prod environment and the company is extremely outage sensitive, it is turning into mission impossible.
Friday, January 25, 2013 5:23 PM
If DNS server is up and running, it's posible that responds some querys. For example, if you run a nslookup and set this server as the default server.
To really check, use network monitor and track any DNS traffic on that server.
Or... if you already got the other server up and running, stop the DNS Service in the old DC.
- Marked As Answer by Cheers ZHANGMicrosoft Contingent Staff, Moderator Wednesday, January 30, 2013 5:45 AM
Friday, January 25, 2013 5:48 PM
Thanks Esteban! I'm currently monitoring traffic so we'll see. I also suggested stopping DNS as well, but he wants another step in the process that precedes doing that.