Using Powershell to determine which DNS records are Tombstoned

Today, I had cause to find out which DNS records had been tombstoned and naturally my thoughts of a solution turned to using Powershell.  Seeing as I couldn’t find this info on the ‘Googles’ I decided to figure it out myself and thought it may come in handy for someone else.

Here’s the basic line that you can tailor to meet your needs , obviously you will need to edit  the searchbase to use your domain in place of my ‘DC=oh,DC=Pri’:

Get-ADObject -filter 'dnsTombstoned -eq $true' -SearchBase 'dc=oh.pri,CN=MicrosoftDNS,DC=DomainDNSZones,DC=oh,DC=Pri' -Properties  dNSTombstoned,name,distinguishedName,whenchanged

Be the first to comment

Leave a Reply

Your email address will not be published.


*