I used the instructions on the following link to set up DNS auditing on Server 2003: http://blogs.technet.com/b/yuridiogenes/archive/2008/03/06/auditing-a-dns-zone.aspx

It works. When ever a forward lookup zone entry gets created or deleted, there is a log entry in the security event log.

I am investigating reverse lookup zones (PTR records) and I needed to set up auditing for that but it seems as if deleting those does not add any thing to the security log. Does any one know how I can set up auditing for reverse lookup zones so that a log entry is created whenever an entry is created or deleted?

Thanks

link|improve this question

75% accept rate
feedback

1 Answer

At a guess, I would (during step 5), simply select the DC=20.20.10.in-addr.arpa zone.

link|improve this answer
feedback

Your Answer

 
or
required, but never shown

Not the answer you're looking for? Browse other questions tagged or ask your own question.