When recently I found the amazing repo at https://github.com/hagezi/dns-blocklists, which maintains various block lists in different formats. Including some for ControlD folder rule json exports.
Yes it's possible via the command line. Learn from my mistake. When you import the zone using the /primary option, it isn't AD integrated. And the /dsprimary option doesn't take a file parameter. :(
Not much too this really. I might expand this later.
For auditing we have to setup our DNS servers to audit various events and queries.
The below command can be run on one of the dns servers. It will enable logging to a file at c:\dnslogs and enable log rollover.