DNS

Exporting and Importing MS DNS Zones

Yes it's possible via the command line. Learn from my mistake. When you import the zone using the /primary option, it isn't AD integrated. And the /dsprimary option doesn't take a file parameter. :(

Manually Querying DNS Over HTTPS

Not much too this really. I might expand this later.

curl -H 'accept: application/dns-json' \
'https://dns.nextdns.io/abc123?name=google.com&type=A' | jq .

MS DNS Logging

For auditing we have to setup our DNS servers to audit various events and queries.

Set logging settings

The below command can be run on one of the dns servers. It will enable logging to a file at c:\dnslogs and enable log rollover.