Using DNSlint to verify the integrity of DNS records used for Active Directory Replication

DNSlint is a Microsoft Support tool that can be used to inspect the integrity of your domain’s DNS records. This can be useful if you are having problems with Active Directory replication, or if you want to check the integrity of your of your DNS records after removing a failed Domain Controller for example.

To check DNS records used for for AD replication in your domain install DNSlint and run the following command:

dnslint /ad /s IP_ADDRESS

Where IP_ADDRESS is the IP address of one of the DNS servers in your domain.

References:

DNSlint Utility