Hi all, when troubleshooting AD DNS issues i found the following DCDIAG switches very helpful

 

DNS Test Parameters

/test:DNS [DNS test]

Performs the specified DNS test. If no test is specified, defaults to /DnsAll.

/DnsBasic

Performs basic DNS tests, including network connectivity, DNS client configuration, service availability, and zone existence.

/DnsForwarders

Performs the /DnsBasic tests, and also checks the configuration of forwarders.

/DnsDelegation

Performs the /DnsBasic tests, and also checks for proper delegations.

/DnsDynamicUpdate

Performs /DnsBasic tests, and also determines if dynamic update is enabled in the Active Directory zone.

/DnsRecordRegistration

Performs the /DnsBasic tests, and also checks if the address (A), canonical name (CNAME) and well-known service (SRV) resource records are registered. In addition, creates an inventory report based on the test results.

/DnsResolveExtName[/DnsInternetName:<InternetName>]

Performs the /DnsBasic tests, and also attempts to resolve InternetName. If /DnsInternetName is not specified, attempts to resolve the name www.microsoft.com. If /DnsInternetName is specified, attempts to resolve the Internet name supplied by the user.

/DnsAll

Performs all tests, except for the /DnsResolveExtName test, and generates a report.

/f:<LogFile>

Redirects all output to LogFile.

/s:<DomainController>

Runs the tests against DomainController.

/e

Runs all tests specified by /test:DNS against all domain controllers in the Active Directory forest.

/v

Verbose. Presents extended information about successful test results, in addition to information about errors and warnings. When the /v parameter is not used, provides only error and warning information. Use the /v switch when errors or warnings are reported in the summary table.