Dig to verify forwarders?

Posted on 2009-02-13
Medium Priority
Last Modified: 2012-08-13
Is it possible to use dig to verify that forwarders on DCs are working?

I ask because once in a while some folks can't get to the internet and I don't always want to have to log onto the DC to verify they are working.

Any way I can do this from my workstation using DIG?
Question by:snyderkv
LVL 57

Assisted Solution

by:Mike Kline
Mike Kline earned 600 total points
ID: 23635755
I use nslookup for this
So from your client machine if you want to test a particular DC
> nslookup
>server <ip address>
then run your query
I know you asked about DIG and I'm sure that will get a response too.
LVL 85

Assisted Solution

oBdA earned 600 total points
ID: 23636224
You can actually already pass the DNS server to use in nslookup's command line as second argument, which saves a couple of keystrokes (and can be used in a batch script for automatic testing several forwarders):
nslookup www.experts-exchange.com <DNS server IP>
LVL 21

Accepted Solution

snusgubben earned 800 total points
ID: 23637020
If you got multiple forwarders you can't predict whitch one will handle the query that you forward.

Run a "dcdiag /test:dns /v" from a DC and it will test the forwarders.


Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.


Author Comment

ID: 23638932
Ok I did the dcdiag but it says Error: "Forwarders list has invalid forwarder: xx.xx.xx.xx"

But its not an invalid forwarder. These are what we use.

Any explanation?
LVL 21

Expert Comment

ID: 23639872
Do you forward to the root-hints or your ISP DNS and how many forwarders do you use?


Author Comment

ID: 23640513
We don't forward to the root hints. The IPS in the forwards are external DNS servers.

Featured Post

Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Group policies can be applied selectively to specific devices with the help of groups. Utilising this, it is possible to phase-in group policies, over a period of time, by randomly adding non-members user or computers at a set interval, to a group f…
Transferring FSMO roles is done when an admin wants to split roles between certain Domain Controllers or the Domain Controller holding the Roles has been forcefully demoted using dcpromo / forceremoval
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
Sometimes it takes a new vantage point, apart from our everyday security practices, to truly see our Active Directory (AD) vulnerabilities. We get used to implementing the same techniques and checking the same areas for a breach. This pattern can re…
Suggested Courses

830 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question