DNS and DHCP Report | PowerShell Script for Windows Server | Audit as HTML Report | Read-Only | German

A PowerShell script that checks the Windows DNS and DHCP servers of a domain in 21 points – outdated entries, insecure zones, full DHCP ranges, lack of failover protection, incorrect options – and generates a clear HTML report in German, with explanation and recommendation for each finding.

THIS IS INCLUDED
• PowerShell script DNS-DHCP-Bericht.ps1 (open source code, commented)
• Instructions as PDF
• Sample report of a test domain (HTML)

THE SCRIPT ONLY WORKS IN READING TIME
It does not change any zones, entries, areas, or settings, deletes anything, or transfers any data. Anything that cannot be queried appears in the report as a finding and is never implicitly considered OK.

THE 21 CHECKPOINTS
• DNS: DNS server not queryable; Scavenging not active; Zones without aging; Dynamic entries that haven't been updated in a long time; Zones with unsafe dynamic updates; Zones not stored in Active Directory; Zone transfer to any server allowed; Redirects not responding or not redundant; Multiple dynamic names at the same address; No reverse lookup zone; Root zone "." present
• DHCP: DHCP server not queryable; high utilization ranges; disabled ranges; ranges without failover protection; failover relationship not in normal state; missing or unusual options (router, DNS server, domain name); very long lease duration; address conflicts (BAD_ADDRESS); DHCP on domain controller without its own account for DNS entries; audit log disabled

REQUIREMENTS
• Windows PowerShell 5.1 and the modules ActiveDirectory, DnsServer, DhcpServer (present on the servers, otherwise RSAT)
• Account with administrative rights on the DNS and DHCP servers (e.g., domain admin)
• Tested with Windows PowerShell 5.1 on Windows Server 2025 in a test domain with two DNS and DHCP servers; each checkpoint was triggered with a simulated error. Since the test environment has no internet access, only the "does not respond" case was tested for the redirects. Older server versions and IPv6 ranges were not tested.

FOR WHOM
Administrators and IT service providers who want to clean up, document, or check DNS and DHCP before a migration.

GOOD TO KNOW
• Digital download (ZIP and PDF) – no physical product will be shipped
• Language of script output, report and instructions: German
• The report identifies anomalies based on fixed rules; it does not replace security audits or monitoring.
• Use within your own company or for your own customers; no resale
• Use at your own risk

Note: Content and structure originate from the seller; AI tools were used to assist in its development. All content has been professionally reviewed by the seller.