Re: Where are stored the dns queries?

On 20/05/2010 10:53, Alessandro Magno wrote:
> I'm using three Windows dns server: one only caching-resolver, one
> only for domain name zone, one is secondary to either.
>
> Where are stored info about my users queries (which are the websites
> they browsed) and about other dns servers queries? In the Event
> Viewer?
>
> I should store these info about the last six months.

I don't think they're stored by default - I think the only way you'll be
able to record this data is by enabling Debug Logging on the servers.
The options are in the properties of the DNS server.

--
Chris M.

On Thu, 20 May 2010 16:03:38 +0100, Chris M <>
wrote:

>On 20/05/2010 10:53, Alessandro Magno wrote:
>> I'm using three Windows dns server: one only caching-resolver, one
>> only for domain name zone, one is secondary to either.
>>
>> Where are stored info about my users queries (which are the websites
>> they browsed) and about other dns servers queries? In the Event
>> Viewer?
>>
>> I should store these info about the last six months.
>
>I don't think they're stored by default - I think the only way you'll be
>able to record this data is by enabling Debug Logging on the servers.
>The options are in the properties of the DNS server.


You can put the DNS console View options to Advanced. You will see a
Cache folder. This keeps any queries for the TTL of the record. The
TTL is obtained from the DNS server that hosts the record, and can't
be changed. When the TTL expires, the record is removed from the
cache.

As for what you are asking, other than Chris M's suggestions for debug
logging, it's not really possible to map it out, based on my
assumption you want to keep track of users in either realtime or close
to it. I would suggest using a Proxy server (such as ISA), or a third
party web filter appliance, such as Blue Coat Packeteer, Blue Coat
WebFilter, or Secure Web Gateway. Since Blue Coat took over Paketeer,
they changed up their product names.

Blue Coat WebFilter
http://www.bluecoat.com/products/webfilter

Blue Coat Secure Web Gateway
http://www.bluecoat.com/solutions/bu...efer=resources

Ace

This posting is provided "AS-IS" with no warranties or guarantees and confers no rights.

Please reply back to the newsgroup or forum for collaboration benefit among responding engineers, and to help others benefit from your resolution.

Ace Fekay, MVP, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE & MCSA 2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer
Microsoft MVP - Directory Services

If you feel this is an urgent issue and require immediate assistance, please contact Microsoft PSS directly. Please check http://support.microsoft.com for regional support phone numbers.