If you want to find out how I used PowerShell to determine which DNS records have been tombstoned then you will want to read this post.

Today, I had cause to find out which DNS records had been tombstoned and naturally my thoughts of a solution turned to using PowerShell.

Seeing as I couldn’t find this info on the ‘Googles’ I decided to figure it out myself and thought it may come in handy for someone else.

Here’s the basic line that you can tailor to meet your needs , obviously you will need to edit the searchbase to use your domain in place of my ‘DC=oh,DC=Pri’:

Get-ADObject -filter 'dnsTombstoned -eq $true' -SearchBase 'dc=oh.pri,CN=MicrosoftDNS,DC=DomainDNSZones,DC=oh,DC=Pri' -Properties  dNSTombstoned,name,distinguishedName,whenchanged

Get my book:

ConfigMgr - An Administrator’s Guide to Deploying Applications using PowerShell