Windows DNS Server 2016 and 1709+ Detect Unused Zone

Microsoft.Windows.DNSServer.2016.Monitor.DetectUnusedZone (UnitMonitor)

This monitor detects the unused Zones on a DNS Server. If a Zone does not see any activity for a prolonged period, this monitor will alert a warning.

Knowledge Base article:

Summary

This monitor evaluates the delta value between number received queries in specified interval of Windows Server 2016 and 1709+ DNS Zone. If the delta value is equal 0 the monitor changes state and generate an alert.

Configuration

Interval Seconds: The number of seconds between values for a delta evaluation.

Sync Time: Specifies the time at which the Windows script is forced to run.

Timeout Seconds: Specifies the maximum number of seconds to allow the script to execute before the script is terminated.

Causes

The Zone on the DNS server is not used.

Resolutions

Verify Zone configuration.

Element properties:

TargetMicrosoft.Windows.DNSServer.2016.Zone
Parent MonitorSystem.Health.PerformanceState
CategoryPerformanceHealth
EnabledTrue
Alert GenerateTrue
Alert SeverityMatchMonitorHealth
Alert PriorityNormal
Alert Auto ResolveTrue
Monitor TypeMicrosoft.Windows.DNSServer.2016.DetectUnusedZones.UnitMonitorType
RemotableTrue
AccessibilityPublic
Alert Message
Windows DNS 2016 - Detect Unused Zone
Current Zone was not used per last interval
RunAsMicrosoft.Windows.DNSServer.2016.ActionAccount

Source Code:

<UnitMonitor ID="Microsoft.Windows.DNSServer.2016.Monitor.DetectUnusedZone" Accessibility="Public" Enabled="true" Target="Microsoft.Windows.DNSServer.2016.Zone" ParentMonitorID="Health!System.Health.PerformanceState" Remotable="true" Priority="Normal" TypeID="Microsoft.Windows.DNSServer.2016.DetectUnusedZones.UnitMonitorType" ConfirmDelivery="true" RunAs="Microsoft.Windows.DNSServer.2016.ActionAccount">
<Category>PerformanceHealth</Category>
<AlertSettings AlertMessage="Microsoft.Windows.DNSServer.2016.Monitor.DetectUnuzedZone_AlertMessageResourceID">
<AlertOnState>Warning</AlertOnState>
<AutoResolve>true</AutoResolve>
<AlertPriority>Normal</AlertPriority>
<AlertSeverity>MatchMonitorHealth</AlertSeverity>
</AlertSettings>
<OperationalStates>
<OperationalState ID="Warning" MonitorTypeStateID="Warning" HealthState="Warning"/>
<OperationalState ID="Healthy" MonitorTypeStateID="Healthy" HealthState="Success"/>
</OperationalStates>
<Configuration>
<ComputerName>$Target/Host/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/PrincipalName$</ComputerName>
<ZoneName>$Target/Property[Type="Microsoft.Windows.DNSServer.2016.Zone"]/ZoneName$</ZoneName>
<IntervalSeconds>86400</IntervalSeconds>
<SyncTime/>
<TimeoutSeconds>240</TimeoutSeconds>
</Configuration>
</UnitMonitor>