COMMAND EVERYTHING.

Set-DnsServerDiagnostics

Sets debugging and logging parameters.

Networking / Security · Risk: High · Documentation Verified

Last verified: 2026-10-26

Microsoft DnsServer reference: Sets debugging and logging parameters. The syntax and selected example below are adapted from the pinned Windows Server 2025 reference. Module availability, target configuration and delegated permissions determine whether it can run in your environment. Documentation and parameter text: Microsoft, CC BY 4.0; formatting adapted by Cmdlet World. No execution testing is claimed.

Set-DnsServerDiagnostics [-ComputerName <String>] [-PassThru] [-Answers <Boolean>] [-EventLogLevel <UInt32>]
 [-FullPackets <Boolean>] [-IPFilterList <IPAddress[]>] [-LogFilePath <String>] [-MaxMBFileSize <UInt32>]
 [-EnableLoggingForRemoteServerEvent <Boolean>] [-EnableLoggingForPluginDllEvent <Boolean>]
 [-UseSystemEventLog <Boolean>] [-EnableLogFileRollover <Boolean>]
 [-EnableLoggingForZoneLoadingEvent <Boolean>] [-EnableLoggingForLocalLookupEvent <Boolean>]
 [-EnableLoggingToFile <Boolean>] [-EnableLoggingForZoneDataWriteEvent <Boolean>]
 [-EnableLoggingForTombstoneEvent <Boolean>] [-EnableLoggingForRecursiveLookupEvent <Boolean>]
 [-UdpPackets <Boolean>] [-UnmatchedResponse <Boolean>] [-Updates <Boolean>] [-WriteThrough <Boolean>]
 [-SaveLogsToPersistentStorage <Boolean>] [-EnableLoggingForServerStartStopEvent <Boolean>]
 [-Notifications <Boolean>] [-Queries <Boolean>] [-QuestionTransactions <Boolean>] [-ReceivePackets <Boolean>]
 [-SendPackets <Boolean>] [-TcpPackets <Boolean>] [-CimSession <CimSession[]>] [-ThrottleLimit <Int32>]
 [-AsJob] [-WhatIf] [-Confirm] [<CommonParameters>]

Copied 0 times

Required permissions

Use an account with the target resource permissions documented for Set-DnsServerDiagnostics. Modifying administrative cmdlets may require elevation or delegated administration. This catalog does not assert that ordinary users can execute the command.

Supported environments

Windows / DnsServer · Windows Server 2025 documentation; feature/module prerequisites apply

Parameters

-All (required): Specifies whether the DNS server logs all events.
-Answers: Specifies whether to enable the logging of DNS responses.
-AsJob: Runs the cmdlet as a background job. Use this parameter to run commands that take a long time to complete. The cmdlet immediately returns an object that represents the job and then displays the command prompt. You can continue to work in the session while the job completes. To manage the job, use the *-Job cmdlets. To get the job results, use the Receive-Job cmdlet. For more information about Windows PowerShell background jobs, see about_Jobs.
-CimSession: Runs the cmdlet in a remote session or on a remote computer. Enter a computer name or a session object, such as the output of a New-CimSession or Get-CimSession cmdlet. The default is the current session on the local computer.
-ComputerName: Specifies a DNS server. The acceptable values for this parameter are: an IPv4 address, an IPv6 address, and any other value that resolves to an IP address, such as fully qualified domain name (FQDN), Hostname, or NETBIOS name.
-Confirm: Prompts you for confirmation before running the cmdlet.
-DebugLogging: Specifies the bitmask for debug logging. Valid values are: - 0x00000001. The server logs query packet exchanges. - 0x00000010. The server logs packet exchanges that are related to zone exchanges. - 0x00000020. The server logs packet exchanges that are related to zone updates. - 0x00000100. The server logs packets that contain questions. - 0x00000200. The server logs packets that contain answers. - 0x00001000. The server logs packets that it sends. - 0x00002000. The server logs packets that it receives. - 0x00004000. The server logs User Datagram Protocol (UDP) packet exchanges. - 0x00008000. The server logs Transmission Control Protocol (TCP) packet exchanges. - 0x0000FFFF. The server logs operations if you set the following fields to $True: 0x00001000, 0x00002000, 0x00008000, 0x00004000, 0x00000001, 0x00000001, 0x00000020, 0x00000100, and 0x00000200S. - 0x00010000. Independent of other field values, this bitmap logs Active Directory write operations. - 0x00020000. Independent of other field values, this bitmap logs Active Directory polling operations and operations that occur during DNS updates (secure and not secure) on Active Directory-integrated zones. - 0x01000000. If other field values allow it, the server logs the entire packet to the log file. - 0x02000000. If other field values allow it, the server logs response packets that do not match any outstanding queries. - 0x80000000. If other field values allow it, the server saves packet logging information to persistent storage.

Prerequisites

Windows with the DnsServer module and the Windows feature or management tools that provide it. Confirm target connectivity and version compatibility using the linked Microsoft reference.

Security considerations

This cmdlet changes system state. Review every target and parameter in the official reference, test outside production, and prepare an appropriate backup or rollback. Do not execute the example automatically.

Examples

Example 1: Enable diagnostics for outgoing TCP responses for updates

Set-DnsServerDiagnostics -SendPackets $True -TcpPackets $True -Answers $True -Updates $True

This command enables the diagnostics of outgoing TCP responses for updates. Source: Microsoft, CC BY 4.0; transcript prompt/output removed. This example was not executed.

Sources

https://github.com/MicrosoftDocs/windows-powershell-docs/blob/b7645dd8c687139b28e845119da30ec670526507/docset/winserver2025-ps/DnsServer/Set-DnsServerDiagnostics.md

https://learn.microsoft.com/powershell/module/dnsserver/set-dnsserverdiagnostics?view=windowsserver2025-ps

Personal collections

Explain or customize this command with AI

Related commands

Get-NetIPInterface

Add-MpPreference

Get-MpPerformanceReport

Add-DhcpServerInDC