<?xml version="1.0" encoding="utf-16"?>
<GPO xmlns:xsd="http://www.w3.org/2001/XMLSchema"
    xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
    xmlns="http://www.microsoft.com/GroupPolicy/Settings">
    <Identifier>
        <Identifier xmlns="http://www.microsoft.com/GroupPolicy/Types">{A82F4F7B-472F-4EF0-9E36-4BD3232D8A17}</Identifier>
        <Domain xmlns="http://www.microsoft.com/GroupPolicy/Types">corp.company.com</Domain>
    </Identifier>
    <Name>T0-C-Analytics-DNSDebugLogging</Name>
    <IncludeComments>true</IncludeComments>
    <CreatedTime>2026-01-24T09:06:06</CreatedTime>
    <ModifiedTime>2026-01-24T14:21:09</ModifiedTime>
    <ReadTime>2026-01-26T06:39:30.9631847Z</ReadTime>
    <SecurityDescriptor>
        <SDDL xmlns="http://www.microsoft.com/GroupPolicy/Types/Security">O:DAG:DAD:PAI(OA;CI;CR;edacfd8f-ffb3-11d1-b41d-00a0c968f939;;AU)(A;;CCDCLCSWRPWPDTLOSDRCWDWO;;;DA)(A;CI;LCRPLORC;;;DC)(A;CI;CCDCLCSWRPWPDTLOSDRCWDWO;;;DA)(A;CI;CCDCLCSWRPWPDTLOSDRCWDWO;;;S-1-5-21-1327244862-911791944-2950972453-519)(A;CI;LCRPLORC;;;ED)(A;CI;LCRPLORC;;;AU)(A;CI;CCDCLCSWRPWPDTLOSDRCWDWO;;;SY)(A;CIIO;CCDCLCSWRPWPDTLOSDRCWDWO;;;CO)S:AI(OU;CIIDSA;WPWD;;f30e3bc2-9ff0-11d1-b603-0000f80367c1;WD)(OU;CIIOIDSA;WP;f30e3bbe-9ff0-11d1-b603-0000f80367c1;bf967aa5-0de6-11d0-a285-00aa003049e2;WD)(OU;CIIOIDSA;WP;f30e3bbf-9ff0-11d1-b603-0000f80367c1;bf967aa5-0de6-11d0-a285-00aa003049e2;WD)</SDDL>
        <Owner xmlns="http://www.microsoft.com/GroupPolicy/Types/Security">
            <SID xmlns="http://www.microsoft.com/GroupPolicy/Types">S-1-5-21-1327244862-911791944-2950972453-512</SID>
            <Name xmlns="http://www.microsoft.com/GroupPolicy/Types">corp\Domain Admins</Name>
        </Owner>
        <Group xmlns="http://www.microsoft.com/GroupPolicy/Types/Security">
            <SID xmlns="http://www.microsoft.com/GroupPolicy/Types">S-1-5-21-1327244862-911791944-2950972453-512</SID>
            <Name xmlns="http://www.microsoft.com/GroupPolicy/Types">corp\Domain Admins</Name>
        </Group>
        <PermissionsPresent xmlns="http://www.microsoft.com/GroupPolicy/Types/Security">true</PermissionsPresent>
        <Permissions xmlns="http://www.microsoft.com/GroupPolicy/Types/Security">
            <InheritsFromParent>false</InheritsFromParent>
            <TrusteePermissions>
                <Trustee>
                    <SID xmlns="http://www.microsoft.com/GroupPolicy/Types">S-1-5-21-1327244862-911791944-2950972453-515</SID>
                    <Name xmlns="http://www.microsoft.com/GroupPolicy/Types">corp\Domain Computers</Name>
                </Trustee>
                <Type xsi:type="PermissionType">
                    <PermissionType>Allow</PermissionType>
                </Type>
                <Inherited>false</Inherited>
                <Applicability>
                    <ToSelf>true</ToSelf>
                    <ToDescendantObjects>false</ToDescendantObjects>
                    <ToDescendantContainers>true</ToDescendantContainers>
                    <ToDirectDescendantsOnly>false</ToDirectDescendantsOnly>
                </Applicability>
                <Standard>
                    <GPOGroupedAccessEnum>Read</GPOGroupedAccessEnum>
                </Standard>
                <AccessMask>0</AccessMask>
            </TrusteePermissions>
            <TrusteePermissions>
                <Trustee>
                    <SID xmlns="http://www.microsoft.com/GroupPolicy/Types">S-1-5-21-1327244862-911791944-2950972453-512</SID>
                    <Name xmlns="http://www.microsoft.com/GroupPolicy/Types">corp\Domain Admins</Name>
                </Trustee>
                <Type xsi:type="PermissionType">
                    <PermissionType>Allow</PermissionType>
                </Type>
                <Inherited>false</Inherited>
                <Applicability>
                    <ToSelf>true</ToSelf>
                    <ToDescendantObjects>false</ToDescendantObjects>
                    <ToDescendantContainers>true</ToDescendantContainers>
                    <ToDirectDescendantsOnly>false</ToDirectDescendantsOnly>
                </Applicability>
                <Standard>
                    <GPOGroupedAccessEnum>Edit, delete, modify security</GPOGroupedAccessEnum>
                </Standard>
                <AccessMask>0</AccessMask>
            </TrusteePermissions>
            <TrusteePermissions>
                <Trustee>
                    <SID xmlns="http://www.microsoft.com/GroupPolicy/Types">S-1-5-9</SID>
                    <Name xmlns="http://www.microsoft.com/GroupPolicy/Types">NT AUTHORITY\ENTERPRISE DOMAIN CONTROLLERS</Name>
                </Trustee>
                <Type xsi:type="PermissionType">
                    <PermissionType>Allow</PermissionType>
                </Type>
                <Inherited>false</Inherited>
                <Applicability>
                    <ToSelf>true</ToSelf>
                    <ToDescendantObjects>false</ToDescendantObjects>
                    <ToDescendantContainers>true</ToDescendantContainers>
                    <ToDirectDescendantsOnly>false</ToDirectDescendantsOnly>
                </Applicability>
                <Standard>
                    <GPOGroupedAccessEnum>Read</GPOGroupedAccessEnum>
                </Standard>
                <AccessMask>0</AccessMask>
            </TrusteePermissions>
            <TrusteePermissions>
                <Trustee>
                    <SID xmlns="http://www.microsoft.com/GroupPolicy/Types">S-1-5-18</SID>
                    <Name xmlns="http://www.microsoft.com/GroupPolicy/Types">NT AUTHORITY\SYSTEM</Name>
                </Trustee>
                <Type xsi:type="PermissionType">
                    <PermissionType>Allow</PermissionType>
                </Type>
                <Inherited>false</Inherited>
                <Applicability>
                    <ToSelf>true</ToSelf>
                    <ToDescendantObjects>false</ToDescendantObjects>
                    <ToDescendantContainers>true</ToDescendantContainers>
                    <ToDirectDescendantsOnly>false</ToDirectDescendantsOnly>
                </Applicability>
                <Standard>
                    <GPOGroupedAccessEnum>Edit, delete, modify security</GPOGroupedAccessEnum>
                </Standard>
                <AccessMask>0</AccessMask>
            </TrusteePermissions>
            <TrusteePermissions>
                <Trustee>
                    <SID xmlns="http://www.microsoft.com/GroupPolicy/Types">S-1-5-21-1327244862-911791944-2950972453-519</SID>
                    <Name xmlns="http://www.microsoft.com/GroupPolicy/Types">corp\Enterprise Admins</Name>
                </Trustee>
                <Type xsi:type="PermissionType">
                    <PermissionType>Allow</PermissionType>
                </Type>
                <Inherited>false</Inherited>
                <Applicability>
                    <ToSelf>true</ToSelf>
                    <ToDescendantObjects>false</ToDescendantObjects>
                    <ToDescendantContainers>true</ToDescendantContainers>
                    <ToDirectDescendantsOnly>false</ToDirectDescendantsOnly>
                </Applicability>
                <Standard>
                    <GPOGroupedAccessEnum>Edit, delete, modify security</GPOGroupedAccessEnum>
                </Standard>
                <AccessMask>0</AccessMask>
            </TrusteePermissions>
            <TrusteePermissions>
                <Trustee>
                    <SID xmlns="http://www.microsoft.com/GroupPolicy/Types">S-1-5-11</SID>
                    <Name xmlns="http://www.microsoft.com/GroupPolicy/Types">NT AUTHORITY\Authenticated Users</Name>
                </Trustee>
                <Type xsi:type="PermissionType">
                    <PermissionType>Allow</PermissionType>
                </Type>
                <Inherited>false</Inherited>
                <Applicability>
                    <ToSelf>true</ToSelf>
                    <ToDescendantObjects>false</ToDescendantObjects>
                    <ToDescendantContainers>true</ToDescendantContainers>
                    <ToDirectDescendantsOnly>false</ToDirectDescendantsOnly>
                </Applicability>
                <Standard>
                    <GPOGroupedAccessEnum>Apply Group Policy</GPOGroupedAccessEnum>
                </Standard>
                <AccessMask>0</AccessMask>
            </TrusteePermissions>
        </Permissions>
        <AuditingPresent xmlns="http://www.microsoft.com/GroupPolicy/Types/Security">false</AuditingPresent>
    </SecurityDescriptor>
    <FilterDataAvailable>true</FilterDataAvailable>
    <Computer>
        <VersionDirectory>74</VersionDirectory>
        <VersionSysvol>74</VersionSysvol>
        <Enabled>true</Enabled>
        <ExtensionData>
            <Extension xmlns:q1="http://www.microsoft.com/GroupPolicy/Settings/Files" xsi:type="q1:FilesSettings">
                <q1:FilesSettings clsid="{215B2E53-57CE-475c-80FE-9EEC14635851}">
                    <q1:File clsid="{50BE44C8-567A-4ed1-B1D0-9234FE1F38AF}" name="Set-DNSServerDebugLogging.ps1" status="Set-DNSServerDebugLogging.ps1" image="1" changed="2026-01-24 14:21:09" uid="{0F09F964-D0F6-45A0-9704-05898A8523C4}" removePolicy="1" bypassErrors="1">
                        <q1:GPOSettingOrder>1</q1:GPOSettingOrder>
                        <q1:Properties action="R" fromPath="%GptPath%\Preferences\Files\Set-DNSServerDebugLogging.ps1" targetPath="C:\Administration\Scripts\Set-DNSServerDebugLogging.ps1" readOnly="0" archive="1" hidden="0" suppress="0" />
                        <q1:Filters>
                            <q1:FilterFile bool="AND" not="0" path="C:\Windows\System32\dns.exe" type="EXISTS" folder="0" />
                        </q1:Filters>
                    </q1:File>
                </q1:FilesSettings>
            </Extension>
            <Name>Files</Name>
        </ExtensionData>
        <ExtensionData>
            <Extension xmlns:q2="http://www.microsoft.com/GroupPolicy/Settings/ScheduledTasks" xsi:type="q2:ScheduledTasksSettings">
                <q2:ScheduledTasks clsid="{CC63F200-7309-4ba0-B154-A71CD118DBCC}">
                    <q2:TaskV2 clsid="{D8896631-B747-47a7-84A6-C155337F3BC8}" name="Set-DNSServerDebugLogging" image="1" changed="2026-01-24 14:20:48" uid="{DF9CF31C-5AD6-4DDD-80EB-18CDA41147CE}" disabled="0" userContext="0" removePolicy="1">
                        <q2:GPOSettingOrder>1</q2:GPOSettingOrder>
                        <q2:Properties action="R" name="Set-DNSServerDebugLogging" runAs="system" logonType="S4U">
                            <q2:Task version="1.3">
                                <q2:RegistrationInfo>
                                    <q2:Author>Andi Bellstedt</q2:Author>
                                    <q2:Description />
                                </q2:RegistrationInfo>
                                <q2:Triggers>
                                    <q2:CalendarTrigger>
                                        <q2:Enabled>true</q2:Enabled>
                                        <q2:StartBoundary>2025-03-01T00:00:01</q2:StartBoundary>
                                        <q2:ExecutionTimeLimit>PT2H</q2:ExecutionTimeLimit>
                                        <q2:ScheduleByDay>
                                            <q2:DaysInterval>1</q2:DaysInterval>
                                        </q2:ScheduleByDay>
                                    </q2:CalendarTrigger>
                                </q2:Triggers>
                                <q2:Settings>
                                    <q2:AllowStartOnDemand>true</q2:AllowStartOnDemand>
                                    <q2:DisallowStartIfOnBatteries>true</q2:DisallowStartIfOnBatteries>
                                    <q2:StopIfGoingOnBatteries>true</q2:StopIfGoingOnBatteries>
                                    <q2:AllowHardTerminate>true</q2:AllowHardTerminate>
                                    <q2:StartWhenAvailable>false</q2:StartWhenAvailable>
                                    <q2:Enabled>true</q2:Enabled>
                                    <q2:Hidden>false</q2:Hidden>
                                    <q2:MultipleInstancesPolicy>IgnoreNew</q2:MultipleInstancesPolicy>
                                    <q2:Priority>7</q2:Priority>
                                    <q2:ExecutionTimeLimit>P3D</q2:ExecutionTimeLimit>
                                    <q2:IdleSettings>
                                        <q2:Duration>PT10M</q2:Duration>
                                        <q2:WaitTimeout>PT1H</q2:WaitTimeout>
                                        <q2:StopOnIdleEnd>true</q2:StopOnIdleEnd>
                                        <q2:RestartOnIdle>false</q2:RestartOnIdle>
                                    </q2:IdleSettings>
                                </q2:Settings>
                                <q2:Principals>
                                    <q2:Principal id="Author">
                                        <q2:UserId>system</q2:UserId>
                                        <q2:LogonType>S4U</q2:LogonType>
                                        <q2:RunLevel>HighestAvailable</q2:RunLevel>
                                    </q2:Principal>
                                </q2:Principals>
                                <q2:Actions>
                                    <q2:Exec>
                                        <q2:Command>C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe</q2:Command>
                                        <q2:Arguments>-ExecutionPolicy RemoteSigned -command " &amp; { C:\Administration\Scripts\Set-DNSServerDebugLogging.ps1 }"</q2:Arguments>
                                        <q2:WorkingDirectory>C:\Administration\Scripts</q2:WorkingDirectory>
                                    </q2:Exec>
                                </q2:Actions>
                            </q2:Task>
                        </q2:Properties>
                        <q2:Filters>
                            <q2:FilterFile bool="AND" not="0" path="C:\Windows\System32\dns.exe" type="EXISTS" folder="0" />
                        </q2:Filters>
                    </q2:TaskV2>
                    <q2:TaskV2 clsid="{D8896631-B747-47a7-84A6-C155337F3BC8}" name="Convert-DNSDebugLogs" image="1" changed="2026-01-24 13:33:49" uid="{303887AC-E00C-43CE-B3DA-F6C538A92E3E}" userContext="0" removePolicy="1">
                        <q2:GPOSettingOrder>2</q2:GPOSettingOrder>
                        <q2:Properties action="R" name="Convert-DNSDebugLogs" runAs="System" logonType="InteractiveToken">
                            <q2:Task version="1.3">
                                <q2:RegistrationInfo>
                                    <q2:Author>Andi Bellstedt</q2:Author>
                                    <q2:Description />
                                </q2:RegistrationInfo>
                                <q2:Triggers>
                                    <q2:CalendarTrigger>
                                        <q2:Enabled>true</q2:Enabled>
                                        <q2:StartBoundary>2026-01-01T00:30:00</q2:StartBoundary>
                                        <q2:ScheduleByDay>
                                            <q2:DaysInterval>1</q2:DaysInterval>
                                        </q2:ScheduleByDay>
                                    </q2:CalendarTrigger>
                                </q2:Triggers>
                                <q2:Settings>
                                    <q2:AllowStartOnDemand>true</q2:AllowStartOnDemand>
                                    <q2:DisallowStartIfOnBatteries>false</q2:DisallowStartIfOnBatteries>
                                    <q2:StopIfGoingOnBatteries>true</q2:StopIfGoingOnBatteries>
                                    <q2:AllowHardTerminate>true</q2:AllowHardTerminate>
                                    <q2:Enabled>true</q2:Enabled>
                                    <q2:Hidden>false</q2:Hidden>
                                    <q2:MultipleInstancesPolicy>IgnoreNew</q2:MultipleInstancesPolicy>
                                    <q2:Priority>7</q2:Priority>
                                    <q2:ExecutionTimeLimit>P3D</q2:ExecutionTimeLimit>
                                    <q2:IdleSettings>
                                        <q2:Duration>PT10M</q2:Duration>
                                        <q2:WaitTimeout>PT1H</q2:WaitTimeout>
                                        <q2:StopOnIdleEnd>true</q2:StopOnIdleEnd>
                                        <q2:RestartOnIdle>false</q2:RestartOnIdle>
                                    </q2:IdleSettings>
                                </q2:Settings>
                                <q2:Principals>
                                    <q2:Principal id="Author">
                                        <q2:UserId>System</q2:UserId>
                                        <q2:LogonType>InteractiveToken</q2:LogonType>
                                        <q2:RunLevel>HighestAvailable</q2:RunLevel>
                                    </q2:Principal>
                                </q2:Principals>
                                <q2:Actions>
                                    <q2:Exec>
                                        <q2:Command>C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe</q2:Command>
                                        <q2:Arguments>-NoProfile -ExecutionPolicy RemoteSigned -Command "&amp; { $Error.clear(); Get-ChildItem .\*.log | Sort-Object lastwritetime, Name -Descending | Select-Object -Skip 1 | Convert-DNSDebugLogFile -ComputerName $env:COMPUTERNAME -Delimiter ';' -OutputType 'Both' -ContextFilter Packet -OutputCulture sv-SE -CompressOutput; if ($Error.Count -gt 0) { throw 1, 'Task executed with errors!' }}"</q2:Arguments>
                                        <q2:WorkingDirectory>C:\Administration\Logs\DNSServer</q2:WorkingDirectory>
                                    </q2:Exec>
                                </q2:Actions>
                            </q2:Task>
                        </q2:Properties>
                        <q2:Filters>
                            <q2:FilterFile bool="AND" not="0" path="C:\Windows\System32\dns.exe" type="EXISTS" folder="0" />
                        </q2:Filters>
                    </q2:TaskV2>
                </q2:ScheduledTasks>
            </Extension>
            <Name>Scheduled Tasks</Name>
        </ExtensionData>
    </Computer>
    <User>
        <VersionDirectory>0</VersionDirectory>
        <VersionSysvol>0</VersionSysvol>
        <Enabled>false</Enabled>
    </User>
    <LinksTo>
        <SOMName>Domain Controllers</SOMName>
        <SOMPath>corp.company.com/Domain Controllers</SOMPath>
        <Enabled>true</Enabled>
        <NoOverride>false</NoOverride>
    </LinksTo>
</GPO>