My network has all 2008R2 domain controllers, but we are running Active Directory in Windows 2003 mode.
Two of our domain controllers are configured as WINS servers.
I have discovered that our copiers and fax machines are currently configured to use WINS to find their servers, so I'm in the process of configuring them to use DNS instead.
How can I find out what else is actively using WINS?
What procedure should I follow to decommission WINS from my network?
In my experience copiers, fax machines, "file server" appliances, and other embedded systems are usually the last hold-outs for WINS -- If all of your workstations are joined to the domain you can probably count them as safe (beware of badly-written legacy applications though).
When you have found and killed all the things you can think of it's time to check your perfmon counters for WINS queries -- theoretically there should be zero new WINS queries at that point. If you're seeing queries still the only way I know of to track them down is a packet sniffer (I don't believe there's a way to log who's making WINS queries).
For a small number of residual queries the usual (and more efficient) way of dealing with it is to tell everyone "On this date at this time WINS will be decommissioned", then pull the plug and see what breaks. If you did a good job locating and reconfiguring stuff leading up to the deactivation date you usually only have a few minor things to fix.
(If something major breaks obviously you should be ready to turn WINS back on until you can fix it!)
