Active Directory Health Check

Nutrilite product shot

Worlds Best Organic Multivitamins and Phyto Nutrients Available here

Active Directory – Health Check

Note : The following commands and script are to be run from a domain controller with enterprise / domain admin privileges. You may run the individual commands one by one or run the script. The script will run all the commands listed and generate a report

1. Replsummary operation quickly and concisely summarizes the replication state and relative health of a forest.

repadmin /replsummary

2. Synchronizes a specified domain controller with all replication partners, and reports if the sync was successful or not

repadmin /syncall /e

repadmin /syncall /Aped

A ( All partitions ) P ( Push ) E( Enterprise ) D ( Distinguished Name )

3. Forces the KCC on targeted domain controller(s) to immediately recalculate its inbound replication topology

repadmin /kcc *

4. Find the last time your DCs were backed up, by reading the DSASignature attribute from all servers

Repadmin /showbackup *

5. Output all replication summary information from all DCs

Repadmin /showrepl *

6. Displays inbound replication requests that the domain controller has to issue to become consistent with its source replication partners.

Repadmin / queue *

7. List all the Domain Controllers in Active Directory

DSQUERY Server -o rdn

8. Identifies domain controllers that are failing inbound replication or outbound replication, and summarizes the results in a report.

Repadmin /replsummary

9. Displays calls that have not yet been answered, made by the specified server to other servers

repadmin /showoutcalls *

10. List the Topology information of all the bridgehead servers

repadmin /bridgeheads * /verbose

11. Inter Site Topology Generator Report

repadmin /istg * /verbose

12. Displays a list of failed replication events detected by the Knowledge Consistency Checker (KCC).

repadmin /failcache *

13. Lists all domains trusted by a specified domain

Repadmin /showtrust *

14. Displays the replication features for, a directory partition on a domain controller.

repadmin /bind *

15. Dcdiag analyzes the state of domain controllers in a forest or enterprise and reports any problems to help in troubleshooting

dcdiag /c /e /v

16. AD Health Check Script

This script will run all the commands mentioned in this document and generate an output/log file

This script will work under the following conditions

·         DSQUERY.exe is present in C:\Windows\System32

·         Repadmin.exe is present in C:\Windows\System32

·         Dcdiag.exe is present in C:\Windows\System32

(In case of Windows Server 2003 Dcdiag and Repadmin are not installed by default, Administrator has to install Support tools for Windows Server 2003 for the script to work)

Windows Server 2003 Sp1 Support tools

http://www.microsoft.com/en-us/download/details.aspx?id=7911

Windows Server 2003 Sp2 Support tools

http://www.microsoft.com/en-us/download/details.aspx?id=15326

·         Read and Write permissions present on C: Drive, this is required as the report is written to    the root of the C drive. Administrator can change the script to flush the output to a different drive

·         The script should be run under the Enterprise admin / Domain Admin Login

·         ADHealth.bat — > AD Health Check Script Script (Mirror)

·         ADHealth.doc is a sample output/log that is generated by the script

============================================================================

How to Query Active Directory Objects
https://pdtechguru.wordpress.com/2012/10/15/how-to-query-active-directory-objects-3/

Active Directory Health Check
https://pdtechguru.wordpress.com/2012/10/04/active-directory-health-check/

Large Mailbox Items
https://pdtechguru.wordpress.com/2012/10/02/large-mailbox-items/

Find Mail Box Size using PowerShell
https://pdtechguru.wordpress.com/2012/09/28/find-mail-box-size-using-powershell/

Google Chrome Home Page Group Policy
https://pdtechguru.wordpress.com/2012/09/25/google-chrome-group-policy/

How to hide users from GAL
https://pdtechguru.wordpress.com/2012/10/26/how-to-hide-users-from-gal/

Search for Room Mailbox
https://pdtechguru.wordpress.com/2012/10/26/search-for-room-mailbox/

How to Create a Distribution & Security Group using Exchange Management Shell
https://pdtechguru.wordpress.com/2012/10/25/how-to-create-a-distribution-security-group-using-Exchange-management-shell-2/

Find Distribution Group Managed By and SMTP Address
https://pdtechguru.wordpress.com/2012/10/23/find-distribution-group-managed-by-and-smtp-address/

How to Find Duplicate Proxy Address
https://pdtechguru.wordpress.com/2012/10/30/how-to-find-duplicate-proxy-address/

Nutrilite product shot

Worlds Best Organic Multivitamins and Phyto Nutrients Available here

About these ads

24 thoughts on “Active Directory Health Check

  1. Pingback: How to Query Active Directory Objects | pdtechguru

  2. Pingback: Large Mailbox Items | pdtechguru

  3. Zara Tretyakova

    I have to say, while looking through hundreds of blogs daily, the theme of this blog is different (for all the proper reasons). If you do not mind me asking, what’s the name of this theme or would it be a especially designed affair? It’s significantly better compared to the themes I use for some of my blogs.

    Reply
  4. Pingback: How to Create a Distribution & Security Group using Exchange Management Shell | pdtechguru

  5. Pingback: Find Distribution Group Managed By and SMTP Address | pdtechguru

  6. Pingback: Google Chrome Home Page Group Policy | pdtechguru

  7. stretch mark disease

    It’s really a nice and helpful piece of information. I am satisfied that you shared this useful info with us. Please stay us up to date like this. Thanks for sharing.

    Reply
  8. Pingback: Find Mail Box Size using Powershell | pdtechguru

  9. Pingback: Ryan Hanisco - AD Health Check (Server 2003/ SBS 2003)

  10. Pingback: Active Directory Health Check « Rui Abel Blog

  11. Pingback: Active Directory Health Check | Yogesh(Yogi)

  12. Vimax Detox Review

    hey there and thank you for your info – I have definitely picked
    up anything new from right here. I did however expertise a few technical points using this site, as
    I experienced to reload the site a lot of times previous
    to I could get it to load properly. I had been wondering if your hosting is OK?
    Not that I’m complaining, but slow loading instances times will sometimes affect your placement in google and can damage your high-quality score if advertising and marketing with Adwords. Well I’m adding this
    RSS to my email and could look out for a lot more of your respective interesting content.
    Make sure you update this again very soon.

    Reply
  13. Harriet

    Preciosa Página. Continua este fantástico trabajo.
    Presenta un punto de vista muy bueno sobre el tema y los mensajes son muy acertados.
    Simplemente señalar que estoy feliz por haber tropezado con esta Página web
    Tienes el mejor sitio sobre el tema.
    Muchas gracias ;-)

    Reply
  14. Pingback: AD Health Check (Server 2003/ SBS 2003) - Ryan Hanisco

  15. Tom

    Great stuff – really helpful excelent. when are you putting something more on AD health. and would like to hear your views on Best Practices on AD replication – I am facing several replication issues and AD is becoming a mess.

    Reply
  16. MIchael

    Thank you! You just saved me from doing a lot of work. The following is only to bring to your attention: I am unaware for any other OS but the following needs to be changed: 6. Displays inbound replication requests that the domain controller has to issue to become consistent with its source replication partners.

    Repadmin / queue *
    TO
    Repadmin /queue *

    Reply
  17. Carl Slaughter

    Thanks for this, there is a space between the / and the queue * (Repadmin / queue *) option that generates an error if you copy and past your command above. Remove the space and it works ;-)

    Reply

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s