?
Solved

AD Health Checkup

Posted on 2009-05-13
7
Medium Priority
?
518 Views
Last Modified: 2012-05-06
HI all,
i want to prepare one checklist with the basic tests for DC's.. i want to check on regular basis..  i have one root doamin and 7 child domains.... pls let me know the parameters like, which will be really helpful for me.

1.DCDIAG
2.NETDIAG
3.Event logs review
4.Replication check
5.Disk Space
6.AD Database Account Errors
0
Comment
Question by:gokulakrishnanns
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 3
7 Comments
 
LVL 21

Expert Comment

by:snusgubben
ID: 24382675
1. dcdiag /v /e /c /f:logfile.txt
2. netdiag /v
3. EventCombMT (a MS tool to collect events from ie. all DC's)
4. repadmin /showreps
5. ie. http://www.microsoft.com/technet/scriptcenter/scripts/storage/disks/drives/stdvvb10.mspx?mfr=true (strComputer = "." means the host the script is running on. Change it to something like strComputer = "dc1.domain.local" to test on remote hosts)
6. see pt.3
0
 

Author Comment

by:gokulakrishnanns
ID: 24383067
Hi snusgubben,

Thanks for your reply and comments... if i will get the below information is useful for me

1.Frequenncy of checking above list ( Daily, weekly, monthly)?
2.is it possible we can automate them..?
3.apart from this any items cab be added like AD database check, DC load check etc..?
3.i have tested teh EventCombMT whish is good , but we have to manullay check

Ex:- Event 1008 is for KCC failed to initialize. i want to trigger mail alert to the Adadmin... how i can do that without any application... or specfically any application avaliable for DC's health monittor..?
0
 
LVL 21

Expert Comment

by:snusgubben
ID: 24383207
1. How often you like to run the check is not easy for me to say. If your domain was build on 2003 with no SP or earlier the the default tombstone lifetime is 60 days in your domain. Thus you should check the health atleast once a mounth. If your uptime demands are strict then you should do it often...

2. You can put the test you like in a script and put the script in a scheduled task.

3. EventCombMT is manuell. Again scripts that collects events from event logs is possible, but alot of work and you will not be able to trust that it grabs all important events!

4. I don't know any way to trigger an event without use of SNMP traps (read: 3.party tools).
0
VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

 

Author Comment

by:gokulakrishnanns
ID: 24383962
Hi snusgubben,
i n my network Dc;'s ae with 2003, Sp1. so i'll check on monthly basis.. how do i verify DNS (name resolution is good?), FSMO roles avalaiablity, Group policy and Trusts...?

All i need is periodically ( mOnthly) i have to check the the above and i give reports to my management...
0
 
LVL 21

Expert Comment

by:snusgubben
ID: 24385177
FSMO, Trust (if I remember correctly) and DNS is tested with dcdiag. You could do a "dcdiag /test:dns /v" as an alternative.

Group Policy errors is logged in the event log.

SG

0
 
LVL 1

Accepted Solution

by:
maxarg earned 150 total points
ID: 24385872
Hey there.

http://www.4shared.com/account/file/105325058/2980367f/ADHCWeb_Tools.html

Download the app there. It's a complete solution to perform a AD Health Check. The results are displayed  in a web page.

Regards.
0
 

Author Comment

by:gokulakrishnanns
ID: 24392692
Hi maxarg,

Thanks a lot............ will test the same and update you
0

Featured Post

Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Group policies can be applied selectively to specific devices with the help of groups. Utilising this, it is possible to phase-in group policies, over a period of time, by randomly adding non-members user or computers at a set interval, to a group f…
Let's recap what we learned from yesterday's Skyport Systems webinar.
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…
Suggested Courses

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question