LuiLui77
asked on
How to properly verify Domain Controller functionality?
Hello All,
I am creating a check list to verify replication and functionality on my domain controllers.
What could be the items that I can quickly check on a daily basis that will verify optimal functionality and replication amongst my domain controllers?
My Domain controllers are Windows 2008 R2.
I am creating a check list to verify replication and functionality on my domain controllers.
What could be the items that I can quickly check on a daily basis that will verify optimal functionality and replication amongst my domain controllers?
My Domain controllers are Windows 2008 R2.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Cool, what could be harmful event id's in the event log on a domain controller?
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Include * in repadmin command
Open out.txt and search for words failed, error or invalid
or you can use this parser
http://blog.ittelligence.com/wp-content/uploads/2017/07/ShowReplParser.zip
Repadmin /showrepl * > out.txtOpen out.txt and search for words failed, error or invalid
or you can use this parser
http://blog.ittelligence.com/wp-content/uploads/2017/07/ShowReplParser.zip
You can use this below PowerShell script:
https://gallery.technet.microsoft.com/scriptcenter/Active-Directory-Health-709336cd
https://gallery.technet.microsoft.com/scriptcenter/AD-Health-Check-Script-84f4c758
http://www.wolffhaven45.com/blog/powershell/automate-some-active-directory-health-checks-via-powershell/
it will send out the regular email when you run it as Scheduled task.
https://gallery.technet.microsoft.com/scriptcenter/Active-Directory-Health-709336cd
https://gallery.technet.microsoft.com/scriptcenter/AD-Health-Check-Script-84f4c758
http://www.wolffhaven45.com/blog/powershell/automate-some-active-directory-health-checks-via-powershell/
it will send out the regular email when you run it as Scheduled task.
ASKER
Thank you everyone!
DCDIAG is not something I'd run daily, though you could - it won't hurt anything. REPADMIN /SHOWREPL is VERY basic and just confirms replication is working but it's not going to alert you to a host of things that could be happening - which is what the event log will do.