Active Directory Health Checks for Domain Controllers

re: Active Directory Health Checks for Domain Controllers

BrianM — Wed, 22 Jul 2009 14:54:03 GMT

Hi Steve,

I totally agree with you on checking DNS as well. In fact 9 times out of 10 the problem always seems to be something misconfigured in DNS. I'm in the process of another revision to my health check blog and will ensure there is a portion that deals with DNS. Feel free to contact me if you have any suggestions.

Brian

re: Active Directory Health Checks for Domain Controllers

Steve Sabo — Wed, 22 Jul 2009 13:56:59 GMT

I've seen many of these posts regarding ADHC's, no one ever mentions an analysis of the DNS servers to insure they are properly placed and the primary and secondarys are correctly set to resolve to each other, DNSLINT is a good tool for this, especially in child domain environments. A full site to site analysis should be performed as well to make sure sites are contacting the nearest DC. Also I utilize the AD topology mapping tool from Microsoft for a visual map I give my clients. I also run the Microsoft Baseline Security Analyzer and RSOP's for Group policy verification.

I wrote a vb script that reaches out to all the DC's and dumps the tool reports in a common folder, makes it alot easier and it can be run via task scheduler at night.

Hope this helps.

DIY Health Check for Domain Controllers | geekEleet

DIY Health Check for Domain Controllers | geekEleet — Wed, 31 Dec 2008 02:10:43 GMT

Pingback from DIY Health Check for Domain Controllers | geekEleet

re: Active Directory Health Checks for Domain Controllers

BrianM — Fri, 26 Sep 2008 22:29:33 GMT

The command line tools are from the support tools but known have a GUI. Microsoft has Replmon but I don't think it is supported any more. I like the scripts because they run fast and once you know what to look for it really speeds things up.

re: Active Directory Health Checks for Domain Controllers

Ranj — Fri, 26 Sep 2008 19:52:01 GMT

Any tools on the support tools with server 2003 available. prefer graphical.,

re: Active Directory Health Checks for Domain Controllers

Marcos Chacon — Thu, 14 Aug 2008 15:43:17 GMT

There is a tool called spotlight on active directory a part of scriptlogic's active directory management solution.

www.scriptlogic.com/.../spotlight-on-active-directory

From my personal experience it's definitely the best and the most visual way for real-time monitoring and diagnostic of active directory perfomance and state. This tool also inludes built-in analysis tests that can track any possible issues on initial stage before they can seriously harm your environment.

re: Active Directory Health Checks for Domain Controllers

Aaron — Thu, 31 Jul 2008 20:35:06 GMT

Just thought you might want to edit your dcdiag instead of using the > redirection you can use /f:(filename) to log to a file as well you get the added benefit of using /ferr:(filename) to log only the errors.

Microsoft: Health Checks on Domain Controllers « ICT-Freak

Microsoft: Health Checks on Domain Controllers « ICT-Freak — Wed, 04 Jun 2008 10:56:07 GMT

Pingback from Microsoft: Health Checks on Domain Controllers « ICT-Freak

re: Active Directory Health Checks for Domain Controllers

Norm — Wed, 04 Jun 2008 03:15:10 GMT

This is exactly the kind of information that admins want. Clear and concise, it makes being a server admin that much easier! Thanks Brian!