I've had some Active Directory troubles lately was was wondering what checks I could do on a regular basis I could do to ensure everything is working optimally?
At a smaller company I worked for in the past we used this. It is a script that compares PASS/FAILS, certainly not a bad tool to try out. Interested to see what others have used.
To give you some ideas on what can be tested, here are some of the automated checks we perform daily.
Active Directory relies heavily on DNS, So Start With some DNS checks.
NSLOOKUP hostname This test that DNS is able to resolve a host name to an IP address
DCDIAG /TEST:DNS This will check that DNS and Active Directory are working properly.
NETDIAG /TEST:DNS More DNS testing
Once you are satisfied that DNS is running correctly here are sime more tests
REPADMIN /SHOWREPS This will show you the last time that replication occurred with the replication partners
REPADMIN /REPLSUM /ERRORSONLY This displays any replication errors between domain controllers.
DCDIAG /Q The king of AD diagnostic tools. Tests and reports all AD components.
NETDIAG Tests all
Recently saw that Microsoft released a interesting new replication status tool which seems pretty neat. More of a gui mutli server replication status check. This would certainly be one step in any AD health check:
protected by sysadmin1138♦ Nov 5 '15 at 17:12
Thank you for your interest in this question.
Because it has attracted low-quality or spam answers that had to be removed, posting an answer now requires 10 reputation on this site (the association bonus does not count).
Would you like to answer one of these unanswered questions instead?