Active Directory Health Checks
We plan on having an outside company come in and do a AD/Exchange health check before we work on our domain migration project. This article will give me a head start on all of this.
Health Checks on Domain Controllers
I get asked over and over about what I do when I’m performing a health check on a domain controller. Below you will see some of the commands that I use when I need to ensure my domain controllers are still healthy after some sort of change…like patching.
The Event Viewer is always a must. I look at all the logs before and after the update to the domain controller looking for abnormal events. With the pre-check I usually go back a month of logs to get more historical data. I then run through a couple command line utilities. One thing I always do is pipe my commands out to a text document. This just makes it easier for me to read and also search for failed events.
Dcdiag.exe /v >> c:\temp\pre_dcdiag.txt
This is a must and will always tell you if there is trouble with your DCs and/or services associated with it
Your Source for Free Online IT Articles and Elearning
One thought on “Active Directory Health Checks”
Leave a Reply Cancel reply
This site uses Akismet to reduce spam. Learn how your comment data is processed.
More Stories
How to configuration SMB3 and encryption
We have not enforced SMB3 and encryption, but have now started a SOX review and need data copied between servers...
Windows and SQL editions comparison
Capturing data on the limits of both windows server and SQL based on the edition for quick reference. Comparison of...
Enable passwordless security key sign-in to on-premises resources by using Azure AD
As we transition to Azure AD computers and leave domain joined PCs behind. Most of our data and applications are...
windows update for business and intune
We are having issues with machines not patching even with the Intune policies set. I'm documenting different post I've found...
Enabled the Lock Screen for inactive users
Quick link from Twitter, don’t want to lose the link https://twitter.com/anoopmannur/status/1497256566206181376?s=21 https://www.anoopcnair.com/set-automatic-lock-screen-for-inactive-device-intune/
In our company we check active directory health with scriptlogic’s tool called spotlight on active directory http://www.scriptlogic.com/products/spotlight-on-active-directory
The tool can display the entire active directory site and replication infrastructure as an easy to understand graphical view.
In addition this solution includes comprehensive analysis tests for easy determining that core active directory proccesess are working properly.