Domain Controller Health Checklist

Review connection status between domain controllers.

Domain controller health checklist. Adminprep is not up right now so i ll post the health check stuff here. Be sure to check the examples section below and i ll show you the output of a normal domain controller and one that has issues. It is also used to diagnose dns servers ad replication and other critical domain services within your active directory infrastructure. You can use it for a variety of tasks including but not limited to checking the health of your domain controllers and testing dns.

I get asked over and over about what i do when i m performing a health check on a domain controller. Dcdiag is an important tool an any active directory administrators toolbox. The dcdiag tool is a microsoft command line utility that can be used to check the health of active directory domain controllers. Replication health review directory replication convergence ntfrs replication dfsr sysvol replication 7.

Domain controller antivirus patching and backup recovery practices. I ll also show you how to use dcdiag to test dns. If the organization has a monitoring system review the reports and latest events about domain controllers ad ds roles replication health and dns services. In this tutorial i ll show you how to use the dcdiag command line utility to perform a domain controller health check.

If the commands are unrecognized install windows support tools. Preparing this checklist is time consuming but considering the criticality of domain controller it is worth spending time on this. Active directory health checklist. I would love for you to come back here and let me know what else you do when you do health checks on domain controllers.

How we can do the group policy health check on specific domain controller. 3 verify that approved password policy is being enforced. The following is the active directory health checklist. 2 run microsoft s domain controller diagnostics from a command prompt run dcdiag exe on dc only.

As part of an active directory assessment and health check tallan will review and provide a documented report on the following. 4 review the domain controller disk space reports. The checklist also takes care of the ad integrated dns server which is very common in most of the ad oriented environment. In this article i m going to show you how to use dcdiag to do a domain controller health check as well as using dcdiag to test dns.

Secure domain controller settings don t get overwhelmed by the number of domain controller settings and group policy options.