Date: 27th March 2013 Topic: Is your AD Healthy today? Speaker: Chen Fui Lam (Microsoft PFE) Session Synopsis: Is your Active Directory healthy today? Active Directory forms the backbone of your IT infrastructure. A healthy and optimized Active Directory is cruical to the smooth and efficient operations of your enterprise. Topic discussed: 1. AD Health Monitoring 2. Command and Tools Below are the command lines used during the session; Repadmin /viewlist * Repadmin /showrepl Repadmin /showrepl * /csv Repadmin /replsummary Repadmin /experthelp =========================================================== Nltest /dsgetdc:contoso Nltest /dsgetsite Nltest /dclist:contoso Nltest /domain_trusts #### domain.msc to show the trusts =========================================================== Get-Command -Module ActiveDirectory (Get-Command -Module ActiveDirectory).count Get-ADForest Get-ADDomain Get-ADDomainController -filter * Get-ADDefaultDomainPasswordPolicy #### same time run net accounts on cmd Get-ADObject -Identity “cn=domain admins,cn=users,dc=contoso,dc=com” -server “dc2-2012-f.contoso.com” Get-ADReplicationConnection -filter * #### open dssite.msc, show the CO DN Get-ADReplicationFailure -Target “contoso.com” -Scope Forest #### scope can be set to domain as well Get-ADReplicationFailure dc2-2012-f Get-ADReplicationSite -Filter * | ft name,objectclass Get-ADDomainController -filter * | ft hostname,site Get-ADReplicationUpToDatenessVectorTable * | sort partner,server | ft partner,server,usnfilter Get-ADReplicationAttributeMetadata -object “cn=domain admins,cn=users,dc=contoso,dc=com” -server dc2-2012-f.contoso.com -showalllinkedvalues | format-list #### Repadmin /showobjmeta dc2-2012-f.contoso.com “cn=domain admins,cn=users,dc=contoso,dc=com” Get-BpaModel #### To list installed BPA on the machine Invoke-BpaModel Get-BpaResult ============================================================================ Sonar.exe ntfrsutl.exe FRSDiag DFSRDiag ============================================================================ Ping Nslookup DNSLint /ad 10.0.0.101 s/10.0.0.102 DNSCMD /info DNSCMD /ZoneInfo contoso.com DNSCMD /zoneprint contoso.com DNSCMD /statistics DCDiag /s:dc1-2008r2-c /test:dns /v Get-DnsServerSetting Get-DnsServer -ComputerName “dc1-2008r2-c” Get-DnsServer -ComputerName “dc2-2012-f” #### highlight the scavenging & zone info Get-DnsServerResourceRecord -ZoneName “contoso.com” -RRType “SRV” Get-DnsServerResourceRecord -ZoneName “contoso.com” -RRType “NS” Get-DnsServerResourceRecord -ZoneName “contoso.com” -RRType “A” Get-DnsServerResourceRecord -ZoneName “_msdcs.contoso.com” -RRType “CName” Test-DnsServer -IPAddress “10.0.0.101” -ZoneName “contoso.com” Get-BpaModel #### To list installed BPA on the machine Invoke-BpaModel Get-BpaResult ========================================================================= DCDiag /s:dc1-2008r2-c w32tm /monitor w32tm /stripchart /computer:dc2-2012-f w32tm /resync w32tm /unregister mbsacli /target dc1-2008r2-c ==========================================================================