Date: 27th March 2013
Topic: Is your AD Healthy today?
Speaker: Chen Fui Lam (Microsoft PFE)
Session Synopsis:
Is your Active Directory healthy today? Active Directory forms the backbone of your IT infrastructure. A healthy and optimized Active Directory is cruical to the smooth and efficient operations of your enterprise.
Topic discussed:
1. AD Health Monitoring
2. Command and Tools
Below are the command lines used during the session;
Repadmin /viewlist *
Repadmin /showrepl
Repadmin /showrepl * /csv
Repadmin /replsummary
Repadmin /experthelp
===========================================================
Nltest /dsgetdc:contoso
Nltest /dsgetsite
Nltest /dclist:contoso
Nltest /domain_trusts #### domain.msc to show the trusts
===========================================================
Get-Command -Module ActiveDirectory
(Get-Command -Module ActiveDirectory).count
Get-ADForest
Get-ADDomain
Get-ADDomainController -filter *
Get-ADDefaultDomainPasswordPolicy #### same time run net accounts on cmd
Get-ADObject -Identity “cn=domain admins,cn=users,dc=contoso,dc=com” -server “dc2-2012-f.contoso.com”
Get-ADReplicationConnection -filter * #### open dssite.msc, show the CO DN
Get-ADReplicationFailure -Target “contoso.com” -Scope Forest #### scope can be set to domain as well
Get-ADReplicationFailure dc2-2012-f
Get-ADReplicationSite -Filter * | ft name,objectclass
Get-ADDomainController -filter * | ft hostname,site
Get-ADReplicationUpToDatenessVectorTable * | sort partner,server | ft partner,server,usnfilter
Get-ADReplicationAttributeMetadata -object “cn=domain admins,cn=users,dc=contoso,dc=com” -server dc2-2012-f.contoso.com -showalllinkedvalues | format-list
#### Repadmin /showobjmeta dc2-2012-f.contoso.com “cn=domain admins,cn=users,dc=contoso,dc=com”
Get-BpaModel #### To list installed BPA on the machine
Invoke-BpaModel
Get-BpaResult
============================================================================
Sonar.exe
ntfrsutl.exe
FRSDiag
DFSRDiag
============================================================================
Ping
Nslookup
DNSLint /ad 10.0.0.101 s/10.0.0.102
DNSCMD /info
DNSCMD /ZoneInfo contoso.com
DNSCMD /zoneprint contoso.com
DNSCMD /statistics
DCDiag /s:dc1-2008r2-c /test:dns /v
Get-DnsServerSetting
Get-DnsServer -ComputerName “dc1-2008r2-c”
Get-DnsServer -ComputerName “dc2-2012-f” #### highlight the scavenging & zone info
Get-DnsServerResourceRecord -ZoneName “contoso.com” -RRType “SRV”
Get-DnsServerResourceRecord -ZoneName “contoso.com” -RRType “NS”
Get-DnsServerResourceRecord -ZoneName “contoso.com” -RRType “A”
Get-DnsServerResourceRecord -ZoneName “_msdcs.contoso.com” -RRType “CName”
Test-DnsServer -IPAddress “10.0.0.101” -ZoneName “contoso.com”
Get-BpaModel #### To list installed BPA on the machine
Invoke-BpaModel
Get-BpaResult
=========================================================================
DCDiag /s:dc1-2008r2-c
w32tm /monitor
w32tm /stripchart /computer:dc2-2012-f
w32tm /resync
w32tm /unregister
mbsacli /target dc1-2008r2-c
==========================================================================
Follow