Shulou(Shulou.com)06/03 Report--

In the last article, I introduced the daily inspection operation of Exchange. We all know that Active Directory is the infrastructure of Microsoft and Exchange. It is impossible to build Exchange without Active Directory. Today, I would like to share with you the daily inspection of Active Directory. I hope it will be helpful to you.

Basic check server time check time is very important for domain control servers, so make sure that all domain control server times are the same

The PDC server recommends that you specify a specific time source

W32tm / query / source

Replication statu

I believe that everyone to check the replication status is to use the command check, today to recommend a Microsoft replication status check tool.

AdreplstatusInstaller: https://www.microsoft.com/en-us/download/details.aspx?id=30005

After the tool is installed, just click run:

After the run is completed, as shown in the following figure, there are replication status, errors and everything.

To get the domain control server list, you can use the following two commands to get the server list

Nltest / dclist: your domain name

Nltest / dnsgetdc: your domain name

DNS check check DNS status you can check using the following command

Dcdiag / test:dns

Event log check check application log

Check the system log

Check the Active Directory Web Services log

Check the DFS Replication log

Check the Directory Service log

Check the DNS log

Site replication check

Repadmin / bridgeheads * / verbose

Repadmin / istg * / verbose

Basic inspection

Dcdiag / c / e / v

The above command checks a lot of content, you can use > export to the txt file to check

Dcdiag / c / e / v > c:dcdiage.txt

It is also important to check the backup of the domain control server. You can check the backup status of the server using the following command

Repadmin / showbackup *

Topology check this tool is only available for Windows Server 2008R2 and previous versions, and will not be supported in later versions

ADTD.Net Setup: https://www.microsoft.com/en-us/download/details.aspx?id=13380

Account lock check frequently

If you lock your account, you can take a look at my other blog, which has a detailed description:

Https://blog.51cto.com/itsoul/2062819

Performance check

Server performance check is mainly about memory, CPU, disk and other information. You can read it one by one, or refer to a blog I forwarded before and use script to check:

Https://blog.51cto.com/itsoul/1739474

Group Policy check the number of logs not used by Group Policy to check if there are any errors reported by Group Policy. The log path is as follows:

Application and Service Log-Microsoft-Windows-GroupPolicy

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.