Thursday, February 11, 2010

Domain Controller Health Check

Domain Controller Health Check
DCDiag -- Basic Domain Diagnostics
NetDiag -- Domain Controller Network Diagnostics
REPLMon -- Replication Monitor
NETDom -- Domain and Trust Diagnostics

A number of people have requested that these steps be posted in HTML format as they don't have Microsoft Project or can't open the file with their version of the software. To make this a little bit easier for everyone, here we go:
Domain Controller Health Check
Preparatory Work
Update Server Documentation
Gather Inventory of domain controllers from the ADU&C | Domain Controllers node
Locate current documentation from client on AD structure
Locate current documentation from client of site/ core topology
Document name of every AD domain and Sub-domain
Document name and IP address of every Server
Document all trust relationships
Install Support Tools
Server
Log on to the server with Server Administrator privileges
Insert the windows 2000/2003 disk into the CD drive
Navigate to CD:\\tools\Support Tools
Run Setup.exe
Wait as the Support Tools are installed on the server
Preparatory Work Completed
Verify Health of the Domain
Create Log Directories for all Diagnostic Files
Create a Logs Directory at the root of C:\ on the server as C:\Logs
Verify DNS function with NSLOOKUP
Drop to a Command Prompt
At the Command Prompt, key in 'Nslookup'
Resolve each replication partner
Resolve every AD domain and Sub-domain
Remediate any failed resolutions
Verify replication function and topology with REPLMON

Navigate to Start | Programs | Administrative Tools | Support Tools | Replmon
Select the server () in the Monitored Servers
Select Action | Server | Generate Status Report
When Prompted, specify the file name as c:\Logs\-MMDDYYYY.log
in the Report Options, select all of the reporting options
Click OK
Verify DC health with DCDIAG /verbose on each domain controller

Drop to a Command Prompt
Key in 'DCDIAG /s: /v /c > c:\Logs\ServerName-DCDIAG-MMDDYYYY.log'
Wait as the Diagnostic completes
Remediate any errors displayed
Run DCDIAG /s: /fix
Repeat the diagnostic
Verify network connectivity health with NETDIAG /verbose

Drop to a Command Prompt
NETDIAG /v > C:\Logs\-NetDiag-MMDDYYYY.txt
Wait as the diagnostic completes
Remediate any errors displayed
Run Netdiag /fix
Run the NETDIAG diagnostic again
Verify all trusts with NETDOM

Drop to a Command Prompt
At the Command Prompt, key in 'NetDom query /verify'
Verify that all trusts are working and responding to the stored passwords
Remediate all errors before continuing
Repeat for each additional Controller

No comments:

Post a Comment