How You Active Directory Health Check troubleshooting


Dcdiag analyzes the state of domain controllers in a forest or enterprise and reports any problems to help in troubleshooting

dcdiag /c /e /v

Replsummary operation quickly and concisely summarizes the replication state

repadmin /replsummary

Synchronizes a specified domain controller with all replication

repadmin /syncall /e

repadmin /syncall /Aped

Forces the KCC on targeted domain controller

repadmin /kcc *

Find the last time your DC were backup

Repadmin /showbackup *

Output all replication summary information from all DC Server

Repadmin /showrepl *

Displays inbound replication requests that the domain controller

Repadmin /queue *

List the Domain Controllers in Active Directory

DSQUERY Server -o rdn

Identifies domain controllers that are failing inbound replication or outbound replication

Repadmin /replsummary

Displays calls that have not yet been answered

repadmin /showoutcalls *

List the Topology information

repadmin /bridgeheads * /verbose

Inter Site Topology Generator Report

repadmin /istg * /verbose

Displays a list of failed replication events detected by the Knowledge Consistency Checker (KCC)

repadmin /failcache *

Lists all domains trusted by a specified domain

Repadmin /showtrust *

Displays the replication features for, a directory partition on a domain controller

repadmin /bind *

DNS 

DCDiag /test:DNS /e /v >c:\dns.txt

dcdiag /test:RegisterInDns /DnsDomain:yshvili.local

dcdiag /test:dns /dnsrecordregistration /v

dcdiag /test:dns /dnsdynamicupdate /v

dcdiag /test:netlogons

dcdiag /v

Identifies domain controllers that are failing inbound replication or outbound replication, and summarizes the results in a report.

Repadmin /replsummary

repadmin /replsum * /bysrc /bydest /sort:delta

Displays inbound replication requests that the domain controller

Repadmin /Queue

Displays the replication status when the specified domain controller last attempted to perform inbound replication on Active Directory partitions.

Repadmin /Showrepl

repadmin /showrepl * /errorsonly

repadmin /showrepl site:Default-First-Site-Name DC=yshvili,dc=local

Repadmin /showbackup *

Copy The Script to Notepad and Save as bat file 

del c:\ADCheck.txt

echo ================================ >> c:\ADCheck.txt

echo My Site http://yshvili.com >> c:\ADCheck.txt

echo ================================ >> c:\ADCheck.txt

echo ================================ >> c:\ADCheck.txt

echo Domain Controllers In the Domain >> c:\ADCheck.txt

echo ================================ >> c:\ADCheck.txt

C:\Windows\System32\DSQUERY Server -o rdn >> c:\ADCheck.txt

echo ====================== >> c:\ADCheck.txt

echo DCDiag  test netlogons >> c:\ADCheck.txt

echo ====================== >> c:\ADCheck.txt

C:\Windows\System32\DCDiag.exe /test:netlogons >> c:\ADCheck.txt

echo ====================== >> c:\ADCheck.txt

echo DCDiag  DNS test>> c:\ADCheck.txt

echo ====================== >> c:\ADCheck.txt

C:\Windows\System32\DCDiag.exe /test:DNS /e /v >> c:\ADCheck.txt

echo ====================== >> c:\ADCheck.txt

echo Repadmin – Syncall – e >> c:\ADCheck.txt

echo ====================== >> c:\ADCheck.txt

C:\Windows\System32\repadmin.exe /syncall /e >> c:\ADCheck.txt

echo ====================== >> c:\ADCheck.txt

echo Repadmin – Syncall – a >> c:\ADCheck.txt

echo ====================== >> c:\ADCheck.txt

C:\Windows\System32\repadmin.exe /syncall /A >> c:\ADCheck.txt

echo ====================== >> c:\ADCheck.txt

echo Repadmin – Syncall – d >> c:\ADCheck.txt

echo ====================== >> c:\ADCheck.txt

C:\Windows\System32\repadmin.exe /syncall /d >> c:\ADCheck.txt

echo ====================== >> c:\ADCheck.txt

echo Repadmin – Replsummary >> c:\ADCheck.txt

echo ====================== >> c:\ADCheck.txt

C:\Windows\System32\repadmin.exe /replsummary * >> c:\ADCheck.txt

echo ============== >> c:\ADCheck.txt

echo Repadmin – KCC >> c:\ADCheck.txt

echo ============== >> c:\ADCheck.txt

C:\Windows\System32\repadmin.exe /kcc * >> c:\ADCheck.txt

echo ===================== >> c:\ADCheck.txt

echo Repadmin – showbackup >> c:\ADCheck.txt

echo ===================== >> c:\ADCheck.txt

C:\Windows\System32\repadmin.exe /showbackup * >> c:\ADCheck.txt

echo =================== >> c:\ADCheck.txt

echo Repadmin – Showrepl >> c:\ADCheck.txt

echo =================== >> c:\ADCheck.txt

C:\Windows\System32\repadmin.exe /showrepl *  >> c:\ADCheck.txt

echo ================ >> c:\ADCheck.txt

echo Repadmin – Queue >> c:\ADCheck.txt

echo ================ >> c:\ADCheck.txt

C:\Windows\System32\repadmin.exe /queue *  >> c:\ADCheck.txt

echo ====================== >> c:\ADCheck.txt

echo Repadmin – Bridgeheads >> c:\ADCheck.txt

echo ====================== >> c:\ADCheck.txt

C:\Windows\System32\repadmin.exe /bridgeheads * /verbose >> c:\ADCheck.txt

echo =============== >> c:\ADCheck.txt

echo Repadmin – ISTG >> c:\ADCheck.txt

echo =============== >> c:\ADCheck.txt

C:\Windows\System32\repadmin.exe /istg * /verbose >> c:\ADCheck.txt

echo ======================= >> c:\ADCheck.txt

echo Repadmin – Showoutcalls >> c:\ADCheck.txt

echo ======================= >> c:\ADCheck.txt

C:\Windows\System32\repadmin.exe /showoutcalls * >> c:\ADCheck.txt

echo ==================== >> c:\ADCheck.txt

echo Repadmin – Failcache >> c:\ADCheck.txt

echo ==================== >> c:\ADCheck.txt

C:\Windows\System32\repadmin.exe /failcache * >> c:\ADCheck.txt

echo ==================== >> c:\ADCheck.txt

echo Repadmin – Showtrust >> c:\ADCheck.txt

echo ==================== >> c:\ADCheck.txt

C:\Windows\System32\repadmin.exe /showtrust * >> c:\ADCheck.txt

echo =============== >> c:\ADCheck.txt

echo Repadmin – Bind >> c:\ADCheck.txt

echo =============== >> c:\ADCheck.txt

C:\Windows\System32\repadmin.exe /bind * >> c:\ADCheck.txt

echo ====== >> c:\ADCheck.txt

echo Dcdiag >> c:\ADCheck.txt

echo ====== >> c:\ADCheck.txt

C:\Windows\System32\dcdiag /c /e /v >> c:\ADCheck.txt

echo ====== >> c:\ADCheck.txt

echo yaniv >> c:\ADCheck.txt

echo ====== >> c:\ADCheck.txt

start c:\ADCheck.txt

https://gallery.technet.microsoft.com/Active-Directory-Health-e3271083

Export user specific attribute


Import-Csv C:\\Hindalco\Users.csv | foreach { Get-ADUser -Identity $_.samaccountname -Properties * } | Select SamAccountName, @{N=”Business”;E={$_.Business -join “,”}} , Company, ExtensionAttribute2, ExtensionAttribute3 | Export-Csv -NoTypeInformation C:\Hindalco\Gyanodayabackup.csv

Note:

Create Users.csv file in the below format:

Samaccountname
aarti.achhpillia

In this script using SAM account I have pull other attributes including multiple values.

ExtensionAttribute2,ExtensionAttribute3 is additional attributes check this values manually via attribute editor.

 

Checking Page File Location On Remote Computers

Recommended Pen Testing Tools


What’s a pen test?


Vulnerability Management vs. Penetration Testing


AD Audit scripts

%d bloggers like this: