Domain Controller Health Check

Active Directory or Domain Controllers are the most important part of your domain and organization. Hence they must remain healthy and work perfectly all the time. There are many parameters on which the health of the domain depends, either its services, replication, DNS, etc. Checking all those parameters takes a lot of time and if your domain contains a lot of domain controllers it becomes really difficult to check all the parameters or it takes a lot of time. 

Checking the Active Directory Health manually requires you to check the below things:

1. Make sure that all the Domain Controllers are replicating with each other.

To check the replication status of your Active Directory you need to run the repadmin /replsummary command which summarises the replication status of all the domain controllers in all the domains in your forest.

2. Make sure that all the dependency services are running fine.

You need to check the status of some critical services which are important for your active directory domain like ADDS Service, DFS Replication Service, DNS Server Service, Intersite Messaging Service, Netlogon Service, KDC Service, etc.

3. Use the Domain Controller Diagnostic Tool (DcDiag) to check some important aspects of the Domain.

DcDiag is an important tool for AD Administrators to check the various aspects of Active Directory like DNS. for a Domain to work to perform efficiently you need to make sure that your DNS resolution is happening perfectly. You can use this tool to the health of DNS by running the command dcdiag /test:DNS

By keeping the above time and effort taking steps in mind we at MagicPowershell comes up with an automated one-click script that will find all the DCs in your forest, run the health check on them and send an automated HTML script on completion to your email ID.

You need to modify a few parameters like SMTP server emails and run it to get the report in your inbox in a few minutes.