Is there a way to run a health check on an AD Domain?

[Craig Householder]

Novell has dsrepair and has a documented way to run a health check on NDS.
Is there anything similar for AD?

We were recently hit by a virus that repeatedly crashed our network and
caused numerous errors in NDS. Since the virus we have seen phantom
problems with workstations and servers that cannot connect to the domain and
give a "cannot connect from this station". Deleting the AD object and
waiting 15 minutes and then rejoining the domain works but I'd prefer not to
have to do this.

Thanks

 

[Simon Geary]

You can use the Microsoft Operations Manger server with the AD pack to
monitor Active Directory health.
www.microsoft.com/mom

 

[Matjaz Ladava [MVP]]

dcdiag is a tool that generates a report on the state of your DC

--
Regards

Matjaz Ladava, MCSE, MCSA, MCT, MVP
Microsoft MVP - Active Directory
(e-mail address removed), (e-mail address removed)
http://ladava.com

 

[Craig Householder]

Yeah, I realize DCDiag will do that. I guess I was looking for something
that will "fix" the database similar to what DSRepair does. Is MoM able to
do anything in this regard or is it just a monitor?

Thanks,

 

[Matjaz Ladava [MVP]]

you can verify the state of AD database, by booting your DC in DSRM mode and
use ntdsutil ->files option -->... to verify actual AD DB.

--
Regards

Matjaz Ladava, MCSE, MCSA, MCT, MVP
Microsoft MVP - Active Directory
(e-mail address removed), (e-mail address removed)
http://ladava.com