Windows Active Directory

From Dave-Wiki

Client Commands

List Applied GPO's

GUI: 

 rsop.msc

CLI: 

 gpresult /r /scope computer

or save it to an html file with /h: 

 gpresult /h c:\gpresult.html

Confirm DC is Reachable

 net view \\<DC name>

Domain Controller Admin

Show DC Replication Status

This also shows the DSA object GUID of all DC's. 

 repadmin /showrepl

Show replication state and relative health of a forest

 repadmin /replsummary

Sync Domain Controller with all Replication Partners

 repadmin /syncall /d /e

Domain Controller Diagnostics

Verify DNS Services for DC

 dcdiag /test:dns

Comprehensive, Run all tests, Verbose

 dcdiag /c /v

Force registration of all DC-specific DNS records

 nltest.exe /dsregdns

Check DC FSMO Roles

 netdom query FSMO

Using Linux BIND DNS Servers for Dynamic AD Updates

See ISC BIND.

Retrieved from "https://davehome.net/wiki/index.php?title=Windows_Active_Directory&oldid=412"