Setting up Active Directory (AD) is quite simple. However, once the AD is up and running, you need to periodically review it to keep it functioning smoothly. Since AD allows you to manage your objects, servers, shared files, and other resources in the network, it is imperative to keep it glitch-free. A health check will analyze your AD to discover any potential flaws that could adversely affect your security posture.
Here are some ways to analyze the health of your AD:
Review the status of the replication, including the percentage of replication attempts that have failed, the replication partner as well as the status even for a specific domain controller, in a report.
repadmin /replsummary
Force replications, ie. if a specific domain controller needs to be synced with other DCs, and identify if the sync was successful or not.
repadmin /syncall /Aped
Find the last time your domain controllers were backed up
Repadmin /showbackup
Get a list of all the Domain Controllers in Active Directory
DSQUERY Server -o rdn
Analyze the state of domain controllers in a forest or enterprise. You can analyze a single DC or all DCs in a forest and report any problems to help in troubleshooting
DCDiag
Using ADManager Plus, you can get information on all the servers, domain controllers, and workstations in the form of pre-packaged reports. Apart from that, you can manage your Active Directory objects, file servers, and their permissions granularly.
For AD User Management
For AD User Reporting
For GPO Management
For Password Management
For AD Group Management
For File Access Management
For AD Computer Management
For Office 365 Management
For Exchange Management