Set of Tools for AD Health Check

The following list  of tools and scripts could be in use if you need to do an Active Directory (AD) Health Check, or if you simply would like to know more about your network infrastructure.

Of course, this is not a full list, but I think this is a most important and … Feel free to send me an email or put a comment if you know addition tool or script.

Tool Purpose Installation Source Output Details
Active Directory Topology Diagrammer Map out current AD topology, including domains, sites and OUs Microsoft Downloads Three Visio files Requires Visio to be installed on the scanning computer.
Microsoft IT Environment Health Scanner General health status of AD Microsoft Downloads HTML report Running scan requires server subnets and internal firewall  IP address
DNSLINT Assess AD-integrated DNS Windows Server Support Tools HTML report Dnslint /ad /s [ip address of DC]
DCDIAG Diagnose domain controller health Windows Server Support Tools Text file dcdiag /v /c /d /e / > c:\dcdiag.log
NETDIAG Diagnose problems with network services Windows Server Support Tools Text file netdiag.exe /v > c:\netdiag.log
REPADMIN Examine site replication links Windows Server Support Tools Text file repadmin.exe /showrepl [dc name] /verbose /all /intersite > c:\repl.txt (run separately for each DC)


Not a tool but from Microsoft is the Security Compliance Manager helps to document and harden DCs by applying GPOs:

Written by Misha Hanin

Trusted Business & Technology Advisor, Solutions Managing Director & Senior Solutions Architect at iRangers International Inc. with more than 25 years of experience in the field of information technology, infrastructure analysis and design, implementing innovative and leading technologies for International companies around the globe in public and private sectors.

Over the years I was able to develop very strong technical and engineering skills which helped me to earn trusted advisor status with our clients. As one of the nearly 500 trained Microsoft Certified Masters (MCM) in The World (during 10 years existence of MCM program, just about 500 people in The World participated in this very intensive training), I have a winning track record in building and bringing projects to operational and measurable success.

I am honored to have been awarded Microsoft Most Valuable Professional (MVP). This award is given to "exceptional, independent community leaders who share their passion, technical expertise, and real-world knowledge of Microsoft products with others."