Windows Server 2003 Active Directory Audit

HI, one of my client running 3 DCs have a user network of about 400. All of a suddenly all users started reporting an error message while logging in. So before I go their start troubleshooting I wanted to know few things which are his user’s requirements. Such as:

• They want an effective method to configure Active Directory and take backup and restoration
• They want fine tuning and DNS settings at the same.
• They need to configure multiple domains such as child domain, Domain in a different forest etc...
• They need to know how they can check the settings of existing domain controller
• I need to know how can I check if DNS server is configured and working properly.

Now apart from these questions I am going to use repadmin.exe and directory service MPS report to check the health of Active Directory. SO I would like to know if there is any another free toll which can be best alternative for the same?

I have created a batch file to run Diagnostics against AD. The Steps in a batch file below starts notepad and the log file after each so as they complete the results pop up automatically. Before running the same you can simply install the support tools using your server install disk which should be like this: d:\support\tools\setup.exe.

Other than this, you should also run Run dcdiag, netdiag and repadmin in verbose mode.

• DCDIAG /V /C /D /E /s:yourdcname > c:\dcdiag.log
• netdiag.exe /v > c:\netdiag.log (On each dc)
• repadmin.exe /showrepl dc* /verbose /all /intersite > c:\repl.txt
• dnslint /ad /s "ip address of your dc"

Download the freeware version of NetWrix Logon Reporter. That’s what we use to analyze logon events, it works well and should get the job done for you.