AD integrity checks

  • Thread starter Thread starter Wilbur Smith
  • Start date Start date
W

Wilbur Smith

Hi,
How/what tools/guidelines/documentation can I use to
verify the integrity of AD schema. Also, same question for
Exchange 2000.
Thanks
Wilbur Smith
 
You would want to do an integrity check of AD by booting into DS
restore mode and using NTDSUTIL (take a system state backup before you
do this). The integrity check runs against the DIT file, which
includes all 3 partitions, not just the schema.

The e2k equivalent is isinteg


Chris Malone
Microsoft Directory Services
 
Well, that checks overall semantics of the data model in the DIT, but it's
not clear to me what you're really looking to check for. That is, are you
catching the element you wish to check by virtue of a semantic database
analysis.

Wilbur, can you articulate a bit more what you are looking to catch in this
sort of a check? ntdsutil might catch what you want, but I'm not totally
sure what the end goal is, so it's hard to say for sure. Perhaps there is
another recommendation to be made depending upon your end goal.

Thanks!
~Eric
 
Hi,
Thanks for the information. What I am looking for is a
way to verify AD integrity for clients. These are
companys that I may only see once or twice a year. While
I am on site I would like to verify the AD. Also if a
specific client wants to know how his AD is, I can present
the results to them. I would also like to know what to do
if it is corrupt. The offical MS books do not really cover
this in much detail, other then to barely mention it (in
my opinion).
- Wilbur Smith
 
Back
Top