How to check AD database integrity?
Hello all,
Hope this post finds you in good health and spirit.
By running integrity check, we can identify binary level AD database corruption. This comes as part of the Ntdsutil tool which use for Active Directory database maintenance. This go through every byte of the database file. The integrity command also checks if correct headers exist in the database itself and if all of the tables are functioning and consistent. This process also run as part of Active Directory Service Restore Mode (DRSM).
- Start the server in Directory Services Restore Mode.
- Once you log on with the Directory Services Restore Mode Administrator account, open a command prompt.
- At the command prompt, type ntdsutil and press Enter.
- Type activate instance ntds and press Enter.
- From the ntdsutil: prompt, type files and press Enter.
- From the file maintenance: prompt, type integrity and press Enter.
As you can see in below diagram, the utility will perform the check against the database. If any errors are reported, contact Microsoft Product Support Services to determine how you should proceed.
In order to exit from the utility type, quit.it is also recommended to run Semantic database analysis to confirm the consistency of active directory database contents.
In order to do it,
semantic database analysis
If its detected any integrity issues can type go fixup to fix the errors.After process is completed, type net start ntds to start the ntds service.
So, that’s all in this blog. I will meet you soon with next stuff .Have a nice day !!!
Recommended content
RODC Installation Guide- Step by step guide to install read only domain controller
RODC Filtered Attribute Set
Installing and configuring a RODC in Windows Server-2012
How to find the GUID of Domain Controller
Group Policy Understanding Group Policy Preferences
Group Policy Verification Tool GPOTool Exe
Group Policy Health Check on Specific Domain Controller
What is Netlogon Folder in Active Directory
How to Create Custom Attributes in Active Directory
How Can I Check the Tombstone Lifetime of My Active Directory Forest
How to Determine a Computers AD Site From the Command Line
How to Check the Active Directory Database Integrity
If you have any questions feel free to contact us on admin@windowstechno.com also follow us on facebook@windowstechno to get updates about new blog posts.