AD-Database

How to check AD database integrity?

Hello all,

Hope this post finds you in good health and spirit.

By running integrity check, we can identify binary level AD database corruption. This comes as part of the Ntdsutil tool which use for Active Directory database maintenance. This go through every byte of the database file. The integrity command also checks if correct headers exist in the database itself and if all of the tables are functioning and consistent. This process also run as part of Active Directory Service Restore Mode (DRSM).

  • Start the server in Directory Services Restore Mode.
  • Once you log on with the Directory Services Restore Mode Administrator account, open a command prompt.
  • At the command prompt, type ntdsutil and press Enter.
  • Type activate instance ntds and press Enter.
  • From the ntdsutil: prompt, type files and press Enter.
  • From the file maintenance: prompt, type integrity and press Enter.

As you can see in below diagram, the utility will perform the check against the database. If any errors are reported, contact Microsoft Product Support Services to determine how you should proceed.

Active Directory Database Integrity Check

In order to exit from the utility type, quit.it is also recommended to run Semantic database analysis to confirm the consistency of active directory database contents.

In order to do it, 

semantic database analysis

database analysis

If its detected any integrity issues can type go fixup to fix the errors.After process is completed, type net start ntds to start the ntds service.

So, that’s all in this blog. I will meet you soon with next stuff .Have a nice day !!!

Recommended content

RODC Installation Guide- Step by step guide to install read only domain controller

RODC Filtered Attribute Set

Installing and configuring a RODC in Windows Server-2012

How to find the GUID of Domain Controller

Group Policy Understanding Group Policy Preferences

Group Policy Verification Tool GPOTool Exe

Group Policy Health Check on Specific Domain Controller

What is Netlogon Folder in Active Directory

How to Create Custom Attributes in Active Directory

How Can I Check the Tombstone Lifetime of My Active Directory Forest

How to Determine a Computers AD Site From the Command Line

How to Check the Active Directory Database Integrity

If you have any questions feel free to contact us on admin@windowstechno.com also follow us on facebook@windowstechno to get updates about new blog posts.

How useful was this post?

Click on a star to rate it!

As you found this post useful...

Follow us on social media!

Was this article helpful?
YesNo

Vipan Kumar

He is an Active Directory Engineer. He has been working in IT industry for more than 10 years. He is dedicated and enthusiastic information technology expert who always ready to resolve any technical problem. If you guys need any further help on subject matters, feel free to contact us on admin@windowstechno.com Please subscribe our Facebook page as well website for latest article. https://www.facebook.com/windowstechno

Leave a Reply

Back to top button