ActiveDirectory健康巡检报告0429.docx

1、ActiveDirectory健康巡检报告0429Active directory健康巡检报告 运维服务部-系统组 2011年04月29日版本记录版本时间修订人描述说明：A-增加 M-修改 D-删除状态：编写中 / 已提交 / 已发布1. 风险定义1) 正常信息 属于正常的信息，不存在可导致系统不可用方面的问题。2) 一般问题 问题还需要进一步关注，并不一定会立即对系统造成损害。运维 人员应该经常检查这些问题，在必要时采取措施。3) 紧急状态 可能影响稳定性，安全性或者对系统的性能产生严重影响的问题。应该在巡检后立即进行处理。2. 检查范围定义DomainDomain ControllerIP

2、 AddressLocation AD-FEMOO-01192.168.107.217菜市口 AD-FEMOO-02192.168.107.218菜市口 AD-FEMOO-03192.168.240.43丰台Pub.F AD-PUB-01192.168.107.209菜市口 AD-PUB-02192.168.107.210菜市口 AD-PUB-03192.168.240.44丰台3. 检查内容定义本次active directory检查内容定义如下表所示：SNCheck TypeCheck List1Active Directory Replicationa) AD站点拓扑信息b) AD森林和

3、域信息c) 复制状态信息2FRS / Group Policya) Sysvol状态b) FRS信息3DNS Naming Resolvea) Dcdiag DNSb) DNS信息4DC Health Checka) Dcdiag generalb) Time Server配置c) Event Log检查5DC system State Backup Checka) 备份状态b) 备份策略、计划c) 备份恢复流程4. 检查结果统计依据如上的检查内容，通过对检查结果的分析，当前pub和femoo域总体健康性良好，无异常现象。4.1. AD巡检结果汇总SNCheck ListRisk Status

4、1Active Directory Replication2FRS / Group Policy3DNS Naming Resolve4DC Health Check5DC system State Backup Check4.2. 各DC巡检状态Domain NamingServer NameDC StatusFAD-FEMOO-01AD-FEMOO-02AD-FEMOO-03PAD-PUB-01AD-PUB-02AD-PUB-035. 健康检查结果描述5.1. 活动目录复制5.1.1. FSMO information1) Femoo:Schema and Domain Naming Ma

5、sterFSMO NameRole of the PositionSchema MasterAd-femoo-02Domain Naming MasterAd-femoo-022) Femoo:PDCRID Master infrastructure masterFSMO NameRole of the PositionPDC Ad-femoo-02RID MasterAd-femoo-02infrastructure masterAd-femoo-023) Pub:Schema and Domain Naming MasterFSMO NameRole of the PositionSche

6、ma MasterAd-pub-01Domain Naming MasterAd-pub-014) Pub:PDCRID Master infrastructure masterFSMO NameRole of the PositionPDCAd-pub-01RID MasterAd-pub-01infrastructure masterAd-pub-015.1.2. AD站点拓扑信息 所属域：F 风险状态： 检查结果：Replication Summary Start Time: 2011-04-02 16:41:01Beginning data collection for replica

7、tion summary, this may take awhile: .Source DC largest delta fails/total % error AD-FEMOO-01 52m:20s 0 / 10 0 AD-FEMOO-02 54m:20s 0 / 10 0 AD-FEMOO-03 54m:20s 0 / 10 0 Destination DC largest delta fails/total % error AD-FEMOO-01 54m:20s 0 / 10 0 AD-FEMOO-02 52m:20s 0 / 10 0 AD-FEMOO-03 43m:33s 0 / 1

8、0 0 所属域：Pub.F 风险状态： 检查结果：C:support toolsrepadmin.exe /replsumReplication Summary Start Time: 2011-04-02 16:38:36Beginning data collection for replication summary, this may take awhile: .Source DC largest delta fails/total % error AD-PUB-01 53m:23s 0 / 10 0 AD-PUB-02 53m:23s 0 / 10 0 AD-PUB-03 44m:09

9、s 0 / 10 0 Destination DC largest delta fails/total % error AD-PUB-01 43m:29s 0 / 10 0 AD-PUB-02 44m:09s 0 / 10 0 AD-PUB-03 53m:23s 0 / 10 0 5.1.3. 目录复制链路状态 所属域： 风险状态： 检查结果：#repadmin.exe /showreplrepadmin running command /showrepl against server localhostDefault-First-Site-NameAD-FEMOO-02DC Options:

10、 IS_GC Site Options: (none)DC object GUID: a602fe0a-818e-47a1-8c60-65bf9e2c3964DC invocationID: 5f55d0e7-8858-4953-bbaa-09bf41620d66= INBOUND NEIGHBORS =DC=femoo,DC=com Default-First-Site-NameAD-FEMOO-01 via RPC DC object GUID: 82858742-2690-4df8-8b7f-0b398335d077 Last attempt 2011-04-02 16:30:13 wa

11、s successful. Default-First-Site-NameAD-FEMOO-03 via RPC DC object GUID: c4eab42d-e60a-4897-b352-a3e19a9646db Last attempt 2011-04-02 16:30:38 was successful.CN=Configuration,DC=femoo,DC=com Default-First-Site-NameAD-FEMOO-03 via RPC DC object GUID: c4eab42d-e60a-4897-b352-a3e19a9646db Last attempt

12、2011-04-02 15:48:41 was successful. Default-First-Site-NameAD-FEMOO-01 via RPC DC object GUID: 82858742-2690-4df8-8b7f-0b398335d077 Last attempt 2011-04-02 15:48:41 was successful.CN=Schema,CN=Configuration,DC=femoo,DC=com Default-First-Site-NameAD-FEMOO-03 via RPC DC object GUID: c4eab42d-e60a-4897

13、-b352-a3e19a9646db Last attempt 2011-04-02 15:48:41 was successful. Default-First-Site-NameAD-FEMOO-01 via RPC DC object GUID: 82858742-2690-4df8-8b7f-0b398335d077 Last attempt 2011-04-02 15:48:41 was successful.DC=ForestDnsZones,DC=femoo,DC=com Default-First-Site-NameAD-FEMOO-03 via RPC DC object G

14、UID: c4eab42d-e60a-4897-b352-a3e19a9646db Last attempt 2011-04-02 16:23:22 was successful. Default-First-Site-NameAD-FEMOO-01 via RPC DC object GUID: 82858742-2690-4df8-8b7f-0b398335d077 Last attempt 2011-04-02 16:23:38 was successful.DC=DomainDnsZones,DC=femoo,DC=com Default-First-Site-NameAD-FEMOO

15、-03 via RPC DC object GUID: c4eab42d-e60a-4897-b352-a3e19a9646db Last attempt 2011-04-02 16:23:28 was successful. Default-First-Site-NameAD-FEMOO-01 via RPC DC object GUID: 82858742-2690-4df8-8b7f-0b398335d077 Last attempt 2011-04-02 16:23:44 was successful.所属域： 风险状态： 检查结果： repadmin running command

16、/showrepl against server localhostDefault-First-Site-NameAD-PUB-01DC Options: IS_GC Site Options: (none)DC object GUID: 3e7a172f-412c-4595-b7ed-146eae4b514cDC invocationID: 3e7a172f-412c-4595-b7ed-146eae4b514c= INBOUND NEIGHBORS =DC=pub,DC=femoo,DC=com Default-First-Site-NameAD-PUB-03 via RPC DC obj

17、ect GUID: 03833208-691f-436a-ad79-67457f105fca Last attempt 2011-04-02 16:32:19 was successful. Default-First-Site-NameAD-PUB-02 via RPC DC object GUID: e0cab61c-22ba-48dc-b27a-0b388269356c Last attempt 2011-04-02 16:32:23 was successful.CN=Configuration,DC=pub,DC=femoo,DC=com Default-First-Site-Nam

18、eAD-PUB-02 via RPC DC object GUID: e0cab61c-22ba-48dc-b27a-0b388269356c Last attempt 2011-04-02 15:55:07 was successful. Default-First-Site-NameAD-PUB-03 via RPC DC object GUID: 03833208-691f-436a-ad79-67457f105fca Last attempt 2011-04-02 15:55:07 was successful.CN=Schema,CN=Configuration,DC=pub,DC=

19、femoo,DC=com Default-First-Site-NameAD-PUB-02 via RPC DC object GUID: e0cab61c-22ba-48dc-b27a-0b388269356c Last attempt 2011-04-02 15:55:07 was successful. Default-First-Site-NameAD-PUB-03 via RPC DC object GUID: 03833208-691f-436a-ad79-67457f105fca Last attempt 2011-04-02 15:55:07 was successful.DC

20、=DomainDnsZones,DC=pub,DC=femoo,DC=com Default-First-Site-NameAD-PUB-03 via RPC DC object GUID: 03833208-691f-436a-ad79-67457f105fca Last attempt 2011-04-02 16:20:17 was successful. Default-First-Site-NameAD-PUB-02 via RPC DC object GUID: e0cab61c-22ba-48dc-b27a-0b388269356c Last attempt 2011-04-02

21、16:20:35 was successful.DC=ForestDnsZones,DC=pub,DC=femoo,DC=com Default-First-Site-NameAD-PUB-02 via RPC DC object GUID: e0cab61c-22ba-48dc-b27a-0b388269356c Last attempt 2011-04-02 16:28:26 was successful. Default-First-Site-NameAD-PUB-03 via RPC DC object GUID: 03833208-691f-436a-ad79-67457f105fc

22、a Last attempt 2011-04-02 16:28:44 was successful.5.1.4. 测试指定DC目录复制 所属域： (ad-femoo-02与ad-femoo-03复制测试) 风险状态： 检查结果：C:support toolsrepladmin.exe /syncall ad-femoo-03CALLBACK MESSAGE: The following replication is in progress: From: a602fe0a-818e-47a1-8c60-65bf9e2c3964._ To : c4eab42d-e60a-4897-b352-a3e

23、19a9646db._CALLBACK MESSAGE: The following replication completed successfully: From: a602fe0a-818e-47a1-8c60-65bf9e2c3964._ To : c4eab42d-e60a-4897-b352-a3e19a9646db._CALLBACK MESSAGE: The following replication is in progress: From: 82858742-2690-4df8-8b7f-0b398335d077._ To : c4eab42d-e60a-4897-b352

24、-a3e19a9646db._CALLBACK MESSAGE: The following replication completed successfully: From: 82858742-2690-4df8-8b7f-0b398335d077._ To : c4eab42d-e60a-4897-b352-a3e19a9646db._CALLBACK MESSAGE: SyncAll Finished.SyncAll terminated with no errors. 所属域：(ad-pub-01与ad-pub-03复制测试) 风险状态： 检查结果：C:support toolsrep

25、admin.exe /syncall ad-pub-03CALLBACK MESSAGE: The following replication is in progress: From: 3e7a172f-412c-4595-b7ed-146eae4b514c._ To : 03833208-691f-436a-ad79-67457f105fca._CALLBACK MESSAGE: The following replication completed successfully: From: 3e7a172f-412c-4595-b7ed-146eae4b514c._ To : 038332

26、08-691f-436a-ad79-67457f105fca._CALLBACK MESSAGE: The following replication is in progress: From: e0cab61c-22ba-48dc-b27a-0b388269356c._ To : 03833208-691f-436a-ad79-67457f105fca._CALLBACK MESSAGE: The following replication completed successfully: From: e0cab61c-22ba-48dc-b27a-0b388269356c._ To : 03

27、833208-691f-436a-ad79-67457f105fca._CALLBACK MESSAGE: SyncAll Finished.SyncAll terminated with no errors.5.2. FRS / Group Policy5.2.1. Sysvol状态 所属域： 风险状态： 检查结果：#dcdiag /test:frssysvolDomain Controller DiagnosisPerforming initial setup: Done gathering initial info.Doing initial required tests Testing

28、 server: Default-First-Site-NameAD-FEMOO-02 Starting test: Connectivity . AD-FEMOO-02 passed test ConnectivityDoing primary tests Testing server: Default-First-Site-NameAD-FEMOO-02 Starting test: frssysvol . AD-FEMOO-02 passed test frssysvol Running partition tests on : DomainDnsZones Running partition tests on : ForestDnsZones Running partition tests on : Schema Running partition tests on : Configuration Running partition tests on