Check Active Directory Health Script

This is a quick and dirty script to check the health of a given DC. This will likely seen lots of revisions and chages as it developes

Functions

• Virtual Check
• Replication status
• DCDIAG
• Forest and domain functional Level lookup
• Port test to all DC's on all sites (Port 135)
• Users not logged in within the last 90 day lookup
• Unlinked GPO lookup and list
• RID exhaustion check
• Duplicate SPN lookup
• Time source lookup
• Added DNS Scavenging check
• Lists DNS Forwarders and warns if less then 2

To Do

User accounts

• Paswords never expire
• Password not req
• Users total
• Users disabled

Computer accounts

• Stale computer accounts
• Total Computers / Servers

Screenshot

Authors

• @Jonny190
• @Spud