ActiveDirectory健康巡检报告-20110429

Activedirectory健康巡检报告运维服务部-系统组2011年04月29日版本记录版本时间修订人描述说明：A-增加M-修改D-删除状态：编写中/已提交/已发布ActiveDirectory健康巡检报告目录1.风险定义...................................................................................................................................32.检查范围定义...........................................................................................................................33.检查内容定义...........................................................................................................................34.检查结果统计...........................................................................................................................34.1.AD巡检结果汇总.........................................................................................................34.2.各DC巡检状态............................................................................................................45.健康检查结果描述...................................................................................................................45.1.活动目录复制...............................................................................................................45.1.1.FSMOinformation...........................................................................................45.1.2.AD站点拓扑信息.............................................................................................45.1.3.AD域功能级别检查..........................................................错误!未定义书签。5.1.4.目录复制链路状态...........................................................................................65.1.5.测试指定DC目录复制..................................................................................115.2.FRS/GroupPolicy....................................................................................................135.2.1.Sysvol状态.....................................................................................................135.2.2.FRS信息.........................................................................................................155.3.名称解析.....................................................................................................................175.3.1.Dcdiag–DNS................................................................................................175.3.2.DNS正向区域检查........................................................................................175.4.DC健康性...................................................................................................................185.4.1.Dcdiag–general...........................................................................................185.4.2.Netdiag-general.............................................................................................235.4.3.TimeServer配置...........................................................................................355.4.4.EventLog检查..............................................................................................355.5.DC备份检查...............................................................................................................356.巡检总结.................................................................................................................................36ActiveDirectory健康巡检报告1.风险定义1)正常信息–属于正常的信息，不存在可导致系统不可用方面的问题。2)一般问题–问题还需要进一步关注，并不一定会立即对系统造成损害。运维人员应该经常检查这些问题，在必要时采取措施。3)紧急状态–可能影响稳定性，安全性或者对系统的性能产生严重影响的问题。应该在巡检后立即进行处理。2.检查范围定义DomainDomainControllerIPAddressLocationfemoo.comAD-FEMOO-01192.168.107.217菜市口AD-FEMOO-02192.168.107.218菜市口AD-FEMOO-03192.168.240.43丰台Pub.Femoo.comAD-PUB-01192.168.107.209菜市口AD-PUB-02192.168.107.210菜市口AD-PUB-03192.168.240.44丰台3.检查内容定义本次activedirectory检查内容定义如下表所示：SNCheckTypeCheckList1ActiveDirectoryReplicationa)AD站点拓扑信息b)AD森林和域信息c)复制状态信息2FRS/GroupPolicya)Sysvol状态b)FRS信息3DNSNamingResolvea)Dcdiag–DNSb)DNS信息4DCHealthChecka)Dcdiag–generalb)TimeServer配置c)EventLog检查5DCsystemStateBackupChecka)备份状态b)备份策略、计划c)备份恢复流程4.检查结果统计依据如上的检查内容，通过对检查结果的分析，当前pub和femoo域总体健康性良好，无异常现象。4.1.AD巡检结果汇总SNCheckListRiskStatus1ActiveDirectoryReplication2FRS/GroupPolicyActiveDirectory健康巡检报告3DNSNamingResolve4DCHealthCheck5DCsystemStateBackupCheck4.2.各DC巡检状态DomainNamingServerNameDCStatusFemoo.comAD-FEMOO-01AD-FEMOO-02AD-FEMOO-03Pub.femmo.comAD-PUB-01AD-PUB-02AD-PUB-035.健康检查结果描述5.1.活动目录复制5.1.1.FSMOinformation1)Femoo:SchemaandDomainNamingMasterFSMONameRoleofthePositionSchemaMasterAd-femoo-02DomainNamingMasterAd-femoo-022)Femoo:PDC\RIDMaster\infrastructuremasterFSMONameRoleofthePositionPDCAd-femoo-02RIDMasterAd-femoo-02infrastructuremasterAd-femoo-023)Pub:SchemaandDomainNamingMasterFSMONameRoleofthePositionSchemaMasterAd-pub-01DomainNamingMasterAd-pub-014)Pub:PDC\RIDMaster\infrastructuremasterFSMONameRoleofthePositionPDCAd-pub-01RIDMasterAd-pub-01infrastructuremasterAd-pub-015.1.2.AD站点拓扑信息所属域：Femoo.com风险状态：检查结果：ActiveDirectory健康巡检报告ReplicationSummaryStartTime:2011-04-0216:41:01Beginningdatacollectionforreplicationsummary,thismaytakeawhile:......SourceDClargestdeltafails/total%%errorAD-FEMOO-0152m:20s0/100AD-FEMOO-0254m:20s0/100AD-FEMOO-0354m:20s0/100Destina