Jorge's Quest For Knowledge!

All You Need To Know About Identity And Security On-Premises And In The Cloud. It's Just Like An Addiction, The More You Have, The More You Want To Have!

(2012-07-19) Active Directory Replication Status Tool

Posted by Jorge on 2012-07-19


The Active Directory Replication Status Tool (ADREPLSTATUS) analyzes the replication status for domain controllers in an Active Directory domain or forest.

The screen dumps below are from my test/demo environment running with W2K12 RWDCs. The first two screen dumps show you the healthy environment and all other screen dumps show you issues within that same environment after turning off some DCs. This AD forest has two AD domains (ADCORP.LAB and CHLD.ADCORP.LAB) and each AD domain has two RWDCs.

image

Figure 1: Active Directory Replication Status Tool – Healthy Environment

image

Figure 2: Active Directory Replication Status Tool – Healthy Environment

image

Figure 3: Active Directory Replication Status Tool – Environment With Issues

image

Figure 4: Active Directory Replication Status Tool – Environment With Issues

image

Figure 5: Active Directory Replication Status Tool – Environment With Issues

image

Figure 6: Active Directory Replication Status Tool – Environment With Issues

If you click on an error code it will take you to another page showing more detailed information about that specific error (see figure 9 and 10 as an example)

image

Figure 7: Active Directory Replication Status Tool – Environment With Issues

If you click on an error code it will take you to another page showing more detailed information about that specific error (see figure 9 and 10 as an example)

image

Figure 8: Active Directory Replication Status Tool – Errors Summary

image

Figure 9: Active Directory Replication Status Tool – Detailed Information About An Error

image

Figure 10: Active Directory Replication Status Tool – Detailed Information About An Error

image

Figure 11: Active Directory Replication Status Tool – Technical Information About AD Replication

image

Figure 12: Active Directory Replication Status Tool – Technical Information About AD Replication

Overview

The Active Directory Replication Status Tool (ADREPLSTATUS) analyzes the replication status for domain controllers in an Active Directory domain or forest. ADREPLSTATUS displays data in a format that is similar to REPADMIN /SHOWREPL * /CSV imported into Excel but with significant enhancements. Specific capabilities for this tool include:

  • Expose Active Directory replication errors occurring in a domain or forest
  • Prioritize errors that need to be resolved in order to avoid the creation of lingering objects in Active Directory forests
  • Help administrators and support professionals resolve replication errors by linking to Active Directory replication troubleshooting content on Microsoft TechNet
  • Allow replication data to be exported to source or destination domain administrators or support professionals for offline analysis

System requirements

  • Supported operating systems:
    • Windows 7, Windows 8, Windows Server 2003, Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, Windows Vista, Windows XP
  • ADREPLSTATUS does not install on server core installs of Windows
  • Windows 2000 not supported due to lack of support for .NET Framework 4.0
  • Domain membership requirements:
    • Must be joined to the Active Directory domain or forest you intend to monitor
  • .NET Framework requirements:
    • .NET Framework 4.0 (you may be prompted to install .NET Framework 3.5.1 first on Windows Server 2008)
  • Required User Credentials:
    • Target forest/domain user account
  • Supported DC OS versions that can be monitored by ADREPLSTATUS:
    • Windows Server 2003 (R2)
    • Windows Server 2008 (R2) 
    • Windows Server 2012 RTM
    • Windows 2000 not tested and is therefore not supported.
  • Other Requirements:
    • ADREPLSTATUS will not work when the following security setting is enabled on the operating system:
      • System cryptography: Use FIPS 140 compliant cryptographic algorithms, including encryption, hashing and signing algorithms

Cheers,
Jorge
———————————————————————————————
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always evaluate/test yourself before using/implementing this!
* DISCLAIMER:
https://jorgequestforknowledge.wordpress.com/disclaimer/
———————————————————————————————
############### Jorge’s Quest For Knowledge #############
#########
http://JorgeQuestForKnowledge.wordpress.com/ ########
———————————————————————————————

12 Responses to “(2012-07-19) Active Directory Replication Status Tool”

  1. Rebell said

    Hi,

    nice to see a tool for repcheck.
    Im using “repadmin /replsum * /errorsonly” for a short overview of errors in my forrest.

    CyA !

  2. […] A few weeks ago, Microsoft released a pretty amazing tool for any Active Directory administrator. Called the Active Directory Replication Status Tool, it allows an admin to painlessly test replication for any errors. You can have it test a single domain or the entire forest, and it will test every namespace that should be replicated within the scope you specified. It then displays the results in an easy-to-view table. You can read the details on it at the always reliable Jorge’s Quest For Knowledge. […]

  3. […] https://jorgequestforknowledge.wordpress.com/2012/07/19/active-directory-replication-status-tool/ Share this:TwitterFacebookEmailPrintDiggLinkedInRedditTumblrStumbleUponLike this:LikeBe the first to like this. […]

  4. Nirmal said

    Have you ever tried using Dynamic AD Replication Checker tool which is free and can even be used to check various aspects of a DC (like – DC SRV, Services, ports, sYSVOL status, etc)? Available for free at http://www.Dynamic-SpotAction.com

  5. Nirmal said

    New Dynamic AD Replication Checker Tool Version 2.0 were released.
    New Features supported in Version 2.0:
    Ø Monitor AD Replication based on schedules
    Ø Check,Troubleshooting Replication issues for all or individual Domain Controllers
    Ø Check Orphaned Domain Controllers, if any
    Ø Individual Naming Context Replication Status
    Ø Easy navigation of Objects in Objects Pane
    Ø Execute Individual Columns
    Ø Populate Instance Groups in Object Pane
    Ø Add Site/DC Manually
    Ø Save Session in local database
    Ø Switch to Monitoring and Console Version at any time
    Ø Check Error or Warning Events on Domain controllers
    Ø Perform DNS Test, check SOA, NA, and Forwarders
    Ø DC Event Log Tests
    Ø DC Patch Status
    Ø Network Configuration on the Destination Domain Controllers
    Ø Easily check Status of Domain Controller Services
    Ø Check AD Pending Replication Jobs and Naming Contexts in Sync
    Ø 164 Dynamic Columns for Server Object available

  6. Nirmal said

    Thanks Jorge!

    No – it does not make any changes. It just uses WMI Classes and custom code (based on the Dynamic Pack availability) to fetch the information from remote domain controllers.

    The version 2.0 of the tool was released with following new features and a few enhancements:

    Ø Monitor AD Replication based on schedules
    Ø Check,Troubleshooting Replication issues for all or individual Domain Controllers
    Ø Check Orphaned Domain Controllers, if any
    Ø Individual Naming Context Replication Status
    Ø Easy navigation of Objects in Objects Pane
    Ø Execute Individual Columns
    Ø Populate Instance Groups in Object Pane
    Ø Add Site/DC Manually
    Ø Save Session in local database
    Ø Switch to Monitoring and Console Version at any time
    Ø Check Error or Warning Events on Domain controllers
    Ø Perform DNS Test, check SOA, NA, and Forwarders
    Ø DC Event Log Tests
    Ø DC Patch Status
    Ø Network Configuration on the Destination Domain Controllers
    Ø Easily check Status of Domain Controller Services
    Ø Check AD Pending Replication Jobs and Naming Contexts in Sync
    Ø 164 Dynamic Columns for Server Object available

    By 1st week of April, Dynamic Solution Center will be released which enhances the capability of the tool.

    Thanks!

  7. Corpa said

    Why FRS isn’t tested with this tool?

    Don’t both replication work in the same way but delta aspects?

    Thank you.

  8. […] (2012-07-19) Active Directory Replication Status Tool […]

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

 
%d bloggers like this: