Information About Your IT Environment

Ensure that the personnel performing Active Directory troubleshooting can easily access the following types of documentation:

Active Directory configuration, including replication-related configuration documentation. Domain Name System (DNS), Dynamic Host Configuration Protocol (DHCP), and IP configurations. Application and service documentation (such as Exchange). Administrative model. Server placement and configurations. Change management logs.

Top of page

Active Directory Concepts and Services

Ensure that the personnel performing the troubleshooting have at least a basic understanding of Active Directory concepts and services. Active Directory Concepts Active Directory concepts include the following areas:

Name resolution, including both DNS and NetBIOS name resolution with broadcasts, LMHOSTS files, and Windows Internet Name Service (WINS). Replication (including Microsoft Windows 2000 Server native mode and Microsoft Windows NT 4.0 emulation). Time synchronization. Group Policy and File Replication service (FRS). Core Active Directory, including an understanding of the global catalog, domains, and forests. Authentication (both Kerberos authentication and LAN Manager). Active Directory Microsoft Management Console (MMC) snap-ins and Active

Directory-related tools (including operating system, Support, and Resource Kit tools). Active Directory Services To discover the root cause of problems with Active Directory, ensure that the personnel performing troubleshooting understand common Active Directory operations like replication and password change and how the following processes and role holders are involved in these operations:

Operations master roles (including PDC emulator, relative identifier (RID) master, domain naming master, schema master, and infrastructure master). Key Distribution Center (KDC). Knowledge Consistency Checker (KCC). Intersite Topology Generator (ISTG). Time Reference Server (TRS).

Because Active Directory interacts with external services and protocols, such as TCP/IP for the transport protocol, DNS for name resolution, and FRS for file replication of Group Policy objects and logon scripts, accurately determining the cause of a problem and applying a solution becomes more complex. Effective troubleshooting requires a thorough knowledge of these and other protocols, as well as the diagnostic tools associated with each protocol. For more information about Active Directory, networking protocols, and tools, see the Microsoft Windows 2000 Server Resource Kit. You can obtain additional information by searching Microsoft.com and TechNet, or by taking advantage of MCSE training classes and books. Top of page

Tools for Troubleshooting Active Directory

Table 2.3 lists the tools that you can use to troubleshoot Active Directory, where the tools are found, and a brief description of the purpose of the tool. For information about installing the Windows 2000 Support Tools and the Windows 2000 Administrative Tools Pack, see Windows 2000 Server Help. Table 2.3 Tools Used to Troubleshoot Active Directory Tool Location Active Directory Windows 2000 Domains and Trusts Administrative Tools snap-in Pack Function Administer domain trusts, add user principal name suffixes, and change the domain mode.

Active Directory Sites and Services snap-in Active Directory Users and Computers snap-in ADSI Edit, MMC snap-in Backup Wizard Control Panel Dcdiag.exe

Windows 2000 Administrative Tools Pack Windows 2000 Administrative Tools Pack Windows 2000 Support Tools Windows 2000 operating system tool Windows 2000

Administer the replication of directory data. Administer and publish information in the directory. View, modify, and set access control lists (ACLs) on objects in the directory. Back up and restore data.

DNS snap-in Dsastat.exe Event viewer Ipconfig.exe Ldp.exe Linkd.exe MMC

Netdiag.exe

Netdom.exe Net use, start, stop, del, copy, time Nltest.exe

View and modify computer, application, and network settings. Windows 2000 Support Analyze the state of domain controllers in a Tools and Windows 2000 forest or enterprise; assist in troubleshooting by Server Resource Kit reporting any problems. Windows 2000 Administrative Tools Manage DNS. Pack Windows 2000 Support Compare directory information on domain Tools controllers and detect differences. Windows 2000 Administrative Tools Monitor events recorded in event logs. Pack Windows 2000 operating View and manage network configuration. system tool Windows 2000 Support Perform Lightweight Directory Access Protocol Tools (LDAP) operations against Active Directory. Windows 2000 Server Create, delete, update, and view the links that Resource Kit are stored in junction points. Create, save, and open administrative tools Windows 2000 (called MMC snap-ins) that manage hardware, software, and network components. Windows 2000 Server Resource Kit and Check end-to-end network connectivity and Windows 2000 Support distributed services functions. Tools Allow batch management of trusts, joining Windows 2000 Support computers to domains, and verifying trusts and Tools secure channels. Perform common tasks on network services, Windows 2000 operating including stopping, starting, and connecting to system tool network resources. Windows 2000 Support Verify that the locator and secure channel are

Ntdsutil.exe Ntfrsutl.exe Performance Monitor Pathping.exe Ping.exe Regedit.exe

Tools Windows 2000 operating system tool Windows 2000 Server Resource Kit Windows 2000 operating system tool

functioning. Manage Active Directory, manage single master operations, remove metadata. View and manage FRS configuration.

Repadmin.exe

Replmon.exe Secedit.exe Services snap-in Setspn.exe Task Manager Terminal Services W32tm Windows Explorer

View system performance data, performance logs and alerts, and trace log files. Trace a route from a source to a destination on a Windows 2000 operating network, show the number of hops, and show system tool packet loss. Windows 2000 operating Verify network connectivity. system tool Windows 2000 operating View and modify registry settings. system tool Verify replication consistency between Windows 2000 Support replication partners, monitor replication status, Tools display replication metadata, and force replication events and topology recalculation. Display replication topology, monitor Windows 2000 Support replication status, and force replication events Tools and topology recalculation. Windows 2000 operating Manage Group Policy settings. system tool Windows 2000 Start, stop, pause, or resume system services on Administrative Tools remote and local computers, and configures Pack startup and recovery options for each service. Windows 2000 Support Manage security principal names (SPNs). Tools Windows 2000 View processes and performance data. Windows 2000 Access and manage computers remotely. Windows 2000 operating Manage Windows Time Service. system tool Windows 2000 Access files, Web pages, and network locations.