To deploy an additional domain controller: Dcdiag /test:dcpromo /DnsDomain:domain_name.com /ReplicaDC To deploy a child domain: Dcdiag /test:dcpromo /DnsDomain:child_domain_name.forest.com /ChildDomain Test the FSMO Dcdiag /s:<DomainControllerName> /test:fsmocheck Check DNS Dcdiag /test:dns Check for missing and duplicate SPNs as well as other errors Dcdiag /test:checksecurityerror Check the rid pool dcdiag /s:server /v /test:ridmanager
Test SRV records
cmd---nslookup
set q=srv
_ldap._tcp.dc._msdcs.yourdomain.com
_ldap._tcp.gc._msdcs.yourdomain.com
_ldap._tcp.pdc._msdcs.yourdomain.com
Command to Troubleshoot DNS Issues
Disable replication Repadmin /options <dc-fqdn> +DISABLE_OUTBOUND_REPL Enable replication Repadmin /options <dc-fqdn> -DISABLE_OUTBOUND_REPL
w32tm /config /manualpeerlist:<DC1.contoso.com> /syncfromflags:manual /update
w32tm /config /syncfromflags:domhier /update
W32tm /resync /rediscover
net stop w32time && net start w32time
How to find DCs IP addresses nltest/dnsgetdc:contoso.com
Reset the netlogon secure channel
nltest /sc_reset:<domainname>
PortQry.exe -n 10.236.214.136 -e 53 -p both
Portqry -n DC1.Contoso.com -o 135,137,138,139,389,445,88,636,3268,3269,53 -p both
Dsrevoke /Report OU=test,DC=gs,DC=Com gs\bshwjt
ACLDiag.exe
"OU=Employee,DC=Contoso,DC=Com"
/chkdeleg
All DCs GUID/CNAME & IP addresses
dnslint /ad /s localhost
runas /user:<
domain
\username> cmd