Active Directory
Health Check Tool

Active Directory Health Check Tool.  Monitor the health of your domain controllers and Active Directory replication status with our complete Active Directory monitoring solution.

Improve your Active Directory Health

Try InfraSOS for Free

Active Directory Health Checks Tool

Active Directory Health Check Tool

Get complete overview of your Active Directory domain / forests and improve the speed of AD user logons with Active Directory replication status, Active Directory health check tool and DNS monitor.  Common problems admins have are badly configured domain controllers and DNS servers.  Our tools will show any misconfigurations and point out the errors causing your replication error issues. Find any potential security risks and resolve with our password and AD user reporting tools.

Try our SaaS Active Directory Health Check and Status Tool

Try us out for Free, Access to all features. – 200+ AD Report templates Available. Easily customise your own AD reports.

Active Directory Health Check Tool Features

With our AD health check tool you will be able to diagnose Active Directory replication issues, check DNS health and errors in your domain controller event logs.  Filter your reports based on any attribute or domain controller.  Run reports on as many domains as you have in your forest or multiple forests.

Delegate access to reports within the InfraSOS portal to only certain team members.  Schedule reports to run at certain times and have reports emailed to you.  Also export reports in various formats (CSV, Excel, PDF, HTML, CSVDE).

All reports are fully customisable and you can create your own Active Directory, Azure AD or Office 365 reports based on any attribute or filter.

Did you know badly configured domain controllers cause Slow User Logins ?

Badly configured domain controllers and DNS will cause slow Active Directory user logins.  If you have GPOs configured, sometimes GPOs aren’t applied correctly to users logging on who authenticate against a domain controller which isn’t replicating correctly with other domain controllers.  Our tool helps diagnose these issues and many other issues so you can fix any errors like this and help speed up and secure your infrastructure.

InfraSOS Active Directory Health Checks (Diagnostic Tests)

With InfraSOS we check the following as part of our diagnostic tests (DCDiag) against your domain controllers:

Active Directory Tests Test Description


Checks if each domain controller advertises itself correctly and checks whether it is advertising itself as having the capabilities of a DSA.  


This test checks the health of your DNS Server settings for your domain such as network connectivity, DNS client configuration, service availability, zone existence, DNS forwarders configuration, DNS delegation, DNS Dynamice Update, DNS record registration, DNS resolve tests and more.


Checks that the security descriptors on the naming context heads have appropriate permissions for replication.


This test checks that the Knowledge Consistency (KCC) Checker is completIing without any errors.


Checks to ensure the required domain controller services are running or failing.


Checks that the required logon privileges exist to allow replication to proceed.


This test checks the validity of cross-references.


Checks for any server that is not receiving replications because its partners are not running.


Detects security errors on your domain controllers (or those possibly security related) and performs the initial diagnosis of the problem along with detailed information for each domain controller.


Checks for failures that would prevent or temporarily hold up intersite replication and predicts how long it would take for the Knowledge Consistency Checker (KCC) to recover.


This test checks all DC application directory partitions have the appropriate security descriptor reference domains.


Checks if your domain controllers are registered in your DNS zone for the domain, if they respond to ping and if they have LDAP or remote procedure call (RPC) connectivity between each other.


This test checks that the SYSVOL status is ready and has passed a number of checks.


Checks for timely replication and any replication errors between your domain controllers.


Checks that Machine Account (AD only) and Directory System Agent (DSA) objects have been replicated.


Checks if the relative identifier (RID) master is accessible and if it contains the correct information.


Checks if the Knowledge Consistency Checker (KCC) has generated a fully connected topology for all domain controllers.


Checks if the machine account has been properly registered and that the services are being advertised.

FSMOCheck (LocatorCheck)

Checks your domain controllers can contact a Kerberos Key Distribution Center (KDC), a time server, a preferred time server, a primary domain controller (PDC), and a global catalog server.


This test checks if there are secure channels from all the domain controllers in your domain.


This test verifies that specified system references are intact for the FRS and Replication infrastructure across all objects in the enterprise on each domain controller (DC).


Checks whether your domain controllers can contact the DCs that hold the five operations master roles in your domain (also known as flexible single master operations or FSMO roles).


Checks all DC application directory partitions are fully instantiated on all replica servers in your domain.


Checks that specific system references are intact for the file replication system (FRS) and replication infrastructure.


Checks to see if there are errors in the file replication system (FRS). (Failing replication of the SYSVOL share can cause policy problems.)


This test checks to see if there are any operation errors in the DFS replication between domain controllers.

Check Your Active Directory Health and Replication Status with InfraSOS

Try us out for Free, Access to all features. – 200+ AD Report templates Available. Easily customise your own AD reports.

Customise Reports

Active Directory Reporting & Auditing


Try InfraSOS for FREE

Invite your team and explore InfraSOS features for free