dc health

Replication health

repadmin /replsummary

repadmin /showrepl *

Domain health

General summary

dcdiag

Comprehensive test suit

dcdiag /c /v

Indivual test

dcdiag /test:dns /v

Clean up old servers

Domain Controllers

1. Open dssite.msc -> Sites -> Default-First-Site-Name -> Servers
2. Delete old servers

Certificate Authority

1. Open dssite.msc
2. View -> Show Services
3. Services -> Public Key Services
4. Delete old server from:
   • AIA
   • CDP
   • Certificate Authorities
   • Enrollment Services
   • KRA

DNS

Run:

Get-DnsServerResourceRecord -ZoneName "_msdcs.your.domain"

Look through records to make sure no old servers are in there. Use DNS manager to remove any that shouldn't be there.

DHCP

Get-DhcpServerInDC

Get-DhcpServerv4OptionValue -ScopeId 10.1.1.0