# dc health

## Replication health
> repadmin /replsummary

> repadmin /showrepl \*

## Domain health
General summary
> dcdiag

Comprehensive test suit
> dcdiag /c /v

Indivual test
> dcdiag /test:dns /v

## Clean up old servers
#### Domain Controllers
1. Open dssite.msc -> Sites -> Default-First-Site-Name -> Servers
2. Delete old servers

#### Certificate Authority
1. Open dssite.msc
2. View -> Show Services
3. Services -> Public Key Services
4. Delete old server from:
    - AIA
    - CDP
    - Certificate Authorities
    - Enrollment Services
    - KRA

#### DNS
Run: 

> Get-DnsServerResourceRecord -ZoneName "_msdcs.your.domain"

Look through records to make sure no old servers are in there. Use DNS manager to remove any that shouldn't be there.

#### DHCP
> Get-DhcpServerInDC

> Get-DhcpServerv4OptionValue -ScopeId 10.1.1.0