Risk and Health Assessment Program for Active Directory (ADRAP)
Active Directory forms a critical backbone for the support of Enterprise Infrastructure. A POORLY maintained and functioning Active Directory environment can land your infrastructure into a disaster causing significant impact to your business. To avoid these situation before they rise Microsoft came up with a tool called ADRAP which can actually do an in-depth analysis of an organization’s Active Directory. ADRAP generates a report and based on that report System Administrators can analyze a series of data points to identify areas for remediation. Listed below are some of the key places where ADRAP puts its efforts.
http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=22205827-c164-4b62-9f8d-c3cd6077bd82
Directory Service Replication
Replication Status
AD Convergence
Bridgeheads and ISTGs
Large Groups
File Replication Service
SYSVOL Convergence
Orphaned GPTs, Unlinked GPOs
SYSVOL Consistency
SYSVOL Information
Name Resolution
DNSLint
DCDIAG-DNS
WINS 1B and 1C
IPCONFIG (WINS and DNS)
Domain Controllers Health
DCDIAG - General
Performance Statistics
Time Configuration
OS Information
AD Database Analysis
Database Information
Partition ACLs
AD Object Count
Others
Exchange DSACCESS
Account Information
Account Lockouts
Backup and Disaster Recovery
Conclusion: Its the best tool Microsoft has ever intruduced to analyze Active Directory.