Share: Home
Risk and Health Assessment Program for Active Directory (ADRAP) - Syed Khairuddin

Syed Khairuddin

Risk and Health Assessment Program for Active Directory (ADRAP)

Active Directory forms a critical backbone for the support of Enterprise Infrastructure. A POORLY maintained and functioning Active Directory environment can land your infrastructure into a disaster causing significant impact to your business. To avoid these situation before they rise Microsoft came up with a tool called ADRAP which can actually do an in-depth analysis of an organization’s Active Directory. ADRAP  generates a report and based on that report System Administrators can analyze a series of data points to identify areas for remediation. Listed below are some of the key places where ADRAP puts its efforts.

http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=22205827-c164-4b62-9f8d-c3cd6077bd82

Directory Service Replication

Replication Status
AD Convergence
Bridgeheads and ISTGs
Large Groups
File Replication Service

SYSVOL Convergence

Orphaned GPTs, Unlinked GPOs
SYSVOL Consistency
SYSVOL Information

Name Resolution

DNSLint
DCDIAG-DNS
WINS 1B and 1C
IPCONFIG (WINS and DNS)
Domain Controllers Health
DCDIAG - General
Performance Statistics
Time Configuration

OS Information

AD Database Analysis
Database Information
Partition ACLs
AD Object Count

Others
Exchange DSACCESS
Account Information
Account Lockouts
Backup and Disaster Recovery

Conclusion: Its the best tool Microsoft has ever intruduced to analyze Active Directory.