Previous Topic: Check for System ComplianceNext Topic: Verify that the UNIX Computer Name Resolves Correctly


Troubleshoot Active Directory Issues using Uxconsole and Microsoft Utilities

During the implementation process, you can encounter various issues with Active Directory, such as registration and activation issues. The uxpreinstall utility can help you gather, identify and evaluate all the contributing factors. To enhance your ability to troubleshoot Active Directory, you can use the dcdiag (Domain Controller Diagnostics) and the netdiag (Network Diagnostics) utilities from Microsoft

Important! If you are using Windows Server 2003, you can find the dcdiag.exe and netdiag.exe utilities in the Support Tools software bundle. For more information, see Microsoft Knowledge Base articles: KB247811, KB265706, KB321708.

Use the following procedure to troubleshooting Active Directory:

  1. Run uxpreinstall with a verbosity level of 0.

    uxpreinstall runs and displays a summary of the checks it performs and any errors or conflicts it identifies.

  2. If uxpreinstall identifies any errors or conflicts, run uxpreinstall again with a verbosity level of 2 or higher.

    uxpreinstall displays more information about the errors and conflicts that it identifies.

    Note: We recommend that you be cautious when using –l (system logger check) and –k (Single Sign On readiness check) arguments, due to a large amount of output.

  3. To log the uxpreinstall output, run uxpreinstall -f.
  4. To log the Microsoft dcdiag utility output, run dcdiag /f.

    Note: The netdiag utility automatically creates the following log file: NetDiag.log.

  5. Review the log files to failure, error messages; or warnings. If exist, run the uxpreinstall and the dcdiag utility with a higher verbosity level.
  6. Review the log files again to locate actions that were not completed successfully and warning messages.

    Errors can be logged as warnings and not as error messages, due to user preferences.

  7. Run the dcdiag /test:DNS /v /e to troubleshoot the domain controllers parameters.
  8. Review the output, starting form the end of the log file.
  9. Continue troubleshooting until you resolve all warning and error messages.

Example: Use dsquery to query users and groups

The following example shows you how to use the dsquery utility to query for users and groups:

dsquery user -name user1
dsquery group -name grp1
dsquery * "CN=Users,DC=example,DC=com" -scope base -attr *

Example: Use dnscmd utility to retrieve DNS settings

The following example shows you how to use the dnscmd to retrieve DNS settings:

dnscmd /enumzones
dnscmd /zoneprint <zonename>

Example: Use dsquery utility to discover Active Directory sites

The following example shows you how to use the dsquery utility to discover Active Directory sites:

dsquery subnet -name 192.168.*
dsquery site -o dn
dsquery subnet -o rdn -site <mysite>
nltest /DSGETSITECOV