Tests results

Passed	Failed	Skipped	Total
95	10	0	105

Name	Type	Domain	DomainController	Status	Extended
Forest \| Forest Replication using RepAdmin	Forest			True	Data is available.
Forest \| Replication from AD2 to AD1, Naming Context: DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:03:43
Forest \| Replication from AD3 to AD1, Naming Context: DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:03:43
Forest \| Replication from AD2 to AD1, Naming Context: CN=Configuration,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:03:43
Forest \| Replication from ADPREVIEW2019 to AD1, Naming Context: CN=Configuration,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:03:43
Forest \| Replication from AD3 to AD1, Naming Context: CN=Configuration,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:03:43
Forest \| Replication from DC1 to AD1, Naming Context: CN=Configuration,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:09:02
Forest \| Replication from AD2 to AD1, Naming Context: CN=Schema,CN=Configuration,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:03:43
Forest \| Replication from DC1 to AD1, Naming Context: CN=Schema,CN=Configuration,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:03:43
Forest \| Replication from ADPREVIEW2019 to AD1, Naming Context: CN=Schema,CN=Configuration,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:03:43
Forest \| Replication from AD3 to AD1, Naming Context: CN=Schema,CN=Configuration,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:03:43
Forest \| Replication from AD2 to AD1, Naming Context: DC=DomainDnsZones,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:03:43
Forest \| Replication from AD3 to AD1, Naming Context: DC=DomainDnsZones,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:03:43
Forest \| Replication from DC1 to AD1, Naming Context: DC=ForestDnsZones,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:03:43
Forest \| Replication from AD2 to AD1, Naming Context: DC=ForestDnsZones,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:03:43
Forest \| Replication from ADPREVIEW2019 to AD1, Naming Context: DC=ForestDnsZones,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:03:43
Forest \| Replication from AD3 to AD1, Naming Context: DC=ForestDnsZones,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:03:43
Forest \| Replication from AD2 to AD1, Naming Context: DC=ad,DC=evotec,DC=pl	Forest			True	2019-09-08 17:03:43
Forest \| Replication from DC1 to AD1, Naming Context: DC=ad,DC=evotec,DC=pl	Forest			True	2019-09-08 17:03:43
Forest \| Replication from AD3 to AD1, Naming Context: DC=ad,DC=evotec,DC=pl	Forest			True	2019-09-08 17:03:43
Forest \| Replication from ADPREVIEW2019 to AD1, Naming Context: DC=ad,DC=evotec,DC=pl	Forest			True	2019-09-08 17:03:43
Forest \| Replication from AD1 to AD2, Naming Context: DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:18:22
Forest \| Replication from AD1 to AD2, Naming Context: CN=Configuration,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:03:46
Forest \| Replication from DC1 to AD2, Naming Context: CN=Configuration,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:09:05
Forest \| Replication from DC1 to AD2, Naming Context: CN=Schema,CN=Configuration,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:03:46
Forest \| Replication from AD1 to AD2, Naming Context: CN=Schema,CN=Configuration,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:03:46
Forest \| Replication from AD1 to AD2, Naming Context: DC=DomainDnsZones,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:03:46
Forest \| Replication from DC1 to AD2, Naming Context: DC=ForestDnsZones,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:03:46
Forest \| Replication from AD1 to AD2, Naming Context: DC=ForestDnsZones,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:03:46
Forest \| Replication from AD1 to AD2, Naming Context: DC=ad,DC=evotec,DC=pl	Forest			True	2019-09-08 17:03:46
Forest \| Replication from DC1 to AD2, Naming Context: DC=ad,DC=evotec,DC=pl	Forest			True	2019-09-08 17:03:46
Forest \| Replication from AD3 to ADPREVIEW2019, Naming Context: CN=Configuration,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:08:50
Forest \| Replication from DC1 to ADPREVIEW2019, Naming Context: CN=Configuration,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:08:59
Forest \| Replication from DC1 to ADPREVIEW2019, Naming Context: CN=Schema,CN=Configuration,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:04:14
Forest \| Replication from AD3 to ADPREVIEW2019, Naming Context: CN=Schema,CN=Configuration,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:04:14
Forest \| Replication from DC1 to ADPREVIEW2019, Naming Context: DC=ForestDnsZones,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:04:14
Forest \| Replication from AD3 to ADPREVIEW2019, Naming Context: DC=ForestDnsZones,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:04:14
Forest \| Replication from DC1 to ADPREVIEW2019, Naming Context: DC=ad,DC=evotec,DC=pl	Forest			True	2019-09-08 17:04:14
Forest \| Replication from DC1 to ADPREVIEW2019, Naming Context: DC=DomainDnsZones,DC=ad,DC=evotec,DC=pl	Forest			True	2019-09-08 17:04:14
Forest \| Replication from DC1 to ADPREVIEW2019, Naming Context: DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:04:14
Forest \| Replication from AD3 to ADPREVIEW2019, Naming Context: DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:04:14
Forest \| Replication from to ADRODC, Naming Context: LDAP error 81 (Server Down) Win32 Err 58.	Forest			False
Forest \| Replication from AD2 to AD3, Naming Context: DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:18:34
Forest \| Replication from AD2 to AD3, Naming Context: CN=Configuration,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:18:34
Forest \| Replication from ADPREVIEW2019 to AD3, Naming Context: CN=Configuration,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:18:34
Forest \| Replication from AD2 to AD3, Naming Context: CN=Schema,CN=Configuration,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:18:34
Forest \| Replication from ADPREVIEW2019 to AD3, Naming Context: CN=Schema,CN=Configuration,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:18:34
Forest \| Replication from AD2 to AD3, Naming Context: DC=ForestDnsZones,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:18:34
Forest \| Replication from ADPREVIEW2019 to AD3, Naming Context: DC=ForestDnsZones,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:18:34
Forest \| Replication from AD2 to AD3, Naming Context: DC=DomainDnsZones,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:18:34
Forest \| Replication from AD2 to AD3, Naming Context: DC=ad,DC=evotec,DC=pl	Forest			True	2019-09-08 17:18:34
Forest \| Replication from ADPREVIEW2019 to AD3, Naming Context: DC=ad,DC=evotec,DC=pl	Forest			True	2019-09-08 17:18:34
Forest \| Replication from ADPREVIEW2019 to DC1, Naming Context: CN=Configuration,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:18:44
Forest \| Replication from AD2 to DC1, Naming Context: CN=Configuration,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:18:44
Forest \| Replication from AD1 to DC1, Naming Context: CN=Configuration,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:18:44
Forest \| Replication from ADPREVIEW2019 to DC1, Naming Context: CN=Schema,CN=Configuration,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:18:44
Forest \| Replication from AD2 to DC1, Naming Context: CN=Schema,CN=Configuration,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:18:44
Forest \| Replication from AD1 to DC1, Naming Context: CN=Schema,CN=Configuration,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:18:44
Forest \| Replication from AD2 to DC1, Naming Context: DC=ForestDnsZones,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:18:44
Forest \| Replication from AD1 to DC1, Naming Context: DC=ForestDnsZones,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:18:44
Forest \| Replication from ADPREVIEW2019 to DC1, Naming Context: DC=ForestDnsZones,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:18:44
Forest \| Replication from ADPREVIEW2019 to DC1, Naming Context: DC=ad,DC=evotec,DC=pl	Forest			True	2019-09-08 17:18:44
Forest \| Replication from ADPREVIEW2019 to DC1, Naming Context: DC=DomainDnsZones,DC=ad,DC=evotec,DC=pl	Forest			True	2019-09-08 17:18:44
Forest \| Replication from ADPREVIEW2019 to DC1, Naming Context: DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:18:44
Forest \| Replication from AD2 to DC1, Naming Context: DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:18:44
Forest \| Replication from AD1 to DC1, Naming Context: DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:18:44
Forest \| Optional Features	Forest			True	Data is available.
Forest \| Recycle Bin Enabled	Forest			False	Expected value (Equal): True, Found value: False
Forest \| LAPS Schema Extended	Forest			False	Expected value (Equal): True, Found value: False
Forest \| Privileged Access Management Enabled	Forest			False	Expected value (Equal): True, Found value: False
Forest \| Roles availability	Forest			True	Data is available.
Forest \| Schema Master Availability	Forest			True	AD1.ad.evotec.xyz
Forest \| Domain Master Availability	Forest			True	AD1.ad.evotec.xyz
Forest \| Orphaned Administrative Objects (AdminCount)	Forest			False	Data is available. This is a bad thing.
Domain - ad.evotec.xyz \| Password Complexity Requirements	Domain	ad.evotec.xyz		True	Data is available.
Domain - ad.evotec.xyz \| Complexity Enabled	Domain	ad.evotec.xyz		True	Expected value (Equal): True
Domain - ad.evotec.xyz \| Lockout Duration	Domain	ad.evotec.xyz		True	Expected value (GreaterOrEqual): 30
Domain - ad.evotec.xyz \| Lockout Observation Window	Domain	ad.evotec.xyz		True	Expected value (GreaterOrEqual): 30
Domain - ad.evotec.xyz \| Lockout Threshold	Domain	ad.evotec.xyz		False	Expected value (GreaterThan): 5, Found value: 0
Domain - ad.evotec.xyz \| Max Password Age	Domain	ad.evotec.xyz		True	Expected value (LessOrEqual): 60
Domain - ad.evotec.xyz \| Min Password Length	Domain	ad.evotec.xyz		False	Expected value (GreaterThan): 8, Found value: 7
Domain - ad.evotec.xyz \| Min Password Age	Domain	ad.evotec.xyz		True	Expected value (LessOrEqual): 1
Domain - ad.evotec.xyz \| Password History Count	Domain	ad.evotec.xyz		True	Expected value (GreaterOrEqual): 10
Domain - ad.evotec.xyz \| Reversible Encryption Enabled	Domain	ad.evotec.xyz		True	Expected value (Equal): False
Domain - ad.evotec.xyz \| Group Policy Missing Permissions	Domain	ad.evotec.xyz		True	No data returned, which is a good thing.
Domain - ad.evotec.xyz \| Kerberos Account Age	Domain	ad.evotec.xyz		True	Data is available.
Domain - ad.evotec.xyz \| Kerberos Last Password Change Should be less than 180 days	Domain	ad.evotec.xyz		False	Expected value (GreaterThan): 12.03.2019 17:19:06, Found value: 05/20/2018 09:56:36
Domain Controller - ad1.ad.evotec.xyz \| Default SMB Shares	Domain Controller	ad.evotec.xyz	ad1.ad.evotec.xyz	True	Data is available.
Domain Controller - ad1.ad.evotec.xyz \| Remote Admin Share is available	Domain Controller	ad.evotec.xyz	ad1.ad.evotec.xyz	True	C:\Windows
Domain Controller - ad1.ad.evotec.xyz \| Default Share is available	Domain Controller	ad.evotec.xyz	ad1.ad.evotec.xyz	True	C:\
Domain Controller - ad1.ad.evotec.xyz \| Remote IPC Share is available	Domain Controller	ad.evotec.xyz	ad1.ad.evotec.xyz	True
Domain Controller - ad1.ad.evotec.xyz \| NETLOGON Share is available	Domain Controller	ad.evotec.xyz	ad1.ad.evotec.xyz	True	C:\Windows\SYSVOL\sysvol\ad.evotec.xyz\SCRIPTS
Domain Controller - ad1.ad.evotec.xyz \| SYSVOL Share is available	Domain Controller	ad.evotec.xyz	ad1.ad.evotec.xyz	True	C:\Windows\SYSVOL\sysvol
Domain Controller - ad2.ad.evotec.xyz \| Default SMB Shares	Domain Controller	ad.evotec.xyz	ad2.ad.evotec.xyz	True	Data is available.
Domain Controller - ad2.ad.evotec.xyz \| Remote Admin Share is available	Domain Controller	ad.evotec.xyz	ad2.ad.evotec.xyz	True	C:\Windows
Domain Controller - ad2.ad.evotec.xyz \| Default Share is available	Domain Controller	ad.evotec.xyz	ad2.ad.evotec.xyz	True	C:\
Domain Controller - ad2.ad.evotec.xyz \| Remote IPC Share is available	Domain Controller	ad.evotec.xyz	ad2.ad.evotec.xyz	True
Domain Controller - ad2.ad.evotec.xyz \| NETLOGON Share is available	Domain Controller	ad.evotec.xyz	ad2.ad.evotec.xyz	True	C:\Windows\SYSVOL\sysvol\ad.evotec.xyz\SCRIPTS
Domain Controller - ad2.ad.evotec.xyz \| SYSVOL Share is available	Domain Controller	ad.evotec.xyz	ad2.ad.evotec.xyz	True	C:\Windows\SYSVOL\sysvol
Domain Controller - ad3.ad.evotec.xyz \| Default SMB Shares	Domain Controller	ad.evotec.xyz	ad3.ad.evotec.xyz	True	Data is available.
Domain Controller - ad3.ad.evotec.xyz \| Remote Admin Share is available	Domain Controller	ad.evotec.xyz	ad3.ad.evotec.xyz	True	C:\Windows
Domain Controller - ad3.ad.evotec.xyz \| Default Share is available	Domain Controller	ad.evotec.xyz	ad3.ad.evotec.xyz	True	C:\
Domain Controller - ad3.ad.evotec.xyz \| Remote IPC Share is available	Domain Controller	ad.evotec.xyz	ad3.ad.evotec.xyz	True
Domain Controller - ad3.ad.evotec.xyz \| NETLOGON Share is available	Domain Controller	ad.evotec.xyz	ad3.ad.evotec.xyz	False
Domain Controller - ad3.ad.evotec.xyz \| SYSVOL Share is available	Domain Controller	ad.evotec.xyz	ad3.ad.evotec.xyz	False
Name	Type	Domain	DomainController	Status	Extended

Forest Replication using RepAdmin

repadmin /showrepl * /csv | ConvertFrom-Csv

showrepl_COLUMNS	Destination DSA Site	Destination DSA	Naming Context	Source DSA Site	Source DSA	Transport Type	Number of Failures	Last Failure Time	Last Success Time	Last Failure Status
showrepl_INFO	KATOWICE-1	AD1	DC=ad,DC=evotec,DC=xyz	KATOWICE-1	AD2	RPC	0	0	2019-09-08 17:03:43	0
showrepl_INFO	KATOWICE-1	AD1	DC=ad,DC=evotec,DC=xyz	KATOWICE-2	AD3	RPC	0	0	2019-09-08 17:03:43	0
showrepl_INFO	KATOWICE-1	AD1	CN=Configuration,DC=ad,DC=evotec,DC=xyz	KATOWICE-1	AD2	RPC	0	0	2019-09-08 17:03:43	0
showrepl_INFO	KATOWICE-1	AD1	CN=Configuration,DC=ad,DC=evotec,DC=xyz	KATOWICE-2	ADPREVIEW2019	RPC	0	0	2019-09-08 17:03:43	0
showrepl_INFO	KATOWICE-1	AD1	CN=Configuration,DC=ad,DC=evotec,DC=xyz	KATOWICE-2	AD3	RPC	0	0	2019-09-08 17:03:43	0
showrepl_INFO	KATOWICE-1	AD1	CN=Configuration,DC=ad,DC=evotec,DC=xyz	KATOWICE-1	DC1	RPC	0	0	2019-09-08 17:09:02	0
showrepl_INFO	KATOWICE-1	AD1	CN=Schema,CN=Configuration,DC=ad,DC=evotec,DC=xyz	KATOWICE-1	AD2	RPC	0	0	2019-09-08 17:03:43	0
showrepl_INFO	KATOWICE-1	AD1	CN=Schema,CN=Configuration,DC=ad,DC=evotec,DC=xyz	KATOWICE-1	DC1	RPC	0	0	2019-09-08 17:03:43	0
showrepl_INFO	KATOWICE-1	AD1	CN=Schema,CN=Configuration,DC=ad,DC=evotec,DC=xyz	KATOWICE-2	ADPREVIEW2019	RPC	0	0	2019-09-08 17:03:43	0
showrepl_INFO	KATOWICE-1	AD1	CN=Schema,CN=Configuration,DC=ad,DC=evotec,DC=xyz	KATOWICE-2	AD3	RPC	0	0	2019-09-08 17:03:43	0
showrepl_INFO	KATOWICE-1	AD1	DC=DomainDnsZones,DC=ad,DC=evotec,DC=xyz	KATOWICE-1	AD2	RPC	0	0	2019-09-08 17:03:43	0
showrepl_INFO	KATOWICE-1	AD1	DC=DomainDnsZones,DC=ad,DC=evotec,DC=xyz	KATOWICE-2	AD3	RPC	0	0	2019-09-08 17:03:43	0
showrepl_INFO	KATOWICE-1	AD1	DC=ForestDnsZones,DC=ad,DC=evotec,DC=xyz	KATOWICE-1	DC1	RPC	0	0	2019-09-08 17:03:43	0
showrepl_INFO	KATOWICE-1	AD1	DC=ForestDnsZones,DC=ad,DC=evotec,DC=xyz	KATOWICE-1	AD2	RPC	0	0	2019-09-08 17:03:43	0
showrepl_INFO	KATOWICE-1	AD1	DC=ForestDnsZones,DC=ad,DC=evotec,DC=xyz	KATOWICE-2	ADPREVIEW2019	RPC	0	0	2019-09-08 17:03:43	0
showrepl_INFO	KATOWICE-1	AD1	DC=ForestDnsZones,DC=ad,DC=evotec,DC=xyz	KATOWICE-2	AD3	RPC	0	0	2019-09-08 17:03:43	0
showrepl_INFO	KATOWICE-1	AD1	DC=ad,DC=evotec,DC=pl	KATOWICE-1	AD2	RPC	0	0	2019-09-08 17:03:43	0
showrepl_INFO	KATOWICE-1	AD1	DC=ad,DC=evotec,DC=pl	KATOWICE-1	DC1	RPC	0	0	2019-09-08 17:03:43	0
showrepl_INFO	KATOWICE-1	AD1	DC=ad,DC=evotec,DC=pl	KATOWICE-2	AD3	RPC	0	0	2019-09-08 17:03:43	0
showrepl_INFO	KATOWICE-1	AD1	DC=ad,DC=evotec,DC=pl	KATOWICE-2	ADPREVIEW2019	RPC	0	0	2019-09-08 17:03:43	0
showrepl_INFO	KATOWICE-1	AD2	DC=ad,DC=evotec,DC=xyz	KATOWICE-1	AD1	RPC	0	0	2019-09-08 17:18:22	0
showrepl_INFO	KATOWICE-1	AD2	CN=Configuration,DC=ad,DC=evotec,DC=xyz	KATOWICE-1	AD1	RPC	0	0	2019-09-08 17:03:46	0
showrepl_INFO	KATOWICE-1	AD2	CN=Configuration,DC=ad,DC=evotec,DC=xyz	KATOWICE-1	DC1	RPC	0	0	2019-09-08 17:09:05	0
showrepl_INFO	KATOWICE-1	AD2	CN=Schema,CN=Configuration,DC=ad,DC=evotec,DC=xyz	KATOWICE-1	DC1	RPC	0	0	2019-09-08 17:03:46	0
showrepl_INFO	KATOWICE-1	AD2	CN=Schema,CN=Configuration,DC=ad,DC=evotec,DC=xyz	KATOWICE-1	AD1	RPC	0	0	2019-09-08 17:03:46	0
showrepl_INFO	KATOWICE-1	AD2	DC=DomainDnsZones,DC=ad,DC=evotec,DC=xyz	KATOWICE-1	AD1	RPC	0	0	2019-09-08 17:03:46	0
showrepl_INFO	KATOWICE-1	AD2	DC=ForestDnsZones,DC=ad,DC=evotec,DC=xyz	KATOWICE-1	DC1	RPC	0	0	2019-09-08 17:03:46	0
showrepl_INFO	KATOWICE-1	AD2	DC=ForestDnsZones,DC=ad,DC=evotec,DC=xyz	KATOWICE-1	AD1	RPC	0	0	2019-09-08 17:03:46	0
showrepl_INFO	KATOWICE-1	AD2	DC=ad,DC=evotec,DC=pl	KATOWICE-1	AD1	RPC	0	0	2019-09-08 17:03:46	0
showrepl_INFO	KATOWICE-1	AD2	DC=ad,DC=evotec,DC=pl	KATOWICE-1	DC1	RPC	0	0	2019-09-08 17:03:46	0
showrepl_INFO	KATOWICE-2	ADPREVIEW2019	CN=Configuration,DC=ad,DC=evotec,DC=xyz	KATOWICE-2	AD3	RPC	0	0	2019-09-08 17:08:50	0
showrepl_INFO	KATOWICE-2	ADPREVIEW2019	CN=Configuration,DC=ad,DC=evotec,DC=xyz	KATOWICE-1	DC1	RPC	0	0	2019-09-08 17:08:59	0
showrepl_INFO	KATOWICE-2	ADPREVIEW2019	CN=Schema,CN=Configuration,DC=ad,DC=evotec,DC=xyz	KATOWICE-1	DC1	RPC	0	0	2019-09-08 17:04:14	0
showrepl_INFO	KATOWICE-2	ADPREVIEW2019	CN=Schema,CN=Configuration,DC=ad,DC=evotec,DC=xyz	KATOWICE-2	AD3	RPC	0	0	2019-09-08 17:04:14	0
showrepl_INFO	KATOWICE-2	ADPREVIEW2019	DC=ForestDnsZones,DC=ad,DC=evotec,DC=xyz	KATOWICE-1	DC1	RPC	0	0	2019-09-08 17:04:14	0
showrepl_INFO	KATOWICE-2	ADPREVIEW2019	DC=ForestDnsZones,DC=ad,DC=evotec,DC=xyz	KATOWICE-2	AD3	RPC	0	0	2019-09-08 17:04:14	0
showrepl_INFO	KATOWICE-2	ADPREVIEW2019	DC=ad,DC=evotec,DC=pl	KATOWICE-1	DC1	RPC	0	0	2019-09-08 17:04:14	0
showrepl_INFO	KATOWICE-2	ADPREVIEW2019	DC=DomainDnsZones,DC=ad,DC=evotec,DC=pl	KATOWICE-1	DC1	RPC	0	0	2019-09-08 17:04:14	0
showrepl_INFO	KATOWICE-2	ADPREVIEW2019	DC=ad,DC=evotec,DC=xyz	KATOWICE-1	DC1	RPC	0	0	2019-09-08 17:04:14	0
showrepl_INFO	KATOWICE-2	ADPREVIEW2019	DC=ad,DC=evotec,DC=xyz	KATOWICE-2	AD3	RPC	0	0	2019-09-08 17:04:14	0
showrepl_ERROR	-	ADRODC	LDAP error 81 (Server Down) Win32 Err 58.
showrepl_INFO	KATOWICE-2	AD3	DC=ad,DC=evotec,DC=xyz	KATOWICE-1	AD2	RPC	0	0	2019-09-08 17:18:34	0
showrepl_INFO	KATOWICE-2	AD3	CN=Configuration,DC=ad,DC=evotec,DC=xyz	KATOWICE-1	AD2	RPC	0	0	2019-09-08 17:18:34	0
showrepl_INFO	KATOWICE-2	AD3	CN=Configuration,DC=ad,DC=evotec,DC=xyz	KATOWICE-2	ADPREVIEW2019	RPC	0	0	2019-09-08 17:18:34	0
showrepl_INFO	KATOWICE-2	AD3	CN=Schema,CN=Configuration,DC=ad,DC=evotec,DC=xyz	KATOWICE-1	AD2	RPC	0	0	2019-09-08 17:18:34	0
showrepl_INFO	KATOWICE-2	AD3	CN=Schema,CN=Configuration,DC=ad,DC=evotec,DC=xyz	KATOWICE-2	ADPREVIEW2019	RPC	0	0	2019-09-08 17:18:34	0
showrepl_INFO	KATOWICE-2	AD3	DC=ForestDnsZones,DC=ad,DC=evotec,DC=xyz	KATOWICE-1	AD2	RPC	0	0	2019-09-08 17:18:34	0
showrepl_INFO	KATOWICE-2	AD3	DC=ForestDnsZones,DC=ad,DC=evotec,DC=xyz	KATOWICE-2	ADPREVIEW2019	RPC	0	0	2019-09-08 17:18:34	0
showrepl_INFO	KATOWICE-2	AD3	DC=DomainDnsZones,DC=ad,DC=evotec,DC=xyz	KATOWICE-1	AD2	RPC	0	0	2019-09-08 17:18:34	0
showrepl_INFO	KATOWICE-2	AD3	DC=ad,DC=evotec,DC=pl	KATOWICE-1	AD2	RPC	0	0	2019-09-08 17:18:34	0
showrepl_INFO	KATOWICE-2	AD3	DC=ad,DC=evotec,DC=pl	KATOWICE-2	ADPREVIEW2019	RPC	0	0	2019-09-08 17:18:34	0
showrepl_INFO	KATOWICE-1	DC1	CN=Configuration,DC=ad,DC=evotec,DC=xyz	KATOWICE-2	ADPREVIEW2019	RPC	0	0	2019-09-08 17:18:44	0
showrepl_INFO	KATOWICE-1	DC1	CN=Configuration,DC=ad,DC=evotec,DC=xyz	KATOWICE-1	AD2	RPC	0	0	2019-09-08 17:18:44	0
showrepl_INFO	KATOWICE-1	DC1	CN=Configuration,DC=ad,DC=evotec,DC=xyz	KATOWICE-1	AD1	RPC	0	0	2019-09-08 17:18:44	0
showrepl_INFO	KATOWICE-1	DC1	CN=Schema,CN=Configuration,DC=ad,DC=evotec,DC=xyz	KATOWICE-2	ADPREVIEW2019	RPC	0	0	2019-09-08 17:18:44	0
showrepl_INFO	KATOWICE-1	DC1	CN=Schema,CN=Configuration,DC=ad,DC=evotec,DC=xyz	KATOWICE-1	AD2	RPC	0	0	2019-09-08 17:18:44	0
showrepl_INFO	KATOWICE-1	DC1	CN=Schema,CN=Configuration,DC=ad,DC=evotec,DC=xyz	KATOWICE-1	AD1	RPC	0	0	2019-09-08 17:18:44	0
showrepl_INFO	KATOWICE-1	DC1	DC=ForestDnsZones,DC=ad,DC=evotec,DC=xyz	KATOWICE-1	AD2	RPC	0	0	2019-09-08 17:18:44	0
showrepl_INFO	KATOWICE-1	DC1	DC=ForestDnsZones,DC=ad,DC=evotec,DC=xyz	KATOWICE-1	AD1	RPC	0	0	2019-09-08 17:18:44	0
showrepl_INFO	KATOWICE-1	DC1	DC=ForestDnsZones,DC=ad,DC=evotec,DC=xyz	KATOWICE-2	ADPREVIEW2019	RPC	0	0	2019-09-08 17:18:44	0
showrepl_INFO	KATOWICE-1	DC1	DC=ad,DC=evotec,DC=pl	KATOWICE-2	ADPREVIEW2019	RPC	0	0	2019-09-08 17:18:44	0
showrepl_INFO	KATOWICE-1	DC1	DC=DomainDnsZones,DC=ad,DC=evotec,DC=pl	KATOWICE-2	ADPREVIEW2019	RPC	0	0	2019-09-08 17:18:44	0
showrepl_INFO	KATOWICE-1	DC1	DC=ad,DC=evotec,DC=xyz	KATOWICE-2	ADPREVIEW2019	RPC	0	0	2019-09-08 17:18:44	0
showrepl_INFO	KATOWICE-1	DC1	DC=ad,DC=evotec,DC=xyz	KATOWICE-1	AD2	RPC	0	0	2019-09-08 17:18:44	0
showrepl_INFO	KATOWICE-1	DC1	DC=ad,DC=evotec,DC=xyz	KATOWICE-1	AD1	RPC	0	0	2019-09-08 17:18:44	0
showrepl_COLUMNS	Destination DSA Site	Destination DSA	Naming Context	Source DSA Site	Source DSA	Transport Type	Number of Failures	Last Failure Time	Last Success Time	Last Failure Status

Name	Type	Domain	DomainController	Status	Extended
Forest \| Forest Replication using RepAdmin	Forest			True	Data is available.
Forest \| Replication from AD2 to AD1, Naming Context: DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:03:43
Forest \| Replication from AD3 to AD1, Naming Context: DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:03:43
Forest \| Replication from AD2 to AD1, Naming Context: CN=Configuration,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:03:43
Forest \| Replication from ADPREVIEW2019 to AD1, Naming Context: CN=Configuration,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:03:43
Forest \| Replication from AD3 to AD1, Naming Context: CN=Configuration,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:03:43
Forest \| Replication from DC1 to AD1, Naming Context: CN=Configuration,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:09:02
Forest \| Replication from AD2 to AD1, Naming Context: CN=Schema,CN=Configuration,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:03:43
Forest \| Replication from DC1 to AD1, Naming Context: CN=Schema,CN=Configuration,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:03:43
Forest \| Replication from ADPREVIEW2019 to AD1, Naming Context: CN=Schema,CN=Configuration,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:03:43
Forest \| Replication from AD3 to AD1, Naming Context: CN=Schema,CN=Configuration,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:03:43
Forest \| Replication from AD2 to AD1, Naming Context: DC=DomainDnsZones,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:03:43
Forest \| Replication from AD3 to AD1, Naming Context: DC=DomainDnsZones,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:03:43
Forest \| Replication from DC1 to AD1, Naming Context: DC=ForestDnsZones,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:03:43
Forest \| Replication from AD2 to AD1, Naming Context: DC=ForestDnsZones,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:03:43
Forest \| Replication from ADPREVIEW2019 to AD1, Naming Context: DC=ForestDnsZones,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:03:43
Forest \| Replication from AD3 to AD1, Naming Context: DC=ForestDnsZones,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:03:43
Forest \| Replication from AD2 to AD1, Naming Context: DC=ad,DC=evotec,DC=pl	Forest			True	2019-09-08 17:03:43
Forest \| Replication from DC1 to AD1, Naming Context: DC=ad,DC=evotec,DC=pl	Forest			True	2019-09-08 17:03:43
Forest \| Replication from AD3 to AD1, Naming Context: DC=ad,DC=evotec,DC=pl	Forest			True	2019-09-08 17:03:43
Forest \| Replication from ADPREVIEW2019 to AD1, Naming Context: DC=ad,DC=evotec,DC=pl	Forest			True	2019-09-08 17:03:43
Forest \| Replication from AD1 to AD2, Naming Context: DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:18:22
Forest \| Replication from AD1 to AD2, Naming Context: CN=Configuration,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:03:46
Forest \| Replication from DC1 to AD2, Naming Context: CN=Configuration,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:09:05
Forest \| Replication from DC1 to AD2, Naming Context: CN=Schema,CN=Configuration,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:03:46
Forest \| Replication from AD1 to AD2, Naming Context: CN=Schema,CN=Configuration,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:03:46
Forest \| Replication from AD1 to AD2, Naming Context: DC=DomainDnsZones,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:03:46
Forest \| Replication from DC1 to AD2, Naming Context: DC=ForestDnsZones,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:03:46
Forest \| Replication from AD1 to AD2, Naming Context: DC=ForestDnsZones,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:03:46
Forest \| Replication from AD1 to AD2, Naming Context: DC=ad,DC=evotec,DC=pl	Forest			True	2019-09-08 17:03:46
Forest \| Replication from DC1 to AD2, Naming Context: DC=ad,DC=evotec,DC=pl	Forest			True	2019-09-08 17:03:46
Forest \| Replication from AD3 to ADPREVIEW2019, Naming Context: CN=Configuration,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:08:50
Forest \| Replication from DC1 to ADPREVIEW2019, Naming Context: CN=Configuration,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:08:59
Forest \| Replication from DC1 to ADPREVIEW2019, Naming Context: CN=Schema,CN=Configuration,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:04:14
Forest \| Replication from AD3 to ADPREVIEW2019, Naming Context: CN=Schema,CN=Configuration,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:04:14
Forest \| Replication from DC1 to ADPREVIEW2019, Naming Context: DC=ForestDnsZones,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:04:14
Forest \| Replication from AD3 to ADPREVIEW2019, Naming Context: DC=ForestDnsZones,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:04:14
Forest \| Replication from DC1 to ADPREVIEW2019, Naming Context: DC=ad,DC=evotec,DC=pl	Forest			True	2019-09-08 17:04:14
Forest \| Replication from DC1 to ADPREVIEW2019, Naming Context: DC=DomainDnsZones,DC=ad,DC=evotec,DC=pl	Forest			True	2019-09-08 17:04:14
Forest \| Replication from DC1 to ADPREVIEW2019, Naming Context: DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:04:14
Forest \| Replication from AD3 to ADPREVIEW2019, Naming Context: DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:04:14
Forest \| Replication from to ADRODC, Naming Context: LDAP error 81 (Server Down) Win32 Err 58.	Forest			False
Forest \| Replication from AD2 to AD3, Naming Context: DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:18:34
Forest \| Replication from AD2 to AD3, Naming Context: CN=Configuration,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:18:34
Forest \| Replication from ADPREVIEW2019 to AD3, Naming Context: CN=Configuration,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:18:34
Forest \| Replication from AD2 to AD3, Naming Context: CN=Schema,CN=Configuration,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:18:34
Forest \| Replication from ADPREVIEW2019 to AD3, Naming Context: CN=Schema,CN=Configuration,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:18:34
Forest \| Replication from AD2 to AD3, Naming Context: DC=ForestDnsZones,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:18:34
Forest \| Replication from ADPREVIEW2019 to AD3, Naming Context: DC=ForestDnsZones,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:18:34
Forest \| Replication from AD2 to AD3, Naming Context: DC=DomainDnsZones,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:18:34
Forest \| Replication from AD2 to AD3, Naming Context: DC=ad,DC=evotec,DC=pl	Forest			True	2019-09-08 17:18:34
Forest \| Replication from ADPREVIEW2019 to AD3, Naming Context: DC=ad,DC=evotec,DC=pl	Forest			True	2019-09-08 17:18:34
Forest \| Replication from ADPREVIEW2019 to DC1, Naming Context: CN=Configuration,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:18:44
Forest \| Replication from AD2 to DC1, Naming Context: CN=Configuration,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:18:44
Forest \| Replication from AD1 to DC1, Naming Context: CN=Configuration,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:18:44
Forest \| Replication from ADPREVIEW2019 to DC1, Naming Context: CN=Schema,CN=Configuration,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:18:44
Forest \| Replication from AD2 to DC1, Naming Context: CN=Schema,CN=Configuration,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:18:44
Forest \| Replication from AD1 to DC1, Naming Context: CN=Schema,CN=Configuration,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:18:44
Forest \| Replication from AD2 to DC1, Naming Context: DC=ForestDnsZones,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:18:44
Forest \| Replication from AD1 to DC1, Naming Context: DC=ForestDnsZones,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:18:44
Forest \| Replication from ADPREVIEW2019 to DC1, Naming Context: DC=ForestDnsZones,DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:18:44
Forest \| Replication from ADPREVIEW2019 to DC1, Naming Context: DC=ad,DC=evotec,DC=pl	Forest			True	2019-09-08 17:18:44
Forest \| Replication from ADPREVIEW2019 to DC1, Naming Context: DC=DomainDnsZones,DC=ad,DC=evotec,DC=pl	Forest			True	2019-09-08 17:18:44
Forest \| Replication from ADPREVIEW2019 to DC1, Naming Context: DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:18:44
Forest \| Replication from AD2 to DC1, Naming Context: DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:18:44
Forest \| Replication from AD1 to DC1, Naming Context: DC=ad,DC=evotec,DC=xyz	Forest			True	2019-09-08 17:18:44
Name	Type	Domain	DomainController	Status	Extended

Optional Features

# Imports all commands / including private ones from PSWinDocumentation.AD
$ADModule = Import-Module PSWinDocumentation.AD -PassThru
& $ADModule { Get-WinADForestOptionalFeatures -WarningAction SilentlyContinue }

Name	Value
Recycle Bin Enabled	False
Privileged Access Management Feature Enabled	False
Laps Enabled	False
Name	Value

Name	Type	Domain	DomainController	Status	Extended
Forest \| Optional Features	Forest			True	Data is available.
Forest \| Recycle Bin Enabled	Forest			False	Expected value (Equal): True, Found value: False
Forest \| LAPS Schema Extended	Forest			False	Expected value (Equal): True, Found value: False
Forest \| Privileged Access Management Enabled	Forest			False	Expected value (Equal): True, Found value: False
Name	Type	Domain	DomainController	Status	Extended

Roles availability

Test-ADRolesAvailability

SchemaMaster	SchemaMasterAvailability	DomainNamingMaster	DomainNamingMasterAvailability
AD1.ad.evotec.xyz	True	AD1.ad.evotec.xyz	True
SchemaMaster	SchemaMasterAvailability	DomainNamingMaster	DomainNamingMasterAvailability

Name	Type	Domain	DomainController	Status	Extended
Forest \| Roles availability	Forest			True	Data is available.
Forest \| Schema Master Availability	Forest			True	AD1.ad.evotec.xyz
Forest \| Domain Master Availability	Forest			True	AD1.ad.evotec.xyz
Name	Type	Domain	DomainController	Status	Extended

Orphaned Administrative Objects (AdminCount)

Get-WinADPriviligedObjects -OrphanedOnly

DistinguishedName	Domain	IsMember	Admincount	AdminCountDate	Whencreated	ObjectClass
CN=Service Task Scheduler,OU=Users-Offboarded,OU=Production,DC=ad,DC=evotec,DC=xyz	ad.evotec.xyz	False	1	10.14.2018	09.07.2018 18:29:52	user
CN=Test User Test,OU=Users-O365,OU=Production,DC=ad,DC=evotec,DC=xyz	ad.evotec.xyz	False	1	08.05.2018	09.07.2018 20:39:49	user
CN=GDS-TestGroup2,OU=SecurityGroups,OU=Groups,OU=Production,DC=ad,DC=evotec,DC=xyz	ad.evotec.xyz	False	1	08.19.2018	30.07.2018 20:54:03	group
CN=GDS-TestGroup3,OU=SecurityGroups,OU=Groups,OU=Production,DC=ad,DC=evotec,DC=xyz	ad.evotec.xyz	False	1	08.19.2018	30.07.2018 21:02:37	group
CN=Special Test User,OU=Users-O365,OU=Production,DC=ad,DC=evotec,DC=xyz	ad.evotec.xyz	False	1	10.14.2018	05.08.2018 21:22:17	user
CN=Expiration Date Test,OU=Users-Offboarded,OU=Production,DC=ad,DC=evotec,DC=xyz	ad.evotec.xyz	False	1	08.19.2018	17.08.2018 21:17:47	user
CN=Some Mailbox,OU=Users-O365,OU=Production,DC=ad,DC=evotec,DC=xyz	ad.evotec.xyz	False	1	10.22.2018	17.09.2018 20:37:57	user
CN=Test Przemyslaw Klys,OU=Users,OU=Production,DC=ad,DC=evotec,DC=xyz	ad.evotec.xyz	False	1	02.18.2019	07.01.2019 19:20:13	user
DistinguishedName	Domain	IsMember	Admincount	AdminCountDate	Whencreated	ObjectClass

Name	Type	Domain	DomainController	Status	Extended
Forest \| Orphaned Administrative Objects (AdminCount)	Forest			False	Data is available. This is a bad thing.
Name	Type	Domain	DomainController	Status	Extended

Password Complexity Requirements

# Imports all commands / including private ones from PSWinDocumentation.AD
$ADModule = Import-Module PSWinDocumentation.AD -PassThru
& $ADModule { param($Domain); Get-WinADDomainDefaultPasswordPolicy -Domain $Domain } $Domain

Name	Value
Complexity Enabled	True
Lockout Duration	30
Lockout Observation Window	30
Lockout Threshold	0
Max Password Age	42
Min Password Length	7
Min Password Age	1
Password History Count	24
Reversible Encryption Enabled	False
Distinguished Name	DC=ad,DC=evotec,DC=xyz
Name	Value

Name	Type	Domain	DomainController	Status	Extended
Domain - ad.evotec.xyz \| Password Complexity Requirements	Domain	ad.evotec.xyz		True	Data is available.
Domain - ad.evotec.xyz \| Complexity Enabled	Domain	ad.evotec.xyz		True	Expected value (Equal): True
Domain - ad.evotec.xyz \| Lockout Duration	Domain	ad.evotec.xyz		True	Expected value (GreaterOrEqual): 30
Domain - ad.evotec.xyz \| Lockout Observation Window	Domain	ad.evotec.xyz		True	Expected value (GreaterOrEqual): 30
Domain - ad.evotec.xyz \| Lockout Threshold	Domain	ad.evotec.xyz		False	Expected value (GreaterThan): 5, Found value: 0
Domain - ad.evotec.xyz \| Max Password Age	Domain	ad.evotec.xyz		True	Expected value (LessOrEqual): 60
Domain - ad.evotec.xyz \| Min Password Length	Domain	ad.evotec.xyz		False	Expected value (GreaterThan): 8, Found value: 7
Domain - ad.evotec.xyz \| Min Password Age	Domain	ad.evotec.xyz		True	Expected value (LessOrEqual): 1
Domain - ad.evotec.xyz \| Password History Count	Domain	ad.evotec.xyz		True	Expected value (GreaterOrEqual): 10
Domain - ad.evotec.xyz \| Reversible Encryption Enabled	Domain	ad.evotec.xyz		True	Expected value (Equal): False
Name	Type	Domain	DomainController	Status	Extended

Group Policy Missing Permissions

Get-WinADGPOMissingPermissions -Domain $Domain

*
No data available.

Name	Type	Domain	DomainController	Status	Extended
Domain - ad.evotec.xyz \| Group Policy Missing Permissions	Domain	ad.evotec.xyz		True	No data returned, which is a good thing.
Name	Type	Domain	DomainController	Status	Extended

Kerberos Account Age

Get-ADUser -Identity krbtgt -Properties Created, PasswordLastSet, msDS-KeyVersionNumber -Server $Domain

Created	DistinguishedName	Enabled	Extended	GivenName	msDS-KeyVersionNumber	Name	ObjectClass	ObjectGUID	Output	PasswordLastSet	SamAccountName	SID	Surname	UserPrincipalName	PropertyNames	AddedProperties	RemovedProperties	ModifiedProperties	PropertyCount
20.05.2018 09:56:36	CN=krbtgt,CN=Users,DC=ad,DC=evotec,DC=xyz	False	Microsoft.ActiveDirectory.Management.ADPropertyValueCollection		2	krbtgt	user	10df541d-62bf-433c-a967-3c4481ea7d37	Microsoft.ActiveDirectory.Management.ADPropertyValueCollection	20.05.2018 09:56:36	krbtgt	S-1-5-21-853615985-2870445339-3163598659-502			System.Collections.Generic.SortedDictionary`2+KeyCollection[System.String,Microsoft.ActiveDirectory.Management.ADPropertyValueCollection]	System.Collections.Generic.HashSet`1[System.String]	System.Collections.Generic.HashSet`1[System.String]	System.Collections.Generic.HashSet`1[System.String]	15
Created	DistinguishedName	Enabled	Extended	GivenName	msDS-KeyVersionNumber	Name	ObjectClass	ObjectGUID	Output	PasswordLastSet	SamAccountName	SID	Surname	UserPrincipalName	PropertyNames	AddedProperties	RemovedProperties	ModifiedProperties	PropertyCount

Name	Type	Domain	DomainController	Status	Extended
Domain - ad.evotec.xyz \| Kerberos Account Age	Domain	ad.evotec.xyz		True	Data is available.
Domain - ad.evotec.xyz \| Kerberos Last Password Change Should be less than 180 days	Domain	ad.evotec.xyz		False	Expected value (GreaterThan): 12.03.2019 17:19:06, Found value: 05/20/2018 09:56:36
Name	Type	Domain	DomainController	Status	Extended

Domain Controller - ad1.ad.evotec.xyz

Default SMB Shares

Get-ComputerSMBShare -ComputerName $DomainController

PSShowComputerName	PresetPathAcl	ShareState	AvailabilityType	ShareType	FolderEnumerationMode	CachingMode	LeasingMode	SmbInstance	CATimeout	ConcurrentUserLimit	ContinuouslyAvailable	CurrentUsers	Description	EncryptData	Name	Path	Scoped	ScopeName	SecurityDescriptor	ShadowCopy	Special	Temporary	Volume	PSComputerName	CimClass	CimInstanceProperties	CimSystemProperties
True		Online	NonClustered	FileSystemDirectory	Unrestricted	Manual		Default	0	0	False	0	Remote Admin	False	ADMIN$	C:\Windows	False	*	O:SYG:SYD:(A;;GA;;;BA)(A;;GA;;;BO)(A;;GA;;;IU)	False	True	False	\\?\Volume{2014dd39-5b27-44a6-be88-1d650346016d}\	ad1.ad.evotec.xyz	root/microsoft/windows/smb:MSFT_SmbShare	Microsoft.Management.Infrastructure.Internal.Data.CimPropertiesCollection	Microsoft.Management.Infrastructure.CimSystemProperties
True		Online	NonClustered	FileSystemDirectory	Unrestricted	Manual		Default	0	0	False	0	Default share	False	C$	C:\	False	*	O:SYG:SYD:(A;;GA;;;BA)(A;;GA;;;BO)(A;;GA;;;IU)	False	True	False	\\?\Volume{2014dd39-5b27-44a6-be88-1d650346016d}\	ad1.ad.evotec.xyz	root/microsoft/windows/smb:MSFT_SmbShare	Microsoft.Management.Infrastructure.Internal.Data.CimPropertiesCollection	Microsoft.Management.Infrastructure.CimSystemProperties
True		Online	NonClustered	InterprocessCommunication	Unrestricted	Manual		Default	0	0	False	1	Remote IPC	False	IPC$		False	*	O:SYG:SYD:(A;;GA;;;BA)(A;;GA;;;BO)(A;;GA;;;IU)	False	True	False		ad1.ad.evotec.xyz	root/microsoft/windows/smb:MSFT_SmbShare	Microsoft.Management.Infrastructure.Internal.Data.CimPropertiesCollection	Microsoft.Management.Infrastructure.CimSystemProperties
True		Online	NonClustered	FileSystemDirectory	Unrestricted	Manual		Default	0	0	False	0	Logon server share	False	NETLOGON	C:\Windows\SYSVOL\sysvol\ad.evotec.xyz\SCRIPTS	False	*	O:BAG:SYD:(A;;0x1200a9;;;WD)(A;;FA;;;BA)	False	False	False	\\?\Volume{2014dd39-5b27-44a6-be88-1d650346016d}\	ad1.ad.evotec.xyz	root/microsoft/windows/smb:MSFT_SmbShare	Microsoft.Management.Infrastructure.Internal.Data.CimPropertiesCollection	Microsoft.Management.Infrastructure.CimSystemProperties
True		Online	NonClustered	FileSystemDirectory	Unrestricted	Manual		Default	0	0	False	1	Logon server share	False	SYSVOL	C:\Windows\SYSVOL\sysvol	False	*	O:BAG:SYD:(A;;0x1200a9;;;WD)(A;;FA;;;BA)(A;;FA;;;AU)	False	False	False	\\?\Volume{2014dd39-5b27-44a6-be88-1d650346016d}\	ad1.ad.evotec.xyz	root/microsoft/windows/smb:MSFT_SmbShare	Microsoft.Management.Infrastructure.Internal.Data.CimPropertiesCollection	Microsoft.Management.Infrastructure.CimSystemProperties
PSShowComputerName	PresetPathAcl	ShareState	AvailabilityType	ShareType	FolderEnumerationMode	CachingMode	LeasingMode	SmbInstance	CATimeout	ConcurrentUserLimit	ContinuouslyAvailable	CurrentUsers	Description	EncryptData	Name	Path	Scoped	ScopeName	SecurityDescriptor	ShadowCopy	Special	Temporary	Volume	PSComputerName	CimClass	CimInstanceProperties	CimSystemProperties

Name	Type	Domain	DomainController	Status	Extended
Domain Controller - ad1.ad.evotec.xyz \| Default SMB Shares	Domain Controller	ad.evotec.xyz	ad1.ad.evotec.xyz	True	Data is available.
Domain Controller - ad1.ad.evotec.xyz \| Remote Admin Share is available	Domain Controller	ad.evotec.xyz	ad1.ad.evotec.xyz	True	C:\Windows
Domain Controller - ad1.ad.evotec.xyz \| Default Share is available	Domain Controller	ad.evotec.xyz	ad1.ad.evotec.xyz	True	C:\
Domain Controller - ad1.ad.evotec.xyz \| Remote IPC Share is available	Domain Controller	ad.evotec.xyz	ad1.ad.evotec.xyz	True
Domain Controller - ad1.ad.evotec.xyz \| NETLOGON Share is available	Domain Controller	ad.evotec.xyz	ad1.ad.evotec.xyz	True	C:\Windows\SYSVOL\sysvol\ad.evotec.xyz\SCRIPTS
Domain Controller - ad1.ad.evotec.xyz \| SYSVOL Share is available	Domain Controller	ad.evotec.xyz	ad1.ad.evotec.xyz	True	C:\Windows\SYSVOL\sysvol
Name	Type	Domain	DomainController	Status	Extended

Domain Controller - ad2.ad.evotec.xyz

Default SMB Shares

Get-ComputerSMBShare -ComputerName $DomainController

PSShowComputerName	PresetPathAcl	ShareState	AvailabilityType	ShareType	FolderEnumerationMode	CachingMode	LeasingMode	SmbInstance	CATimeout	ConcurrentUserLimit	ContinuouslyAvailable	CurrentUsers	Description	EncryptData	Name	Path	Scoped	ScopeName	SecurityDescriptor	ShadowCopy	Special	Temporary	Volume	PSComputerName	CimClass	CimInstanceProperties	CimSystemProperties
True		Online	NonClustered	FileSystemDirectory	Unrestricted	Manual		Default	0	0	False	0	Remote Admin	False	ADMIN$	C:\Windows	False	*	O:SYG:SYD:(A;;GA;;;BA)(A;;GA;;;BO)(A;;GA;;;IU)	False	True	False	\\?\Volume{922cfce7-ca24-49e5-a77b-8a4c6fb8975c}\	ad2.ad.evotec.xyz	root/microsoft/windows/smb:MSFT_SmbShare	Microsoft.Management.Infrastructure.Internal.Data.CimPropertiesCollection	Microsoft.Management.Infrastructure.CimSystemProperties
True		Online	NonClustered	FileSystemDirectory	Unrestricted	Manual		Default	0	0	False	0	Default share	False	C$	C:\	False	*	O:SYG:SYD:(A;;GA;;;BA)(A;;GA;;;BO)(A;;GA;;;IU)	False	True	False	\\?\Volume{922cfce7-ca24-49e5-a77b-8a4c6fb8975c}\	ad2.ad.evotec.xyz	root/microsoft/windows/smb:MSFT_SmbShare	Microsoft.Management.Infrastructure.Internal.Data.CimPropertiesCollection	Microsoft.Management.Infrastructure.CimSystemProperties
True		Online	NonClustered	FileSystemDirectory	Unrestricted	Manual		Default	0	0	False	0	Default share	False	E$	E:\	False	*	O:SYG:SYD:(A;;GA;;;BA)(A;;GA;;;BO)(A;;GA;;;IU)	False	True	False	\\?\Volume{3c856b2a-ae38-437b-9d38-e0eed02f0552}\	ad2.ad.evotec.xyz	root/microsoft/windows/smb:MSFT_SmbShare	Microsoft.Management.Infrastructure.Internal.Data.CimPropertiesCollection	Microsoft.Management.Infrastructure.CimSystemProperties
True		Online	NonClustered	InterprocessCommunication	Unrestricted	Manual		Default	0	0	False	0	Remote IPC	False	IPC$		False	*	O:SYG:SYD:(A;;GA;;;BA)(A;;GA;;;BO)(A;;GA;;;IU)	False	True	False		ad2.ad.evotec.xyz	root/microsoft/windows/smb:MSFT_SmbShare	Microsoft.Management.Infrastructure.Internal.Data.CimPropertiesCollection	Microsoft.Management.Infrastructure.CimSystemProperties
True		Online	NonClustered	FileSystemDirectory	Unrestricted	Manual		Default	0	0	False	0	Logon server share	False	NETLOGON	C:\Windows\SYSVOL\sysvol\ad.evotec.xyz\SCRIPTS	False	*	O:BAG:SYD:(A;;0x1200a9;;;WD)(A;;FA;;;BA)	False	False	False	\\?\Volume{922cfce7-ca24-49e5-a77b-8a4c6fb8975c}\	ad2.ad.evotec.xyz	root/microsoft/windows/smb:MSFT_SmbShare	Microsoft.Management.Infrastructure.Internal.Data.CimPropertiesCollection	Microsoft.Management.Infrastructure.CimSystemProperties
True		Online	NonClustered	FileSystemDirectory	Unrestricted	Manual		Default	0	0	False	1	Logon server share	False	SYSVOL	C:\Windows\SYSVOL\sysvol	False	*	O:BAG:SYD:(A;;0x1200a9;;;WD)(A;;FA;;;BA)(A;;FA;;;AU)	False	False	False	\\?\Volume{922cfce7-ca24-49e5-a77b-8a4c6fb8975c}\	ad2.ad.evotec.xyz	root/microsoft/windows/smb:MSFT_SmbShare	Microsoft.Management.Infrastructure.Internal.Data.CimPropertiesCollection	Microsoft.Management.Infrastructure.CimSystemProperties
PSShowComputerName	PresetPathAcl	ShareState	AvailabilityType	ShareType	FolderEnumerationMode	CachingMode	LeasingMode	SmbInstance	CATimeout	ConcurrentUserLimit	ContinuouslyAvailable	CurrentUsers	Description	EncryptData	Name	Path	Scoped	ScopeName	SecurityDescriptor	ShadowCopy	Special	Temporary	Volume	PSComputerName	CimClass	CimInstanceProperties	CimSystemProperties

Name	Type	Domain	DomainController	Status	Extended
Domain Controller - ad2.ad.evotec.xyz \| Default SMB Shares	Domain Controller	ad.evotec.xyz	ad2.ad.evotec.xyz	True	Data is available.
Domain Controller - ad2.ad.evotec.xyz \| Remote Admin Share is available	Domain Controller	ad.evotec.xyz	ad2.ad.evotec.xyz	True	C:\Windows
Domain Controller - ad2.ad.evotec.xyz \| Default Share is available	Domain Controller	ad.evotec.xyz	ad2.ad.evotec.xyz	True	C:\
Domain Controller - ad2.ad.evotec.xyz \| Remote IPC Share is available	Domain Controller	ad.evotec.xyz	ad2.ad.evotec.xyz	True
Domain Controller - ad2.ad.evotec.xyz \| NETLOGON Share is available	Domain Controller	ad.evotec.xyz	ad2.ad.evotec.xyz	True	C:\Windows\SYSVOL\sysvol\ad.evotec.xyz\SCRIPTS
Domain Controller - ad2.ad.evotec.xyz \| SYSVOL Share is available	Domain Controller	ad.evotec.xyz	ad2.ad.evotec.xyz	True	C:\Windows\SYSVOL\sysvol
Name	Type	Domain	DomainController	Status	Extended

Domain Controller - ad3.ad.evotec.xyz

Default SMB Shares

Get-ComputerSMBShare -ComputerName $DomainController

PSShowComputerName	PresetPathAcl	ShareState	AvailabilityType	ShareType	FolderEnumerationMode	CachingMode	LeasingMode	SmbInstance	CATimeout	ConcurrentUserLimit	ContinuouslyAvailable	CurrentUsers	Description	EncryptData	IdentityRemoting	Infrastructure	Name	Path	Scoped	ScopeName	SecurityDescriptor	ShadowCopy	Special	Temporary	Volume	PSComputerName	CimClass	CimInstanceProperties	CimSystemProperties
True		Online	NonClustered	FileSystemDirectory	Unrestricted	Manual	Full	Default	0	0	False	0	Remote Admin	False	False	False	ADMIN$	C:\Windows	False	*	O:SYG:SYD:(A;;GA;;;BA)(A;;GA;;;BO)(A;;GA;;;IU)	False	True	False	\\?\Volume{85a75cb4-1376-4787-93dc-9bbb51086c65}\	ad3.ad.evotec.xyz	root/microsoft/windows/smb:MSFT_SmbShare	Microsoft.Management.Infrastructure.Internal.Data.CimPropertiesCollection	Microsoft.Management.Infrastructure.CimSystemProperties
True		Online	NonClustered	FileSystemDirectory	Unrestricted	Manual	Full	Default	0	0	False	0	Default share	False	False	False	C$	C:\	False	*	O:SYG:SYD:(A;;GA;;;BA)(A;;GA;;;BO)(A;;GA;;;IU)	False	True	False	\\?\Volume{85a75cb4-1376-4787-93dc-9bbb51086c65}\	ad3.ad.evotec.xyz	root/microsoft/windows/smb:MSFT_SmbShare	Microsoft.Management.Infrastructure.Internal.Data.CimPropertiesCollection	Microsoft.Management.Infrastructure.CimSystemProperties
True		Online	NonClustered	InterprocessCommunication	Unrestricted	Manual	Full	Default	0	0	False	0	Remote IPC	False	False	False	IPC$		False	*	O:SYG:SYD:(A;;GA;;;BA)(A;;GA;;;BO)(A;;GA;;;IU)	False	True	False		ad3.ad.evotec.xyz	root/microsoft/windows/smb:MSFT_SmbShare	Microsoft.Management.Infrastructure.Internal.Data.CimPropertiesCollection	Microsoft.Management.Infrastructure.CimSystemProperties
PSShowComputerName	PresetPathAcl	ShareState	AvailabilityType	ShareType	FolderEnumerationMode	CachingMode	LeasingMode	SmbInstance	CATimeout	ConcurrentUserLimit	ContinuouslyAvailable	CurrentUsers	Description	EncryptData	IdentityRemoting	Infrastructure	Name	Path	Scoped	ScopeName	SecurityDescriptor	ShadowCopy	Special	Temporary	Volume	PSComputerName	CimClass	CimInstanceProperties	CimSystemProperties

Name	Type	Domain	DomainController	Status	Extended
Domain Controller - ad3.ad.evotec.xyz \| Default SMB Shares	Domain Controller	ad.evotec.xyz	ad3.ad.evotec.xyz	True	Data is available.
Domain Controller - ad3.ad.evotec.xyz \| Remote Admin Share is available	Domain Controller	ad.evotec.xyz	ad3.ad.evotec.xyz	True	C:\Windows
Domain Controller - ad3.ad.evotec.xyz \| Default Share is available	Domain Controller	ad.evotec.xyz	ad3.ad.evotec.xyz	True	C:\
Domain Controller - ad3.ad.evotec.xyz \| Remote IPC Share is available	Domain Controller	ad.evotec.xyz	ad3.ad.evotec.xyz	True
Domain Controller - ad3.ad.evotec.xyz \| NETLOGON Share is available	Domain Controller	ad.evotec.xyz	ad3.ad.evotec.xyz	False
Domain Controller - ad3.ad.evotec.xyz \| SYSVOL Share is available	Domain Controller	ad.evotec.xyz	ad3.ad.evotec.xyz	False
Name	Type	Domain	DomainController	Status	Extended