Active Directory Health Check Report

Executive Summary

This comprehensive report provides a complete assessment of the Active Directory environment for mohammed.com.np across all 2 Domain Controllers.

Domain Controllers

2

Critical Issues

0

Warnings

0

Overall Score

79%

Total Users

6

Total Computers

9

Total GPOs

3

Replication Issues

0

Environment Overview

Property	Value
Domain Functional Level	Windows2016Domain
Forest Functional Level	Windows2016Forest
Domain SID	S-1-5-21-3853461948-1335078521-3861204373
Child Domains	0
Sites	1
Trust Relationships	N/A

Domain Controller Health & Performance

DC Name	Site	Roles	CPU Usage	Memory Usage	Disk Free (C:)	Uptime	Status
DC01.mohammed.com.np	Default-First-Site-Name	PDC, RID, Infra, Schema, DomainNaming	0.6%	44.9%	35.6 GB free / 49.4 GB total	17 days	Healthy
DC02.mohammed.com.np	Default-First-Site-Name	Member	1.3%	37%	44.7 GB free / 69.2 GB total	2 days	Healthy

Active Directory Services Status

DC Name	NTDS	DNS	Netlogon	KDC	W32Time	Overall
DC01.mohammed.com.np	Running	Running	Running	Running	Running	Healthy
DC02.mohammed.com.np	Running	Running	Running	Running	Running	Healthy

Group Policy Analysis

Total GPOs

3

Unlinked GPOs

0

Stale GPOs

0

Orphaned GPOs

0

Top 10 Largest GPOs

GPO Name	Last Modified	Status
Default Domain Controllers Policy	2025-12-11	OK
Default Domain Policy	2025-12-11	OK
MECM Firewall Policy	2025-12-15	OK

DNS Health Status

DC Name	Total Zones	Forward Zones	Reverse Zones	AD Integrated	Stale Records	Scavenging	Status
DC01.mohammed.com.np	8	3	5	5	0	Disabled	Not Checked
DC02.mohammed.com.np	8	3	5	5	0	Disabled	Not Checked

AD Sites & Replication

Total Sites

1

Replication Issues

0

Site List

Site Name	Location	Description
Default-First-Site-Name

FSMO Roles Status

Role	Role Type	Current Holder	Online Status	Recommendation
Schema Master	Forest	DC01.mohammed.com.np	Online	No action required
Domain Naming Master	Forest	DC01.mohammed.com.np	Online	No action required
PDC Emulator	Domain	DC01.mohammed.com.np	Online	No action required
RID Master	Domain	DC01.mohammed.com.np	Online	No action required
Infrastructure Master	Domain	DC01.mohammed.com.np	Online	Ensure this role is NOT on a Global Catalog server

Backup Status

DC Name	Last Backup	Days Since	Status	Action Required
DC01.mohammed.com.np	No recent backups	999	Critical	Immediate backup required
DC02.mohammed.com.np	No recent backups	999	Critical	Immediate backup required

User Account Analysis

Total Users

6

Enabled

4

Disabled

2

Locked

0

Metric	Count	Status	Recommendation
Password Never Expires	5	Non-Compliant	Review and update password policies
Password Expired	0	OK	No action
Inactive 30+ days	0	Monitor	No action
Inactive 60+ days	0	OK	No action
Inactive 90+ days	0	OK	No action

Computer Account Analysis

Total Computers

9

Servers

9

Workstations

0

Disabled

Domain Controllers

2

Inactivity Period	Status	Action
30+ days inactive	Monitor	No action
60+ days inactive	OK	No action
90+ days inactive	OK	No action

Comprehensive Recommendations

Priority Actions (1-3 days):

RECOVERY: Perform immediate backups on DCs without recent backups

Medium Priority Actions (1-2 weeks):

SECURITY: Review 5 accounts with non-expiring passwords

Long-term Improvements (1 month):

SECURITY: Increase minimum password length to 14 characters
AUTOMATION: Implement automated AD health monitoring
DOCUMENTATION: Update AD recovery and maintenance procedures
TRAINING: Conduct AD administration best practices training

Next Steps:

Review this report with IT leadership within 24 hours
Create action plan with priorities and owners
Schedule daily follow-ups on critical items
Schedule comprehensive reassessment in 30 days
Consider third-party AD management tools for advanced monitoring