Service scope, not assessment findings
These assessment areas help you identify the environment and issues to review. They are not findings from a specific customer environment. Agree scope, access, test windows and deliverables before work begins.
Directory infrastructure
Review domain controller distribution, FSMO roles, Global Catalog and site/subnet configuration.
Replication health
Review replication status, latency, topology and site links to identify issues for investigation.
DNS and time synchronization
Review AD-related DNS records, stale-record cleanup and the time synchronization hierarchy.
Accounts and permissions
Review privileged groups, account policies, Kerberos settings and account hygiene.
Performance and capacity
Review SYSVOL, NETLOGON, database growth, disk space and event log configuration.
Backup and maintenance
Review System State backups, restore tests, object cleanup and maintenance. Validate backup usability and retention against the environment.
Updates and functional levels
Review OS versions, update status and forest/domain functional levels against applicable version requirements.
Getting started
Share versions, an architecture overview and current issues to discuss an assessment. Remediation and changes follow a separately agreed scope.
