Monitor health of DFSR and SYSVOL in your Active Directory are quite number of tasks in which an Active Directory administrator should always perform regularly during the day. These task can be varied from performing backups to troubleshooting serious problems of an Active Directory environment. Talking about tasks, some people tend to patrol through the different areas like ‘Event Viewer’ to find more information about the health of the infrastructure, some other people including me or maybe you, prefer to use other methods to do these same tasks with maximum efficiency. Some clear example of these methods are using SCOM or PowerShell scripting.

Tracking Account Lockouts

In any size of network which is based on Active Directory you have experienced the account lock out problem. You simply ask yourself why it is locked? I am more than a hundred percent sure that I am entering my password in a correct form but why it becomes locked again and again? The answer might be a bit general: “It depends on many reasons”. Although entering the password in the wrong form turns out to be the first reason of account locked out problems, there are plenty of reasons behind this incidence. I am going to cover how you can find out the source of problem with a simple GPO and then your enterprise will be problem free.