Tool to verify schema update content is really there.
are there tools can read ad schema , verify it's updates have been completed based on content?
i have been spending lot of time looking , have come tools or posts detail checking forestupdates revision (cn=windows2003update,cn=forestupdates,cn=configuration,dc=sourcegas,dc=com revision attribue) and schema objectversion (cn=schema,cn=configuration,dc=sourcegas,dc=com objectversion attribute) values. have verified these @ 9 , 31 respectively. have also looked up my functional levels in ad domains , trusts. both forest , domain show 2003. have yet find can verify the requisite changes made schema.
here's scenario. running @ 2003 functional level , have been while. original domain created 2003 se i'm pretty confident schema point. however, have had new dcs created 2003 r2 , i'm not @ sure adprep process performed prior first 1 being dcpromo'ed. we're getting ready bring 2008 r2 dcs, before update schema that, want make sure there 2003 r2 there.
now, fair, don't know if have problem or not. given complete lack of posts, anywhere far have been able tell (i hate trying prove logical negatives) think may letting natural paranoia take me on wild goose chase. however, i have found enough know there is the potential problem, albiet failed attempts @ running adprep, , want make sure don't have 1 before go ahead , perform procedure make worse.
are there tools can read ad schema , verify it's updates have been completed based on content?
i have been spending lot of time looking , have come tools or posts detail checking forestupdates revision (cn=windows2003update,cn=forestupdates,cn=configuration,dc=sourcegas,dc=com revision attribue) and schema objectversion (cn=schema,cn=configuration,dc=sourcegas,dc=com objectversion attribute) values. have verified these @ 9 , 31 respectively. have also looked up my functional levels in ad domains , trusts. both forest , domain show 2003. have yet find can verify the requisite changes made schema.
here's scenario. running @ 2003 functional level , have been while. original domain created 2003 se i'm pretty confident schema point. however, have had new dcs created 2003 r2 , i'm not @ sure adprep process performed prior first 1 being dcpromo'ed. we're getting ready bring 2008 r2 dcs, before update schema that, want make sure there 2003 r2 there.
it had done prior first 1 being deployed. you not have been able introduce 2003 r2 dcs without schema being updated/prepped
can download adfind by joe richards http://www.joeware.net/freetools/tools/adfind/index.htm
run
adfind -sc schver
47 = 2008 r2
44 = 2008
31 = w2k3 r2
30 = w2k3
13= w2k
...just want see version at
thanks
mike
http://adisfun.blogspot.com;
Windows Server > Directory Services
Comments
Post a Comment