Active Directory/Scripts & Tools

Existing

Stuff You See

• DNS Suffix Report
  • Checks that computers are registered in QIP and that they are registered with the correct DNS suffix.
  • Only sends report if there are problems detected.
  • Runs weekly on Mondays at 8:00 AM.

Stuff You Don't See

• LAPCrawler Report
  • Summarizes the results of the Local Administrator Password Change Crawler (LAPCrawl) for the past 24 hours.
  • LAPCrawl is currently only utilized for ECE OU computers.
  • Runs every day at 8:00 AM.
• AD Object Report
  • Summarizes all creations, deletions, and modifications of Active Directory objects in the last 24 hours.
  • Runs every day at 8:00 AM.
• Admin Usage Report
  • Summarizes all usages of administrative accounts (*.admin, *.ouadmin, and *.domadmin) in the last 24 hours.
  • Runs every day at 8:00 AM.
• Backup DC System State
  • Does a complete backup of each domain controller.
  • Full backups are done weekly every Saturday morning.
  • Incremental backups are done every Tuesday, Wednesday, Thursday, and Friday morning.
• DC Health Report
  • Checks the status of the domain controllers using the dcdiag utility.
  • Runs every day at
• Cleanup DC Backups
  • Deletes old DC backups.
  • Deletes all incremental backups.
  • Deletes full backups older than 27 days.
  • Runs weekly on Saturdays at 12:00 AM.
• Duplicate Computer Accounts Report
  • Detects duplicate computer accounts that exist on both the ECEW2K and WOLFTECH domains.
  • Runs every day at AM.
• EventLog Errors Report
  • Summarizes EventLog errors from domain and ECE departmental servers in the past 1 hour.
  • Runs every hour at 45 mins past the hour.
• GPO Delegation
  • Delegates permissions on group policy objects.
  • Gives NCSU-Departmental OU Admins read permissions on domain/NCSU GPOs.
  • Gives COE-Departmental OU Admins read permissions on COE GPOs.
  • Gives ECE OU Admins full permissions on ECE GPOs.
  • Gives CNR OU Admins full permissions on CNR GPOs.
  • Gives BME OU Admins full permissions on BME GPOs.
  • Gives NCSU-Software Packages full permissions on SW-NCSU* and FW-NCSU* GPOs.
  • Gives COE-Software Packages full permissions on SW-COE* GPOs.
  • Gives ECE-Software Packages full permissions on SW-ECE* GPOs.
  • Runs daily at 3:30 AM.
• Group Membership Modified Report
• GuardDog Groups Manager Report
• Hack Attempts Report
• Invalid UserIDs Report
• LDAP Account Manager Report
• Log Monitor
• SAM Notify Report
• Server Local Login Report
• Software Database Report
• Software Replication Report
• Student Account Manager Report
• Update Info from LDAP Report