2. Jess Dodson Righting the Right Rights Active Directory & Domain Security, Administration & Maintenance WIN341 B

27. Replication FSMO Roles Time Synchronization Trusts DNS & Networking Event Logs Account Administration

29. repadmin /replsummary

30. repadmin /showrepl * /errorsonly

31. repadmin /showutdvec * dc=,dc=

32. repadmin /queue *

33. repadmin /failcache

35. netdom query fsmo

42. type %systemroot%\debug\netlogon.log | findstr NO_CLIENT_SITE

43. Ports 389 - LDAP 636 – LDAP SSL 3268 – LDAP GC 3269 – LDAP GC SSL 135 – EPC, EPM 53 - DNS 88 - Kerberos 445 – SMB/IP 139 – NetBIOS Session Port 123 – NTP Time Services

46. DNS events 5774: DNS registration failure 5775: DNS de-registration failure 5781: DNS registration or deregistration failure

57. Continue your Ignite learning path Pass-the-Hash Attacks: http://www.microsoft.com/security/sir/strategy/default.aspx#!pass_ the_hash_attacks Securing Active Directory – Best Practices: http://aka.ms/bpsad Microsoft Security Compliance Manager: http://aka.ms/scm Regular AD Maintenance & Checks: http://girl-germs.com/?p=564

58. Contact me! Twitter: @girlgerms (best way!) Linkedin: https://au.linkedin.com/in/jrdodson Email: jess@girl-germs.com Blog: http://girl-germs.com