RELAY / n0hup · COMMUNITY EDITION · v0.1.0
AD Health Toolkit
Run: 20261107T094513Z-03ea8bdb · 2026-11-07T09:45:13.8382770Z
Observations, not a security certification. Pass covers only the named check; inaccessible and untested areas remain unknown. Time sync and inventories require review.
Pass: 4 | Warning: 4 | Error: 1 | Info: 10 | Skipped: 0
DCInventory
| Status / target | Observation | Evidence | Next step |
|---|---|---|---|
| Info dc01.demo.example.test | SYNTHETIC domain controller | Site=Demo-HQ; IPv4=192.0.2.10; OS=Windows Server 2022; GC=True; RODC=False | |
| Info dc02.demo.example.test | SYNTHETIC domain controller | Site=Demo-Branch; IPv4=192.0.2.11; OS=Windows Server 2022; GC=True; RODC=False |
FSMO
| Status / target | Observation | Evidence | Next step |
|---|---|---|---|
| Info demo.example.test | PDCEmulator | dc01.demo.example.test | Ownership only; reachability not asserted. |
| Info demo.example.test | RIDMaster | dc01.demo.example.test | Ownership only; reachability not asserted. |
| Info demo.example.test | InfrastructureMaster | dc01.demo.example.test | Ownership only; reachability not asserted. |
| Info demo.example.test | SchemaMaster | dc01.demo.example.test | Ownership only; reachability not asserted. |
| Info demo.example.test | DomainNamingMaster | dc01.demo.example.test | Ownership only; reachability not asserted. |
Replication
| Status / target | Observation | Evidence | Next step |
|---|---|---|---|
| Pass dc01.demo.example.test | SYNTHETIC recent successful inbound replication | Partner=dc02; Partition=DC=demo,DC=example,DC=test; LastReplicationResult=0; AgeHours=1 | |
| Warning dc02.demo.example.test | SYNTHETIC stale inbound replication | Partner=dc01; LastReplicationResult=1722; AgeHours=30; ConsecutiveFailures=2 | Review RPC connectivity and site schedule. No synchronization initiated. |
DNS
| Status / target | Observation | Evidence | Next step |
|---|---|---|---|
| Pass dc01.demo.example.test | SYNTHETIC LDAP DC locator record | _ldap._tcp.dc._msdcs.demo.example.test -> dc01.demo.example.test:389 | Locator check only. |
| Error dc02.demo.example.test | SYNTHETIC resolver query unavailable | Simulated timeout; no live DNS query performed. | Review configured resolver and access; unknown is not healthy. |
SYSVOL
| Status / target | Observation | Evidence | Next step |
|---|---|---|---|
| Pass dc01.demo.example.test/SYSVOL | SYNTHETIC share root readable | \\dc01.demo.example.test\SYSVOL | Does not prove DFSR health. |
| Pass dc01.demo.example.test/NETLOGON | SYNTHETIC share root readable | \\dc01.demo.example.test\NETLOGON |
TimeSync
| Status / target | Observation | Evidence | Next step |
|---|---|---|---|
| Info dc01.demo.example.test | SYNTHETIC W32Time observation | Source: ntp.demo.example.test; Stratum: 3; Leap Indicator: 0 | Illustrative text only. Review last sync, source and hierarchy; offset unverified. |
PrivilegedGroups
| Status / target | Observation | Evidence | Next step |
|---|---|---|---|
| Info S-1-5-21-111111111-222222222-333333333-512 | SYNTHETIC direct privileged member | Name=demo-admin; objectClass=user | Review business justification and nested groups. |
InactiveAccounts
| Status / target | Observation | Evidence | Next step |
|---|---|---|---|
| Warning CN=demo-old-user,DC=demo,DC=example,DC=test | SYNTHETIC enabled inactivity candidate | Type=User; AgeDays=120 | Validate with owner; do not disable automatically. |
| Warning CN=DEMO-OLD-PC,DC=demo,DC=example,DC=test | SYNTHETIC enabled inactivity candidate | Type=Computer; AgeDays=180 | Confirm inventory and usage. |
PasswordPolicy
| Status / target | Observation | Evidence | Next step |
|---|---|---|---|
| Warning demo.example.test | SYNTHETIC password policy baseline finding | MinPasswordLength=8; ConfiguredBaseline=14; ReversibleEncryptionEnabled=False | Review organisation policy. No automatic changes. |
GPOInventory
| Status / target | Observation | Evidence | Next step |
|---|---|---|---|
| Info 00000000-0000-4000-8000-000000000001 | SYNTHETIC Demo Workstation Baseline | GpoStatus=AllSettingsEnabled; Owner=DEMO\Domain Admins | Inventory only; links and resultant policy not checked. |