Semantic Database Analysis in Windows Server 2008

  • Article

Operating System

 

Windows Server 2008

 

Problem

 

To check the Active directory database integrity using Semantic Database Analysis.

 

Solution

 

Checking the database for integrity means that the database is checked at a low (binary) level to look for database corruption. The process also checks the database headers and checks all the tables for consistency. Because every byte of the database is checked during this process, it will take a long time to run on a large database. To run the integrity check, type integrity at the File Maintenance prompt in Ntdsutil.

 

The semantic database analysis is different from the integrity check in that it does not examine the database at a binary level. Rather, the semantic analysis checks the database consistency against the Active Directory semantics. The semantic database analysis examines each object in the database to ensure that each object has a GUID, a proper SID, and the correct replication metadata.

 

To perform the semantic database analysis, perform the following steps:

 

  • Open a command prompt and type ntdsutil.

https://bay002.mail.live.com/att/GetInline.aspx?messageid=efe44cf4-2e4b-11e2-88cc-00215ad71338&attindex=0&cp=-1&attdepth=0&imgsrc=cid%3aimage001.jpg%4001CDC286.95AF9210&cid=f3b107ca2c44bfc9&shared=1&blob=MHxpbWFnZTAwMS5qcGd8aW1hZ2UvanBlZw_3d_3d&hm__login=jinishkg&hm__domain=hotmail.com&ip=10.111.82.8&d=d3413&mf=0&hm__ts=Wed%2c%2014%20Nov%202012%2011%3a11%3a04%20GMT&st=jinishkg&hm__ha=01_7aa7dc93ec482a2d86edcbc6910ff895a46f43c04a9465acb90bb309c26093e3&oneredir=1

  • From the Ntdsutil prompt, type Activate Instance NTDS.

 

 

https://bay002.mail.live.com/att/GetInline.aspx?messageid=efe44cf4-2e4b-11e2-88cc-00215ad71338&attindex=1&cp=-1&attdepth=1&imgsrc=cid%3aimage002.jpg%4001CDC286.95AF9210&cid=f3b107ca2c44bfc9&shared=1&blob=MXxpbWFnZTAwMi5qcGd8aW1hZ2UvanBlZw_3d_3d&hm__login=jinishkg&hm__domain=hotmail.com&ip=10.111.82.8&d=d3413&mf=0&hm__ts=Wed%2c%2014%20Nov%202012%2011%3a11%3a04%20GMT&st=jinishkg&hm__ha=01_53b911d999fa9e8ca73a9ed502b12d035c21f69bf5d2f9eb4ecb7dc5e1ccd586&oneredir=1

 

 

 

  • At the Ntdsutil prompt, type semantic database analysis.

https://bay002.mail.live.com/att/GetInline.aspx?messageid=efe44cf4-2e4b-11e2-88cc-00215ad71338&attindex=2&cp=-1&attdepth=2&imgsrc=cid%3aimage003.jpg%4001CDC286.95AF9210&cid=f3b107ca2c44bfc9&shared=1&blob=MnxpbWFnZTAwMy5qcGd8aW1hZ2UvanBlZw_3d_3d&hm__login=jinishkg&hm__domain=hotmail.com&ip=10.111.82.8&d=d3413&mf=0&hm__ts=Wed%2c%2014%20Nov%202012%2011%3a11%3a04%20GMT&st=jinishkg&hm__ha=01_7f424a31b98bbd0e30641c15bd2a22698962226f85e0322ed94c7549f8a4e888&oneredir=1

 

 

This time on error occurred Service “NTDS” is running. Stop the service before binding to this Active Directory database.

The reason is the Active Directory Service is running. We have to stop it for semantic database Analysis.

For stopping the services, go to start and then select RUN and type services.msc , then press enter.

Locate the active directory services from the list.

 

https://bay002.mail.live.com/att/GetInline.aspx?messageid=efe44cf4-2e4b-11e2-88cc-00215ad71338&attindex=3&cp=-1&attdepth=3&imgsrc=cid%3aimage004.jpg%4001CDC286.95AF9210&cid=f3b107ca2c44bfc9&shared=1&blob=M3xpbWFnZTAwNC5qcGd8aW1hZ2UvanBlZw_3d_3d&hm__login=jinishkg&hm__domain=hotmail.com&ip=10.111.82.8&d=d3413&mf=0&hm__ts=Wed%2c%2014%20Nov%202012%2011%3a11%3a04%20GMT&st=jinishkg&hm__ha=01_1594065d4eae5944ddb2df1ecf52bc491a54ab4e1eb8d482bbfc2f5cd740b8af&oneredir=1

 

It will show the warning that the dependency application may also cause effected. Press yes to continue.

 

https://bay002.mail.live.com/att/GetInline.aspx?messageid=efe44cf4-2e4b-11e2-88cc-00215ad71338&attindex=4&cp=-1&attdepth=4&imgsrc=cid%3aimage005.jpg%4001CDC286.95AF9210&cid=f3b107ca2c44bfc9&shared=1&blob=NHxpbWFnZTAwNS5qcGd8aW1hZ2UvanBlZw_3d_3d&hm__login=jinishkg&hm__domain=hotmail.com&ip=10.111.82.8&d=d3413&mf=0&hm__ts=Wed%2c%2014%20Nov%202012%2011%3a11%3a04%20GMT&st=jinishkg&hm__ha=01_a399ba35ca6d17f6aa6b40a7d933f2b6adada57b1ea059209f74b8c42161fd65&oneredir=1

 

 

  • At the semantic checker prompt, type verbose on. This setting configures Ntdsutil to write additional information to the screen when the semantic checker is running.

 

  • Execute the command again semantic database analysis and press enter.

 

https://bay002.mail.live.com/att/GetInline.aspx?messageid=efe44cf4-2e4b-11e2-88cc-00215ad71338&attindex=5&cp=-1&attdepth=5&imgsrc=cid%3aimage006.jpg%4001CDC286.95AF9210&cid=f3b107ca2c44bfc9&shared=1&blob=NXxpbWFnZTAwNi5qcGd8aW1hZ2UvanBlZw_3d_3d&hm__login=jinishkg&hm__domain=hotmail.com&ip=10.111.82.8&d=d3413&mf=0&hm__ts=Wed%2c%2014%20Nov%202012%2011%3a11%3a04%20GMT&st=jinishkg&hm__ha=01_6bc5e8943f28cad09123beabfc848777dadd3ed96c7c79904e022e5a7b4a4a03&oneredir=1

 

  • At the semantic checker prompt, type go.

 

https://bay002.mail.live.com/att/GetInline.aspx?messageid=efe44cf4-2e4b-11e2-88cc-00215ad71338&attindex=6&cp=-1&attdepth=6&imgsrc=cid%3aimage007.jpg%4001CDC286.95AF9210&cid=f3b107ca2c44bfc9&shared=1&blob=NnxpbWFnZTAwNy5qcGd8aW1hZ2UvanBlZw_3d_3d&hm__login=jinishkg&hm__domain=hotmail.com&ip=10.111.82.8&d=d3413&mf=0&hm__ts=Wed%2c%2014%20Nov%202012%2011%3a11%3a04%20GMT&st=jinishkg&hm__ha=01_203b97408f7dc42a1e8a5d1cc34a4711f1493aa102520700e0ed8243117538fe&oneredir=1

 

 

It will perform the analysis and displays the output as shown in below picture.

 

https://bay002.mail.live.com/att/GetInline.aspx?messageid=efe44cf4-2e4b-11e2-88cc-00215ad71338&attindex=7&cp=-1&attdepth=7&imgsrc=cid%3aimage008.jpg%4001CDC286.95AF9210&cid=f3b107ca2c44bfc9&shared=1&blob=N3xpbWFnZTAwOC5qcGd8aW1hZ2UvanBlZw_3d_3d&hm__login=jinishkg&hm__domain=hotmail.com&ip=10.111.82.8&d=d3413&mf=0&hm__ts=Wed%2c%2014%20Nov%202012%2011%3a11%3a04%20GMT&st=jinishkg&hm__ha=01_1d2515dd5faf7c6e4a1311a4243f802c7044571d2bf52da3bdc32b7f7360c5dc&oneredir=1