Select the product you need help with

How to complete a semantic database analysis for the Active Directory database by using Ntdsutil.exe

Article ID: 315136 - View products that this article applies to.

This article was previously published under Q315136

SUMMARY

This step-by-step article describes how to run the semantic checker on the Active Directory database. Unlike the file management commands, which test the integrity of the database with respect to the ESENT database semantics, the semantic analysis analyzes the data with respect to Active Directory semantics. You can use this process to generate reports on the number of records present, including deleted and phantom records.

The Windows 2000 Directory service opens its files in Exclusive mode. This means that the files cannot be managed while the computer is operating as a domain controller. The first procedure is to boot your server into Directory Services Restore mode.

Boot Into Directory Services Restore Mode

Reboot the server.
After the BIOS information appears, press F8.
Select Directory Services Restore Mode (Windows 2000 domain controllers only), and then press ENTER.
Select your server, and then press ENTER.
Log on by using your Restore Administrative account that was made when this domain controller was promoted.

Starting Ntdsutil.exe

Click Start, and then click Run.
In the Open box, type ntdsutil, and then press ENTER. Note that you can view Ntdsutil.exe Help by typing ? at the command prompt, and then pressing ENTER.

Complete a Database Analysis

This procedure starts the semantic analysis of the Ntds.dit file. A report is generated and written to a file that is named Dsdit.dmp.n, in the current folder, where n is an integer that is incremented each time that you run the command.

At the Ntdsutil.exe command prompt, type Semantic database analysis, and then press ENTER.
At the Semantic Checker command prompt, type Go, and then press ENTER.
Verification is displayed. To exit, type q, press ENTER, type q, and then press ENTER.

Retrieve a Specific Record

This procedure retrieves a specific record number from the Ntds.dit file by using the DNT record number variable. One of the functions of the database layer is to translate each distinguished name into an integer structure that is called the distinguished name tag, which is used for all internal accesses. The database layer guarantees the uniqueness of the distinguished name tag for each database record. To display indices and their associated DNT, use the integrity command in the Files menu of Ntdsutil.exe.

At the Ntdsutil.exe command prompt, type Semantic database analysis, and then press ENTER.
At the Semantic Checker command prompt, type Go, and then press ENTER.
At the Semantic Checker command prompt, type Get DNT record number, and then press ENTER.
Verification is displayed. To exit, type q, press ENTER, type q, and then press ENTER.

Back to the top | Give Feedback

REFERENCES

For more information about how to troubleshoot the Active Directory database, please see the following "Active Directory Diagnostics, Troubleshooting, and Recovery" Microsoft Web site:

http://www.microsoft.com/technet/prodtechnol/windows2000serv/reskit/distrib/dsbi_add_mhau.mspx

(http://www.microsoft.com/technet/prodtechnol/windows2000serv/reskit/distrib/dsbi_add_mhau.mspx)

For additional information about how to automate Ntdsutil.exe by using a script, click the following article number to view the article in the Microsoft Knowledge Base:

243267

(http://support.microsoft.com/kb/243267/ )

How to automate Ntdsutil.exe by using a script

Back to the top | Give Feedback