Cq
Claritiq
·
Forest Health
Critical
Caution
Healthy · target
Scope: eni.enigron.com · c1.eni.enigron.com
Domains in scope
2
1 root + 1 child
Functional level
2016
all domains aligned
Recycle bin
Enabled
since 2019-06-12
DSRM rotated
187d
consider < 365d
DNS zones (insecure)
0
all secure
Insecure trusts
0
all SID-filtered
Domains × functional level
| Domain | Functional level | msDS-Behavior-Version | Recycle bin | Status |
|---|---|---|---|---|
| eni.enigron.com (root) | Windows Server 2016 | 7 | Enabled | Healthy |
| c1.eni.enigron.com | Windows Server 2016 | 7 | Enabled | Healthy |
FSMO role holders
| Role | Holder | Domain |
|---|---|---|
| Schema Master | DC01.eni.enigron.com | eni.enigron.com |
| Domain Naming | DC01.eni.enigron.com | eni.enigron.com |
| PDC Emulator (root) | DC01.eni.enigron.com | eni.enigron.com |
| RID Master (root) | DC02.eni.enigron.com | eni.enigron.com |
| Infrastructure (root) | DC03.eni.enigron.com | eni.enigron.com |
| PDC Emulator (c1) | C1DC01.c1.eni.enigron.com | c1.eni.enigron.com |
Five forest-wide and per-domain roles. PingCastle parity check: each holder should be a healthy DC with current OS and recent password rotation.