n0hup@relay:~$ ./ad-check --fixed

Active Directory Health Check

A fixed-price, read-only review of your on-premises Active Directory. You get a prioritised findings report and a 60-minute review call within 5 business days. No admin credentials leave your network.

Standard package

€500

Fixed fee, excluding VAT. Invoiced by IT Service International (Netherlands).

Environment
1 forest, up to 2 domains, up to 6 domain controllers, up to 2,000 user accounts
Delivery
Remote, 5 business days from receipt of complete collection output
Access
None required. Your team runs the read-only collector and sends us the output.
You receive
Findings report (PDF), prioritised action list, 60-minute review call
Payment
100% on order, by bank transfer

[[ ORDER THE AD HEALTH CHECK ]]

What we check

Replication & topology

Replication status and errors, sites and site links, FSMO role placement.

Domain controllers

DC health, OS lifecycle, time synchronisation, SYSVOL replication method.

DNS

AD-integrated zones, scavenging, forwarders, stale and missing records.

Privileged access

Membership of privileged groups, stale admin accounts, delegation risks.

Accounts & hygiene

Inactive users and computers, password policy, never-expiring passwords.

Group Policy

Unlinked, empty and conflicting GPOs, version mismatches.

How it works

  1. Order. Email us your company name, environment size and preferred start date. We confirm scope and send the invoice.
  2. Collect. Your administrator runs the read-only RELAY AD Health Toolkit collector (Windows PowerShell 5.1 + RSAT) and sends us the output through an agreed secure channel.
  3. Analyse. We review the evidence, verify findings and rank them by risk and effort.
  4. Report. You receive the report and action list within 5 business days.
  5. Review. A 60-minute call walks your team through the findings and the order of fixes.

Not included

Making changes to your environment, Entra ID / Microsoft 365, on-site work, and penetration testing. Remediation, hybrid identity review and deeper security assessment can be quoted separately as part of our engineering services.

Larger environment?

Multiple forests, more domains or controllers, or a need for interviews and architecture review: see the full Active Directory Health Check service, quoted after discovery.

Keep passwords, tokens and confidential configuration out of your first email. Collection output is shared only after the order is confirmed, through a channel we agree with you.