This service includes but not limited to;

- Planning New AD Domain Installation And AD Domain Upgrades:  Collecting inventory on applications using AD and their compatibiliy with new OS&AD relases. Determine additonal roles on DC servers, such as DHCP and DNS

- Planning Integrations: LDAP and Kerberos SSO integration with other application software

- Planning AD Migration To Another Forest / Domain,

- Active Directory Health Check & Documentation

- Troubleshooting: AD & sysvol replication problems, FSMO Role problems, mult-forest conditions permission /  resource access and trust problems, logon performance issues, group policy problems, time synchronization issues, detailed tracing on authentication protocols (Kereberos, NTLM v2 etc), Windows firewall port blocking issues, third party appliance/device AD integration with network&security devices problems, LDAP(s) access probems, permission inheritance problems, AD delegation issues, GPO issues etc..