check_ad version 1.4 supports Windows 2008 platforms. As you may know, check_ad requires Microsoft tools dcdiag and netdiag. A Windows 2008 DC has dcdiag as a standard component, while netdiag should be installed (Windows 2003 version works just fine).

In addition, the support for the member test trust is removed, as it requires domain admin privileges with increased security risk.

Due to the netdiag bug described at the Microsoft KB870692, you may be interested in turning off the member test kerberos. This is now possible by using the option --nokerberos.

MD5 Signature:
f8b6f7b9405d9c3fb56ce094e54004c9 *check_ad-1.4.zip
SHA256 Signature:
323b3188e7da549295690f8ba0238883187b3a42167b114173237dd3bfb58233 *check_ad-1.4.zip