Simple check to confirm access to a Domain Controller

I'm preparing for a battery of resilience tests on a new network (which will be hosting a mission-critical application).

As part of it, I ought to confirm the resilience of the domain controllers. We have 2 DCs in this environment, and I need to be able to confirm that when I pull the plug on one, the remaining DC takes up the slack.

What is the simplest test I can do to confirm DC2 is successfully covering for DC1?

Would something as simple as gpupdate /force suffice? Or is there a better, simple test? We've got a lot to test so the less we need to do, the better.


You can run the following commands:

Query the domain for the current Primary Domain Controller

NETDOM QUERY /D:%USERDNSDOMAIN% PDC

Query the domain for the current list of FSMO owners

NETDOM QUERY /D:%USERDNSDOMAIN% FSMO

The commands will return the active PDC and DC(s) responsible for various FSMO roles.