Foglight for Active Directory 7.1.0 - Remote Access Diagnostics User Guide

Chatta subito con l'assistenza

Ottieni assistenza in tempo reale
Completa la registrazione

Accedi

Richiedi prezzo

Contatta il supporto vendite

Launching the Remote Access Diagnostics tool Running the remote access test Running the prerequisite test for Foglight for Active Directory Running the prerequisite test for Foglight for Exchange Installing a CA certificate Troubleshooting issues

Could not get RootDSE with the supplied server and credentials.

What is Remote Access Diagnostics?

Remote Access Diagnostics is a tool developed to check the connection between the Foglight Agent Manager (FglAM) server and Active Directory® and Exchange servers that are to be monitored. It also tests for prerequisite conditions that must be in place in order to initialize an Active Directory or Exchange agent. It reports communication issues that would interfere with a Foglight for Active Directory or Foglight for Exchange agent’s ability to collect metrics from WMI and LDAP providers.

The Remote Access Diagnostics tool consists of three basic tests:

•

Remote Access Test: This test runs a name resolution and ping test and an LDAP and WMI query against selected Active Directory domain controllers and Exchange servers to ensure they can connect to the FglAM server using the provided credentials.

•

Prerequisite Test for Foglight for Active Directory: Tests the prerequisite settings for Foglight for Active Directory. It checks several environment settings that can block remote access to a domain controller and runs local WMI queries against a domain controller. This test should be run locally on a domain controller.

•

Prerequisite Test for Foglight for Exchange: Tests the prerequisite settings for Foglight for Exchange. It checks several environment settings that can block the remote access. This test should be run locally on both the Exchange server to be monitored and the domain controller specified in the Exchange agent properties.


	NOTE: Running this tool does NOT make any changes to the environment being tested. Environment changes must be made by the administrator. Keep in mind that it is possible for an environment to have unique security settings that may interfere with communication even if the tests in this tool run successfully. Membership in security groups is only evaluated to one level. If you are using nested groups, you will need to verify proper credentials independent of this tool.


	IMPORTANT: An “Enable SSL For LDAP” option is added to support security LDAP. Users need to enable this option if security LDAP is required in the domain controller that is used to validate credentials and locate servers. If security LDAP is required, users must install a CA certificate on the host where the Remote Access Diagnostics Tool runs, before running a test. For more information about this topic, see Installing a CA certificate.

For detailed information, see these topics:

•

Launching the Remote Access Diagnostics tool

•

Running the remote access test

•

Running the prerequisite test for Foglight for Active Directory

•

Running the prerequisite test for Foglight for Exchange

•

Installing a CA certificate

•

Troubleshooting issues

Launching the Remote Access Diagnostics tool

To launch the tool:

Download the Remote Access Diagnostics tool (RemoteAccessDiagnostics.zip) from Quest Support Portal.

Locate the version (x86 and x64) that is compatible with your system architecture and copy the corresponding folder to a network share or individual machine.


	NOTE: The machine where this tool is being run must have .NET® 2.0 installed.

From that location, expand the folder and double-click RemoteAccessDiagnostics.exe.

Running the remote access test

To run the remote access test against all servers:

On the Remote Access Test tab:

Select the Run a remote access test from the Fglam option.

Enter the credentials that will be used in the Foglight Agent Properties to collect metrics from the server(s) being tested.

Enter the IP address or FQDN of a domain controller that uses the credentials entered above. This field is used to validate the credentials and to create a server list.

Click Next.

The tool discovers all the domain controllers and Exchange servers in your Active Directory® environment and displays them in the Remote Access Test tab.


	NOTE: In a large environment, the discovery process may need a long time to complete.

By default all of the servers are selected. Click the check box in the Select column to clear or select a server in this list. For example, if you have servers in the list that use different credentials than those entered on the previous screen, clear the check box for those servers, so that the test is not run against them. Double-clicking the column header selects /clears all servers in the list.

Click Run.

Review the Results column which indicates whether the name resolution/ping and test LDAP and WMI query ran successfully on each server.

If a server fails, open the Log tab and review the log entry for that server. In addition, running the prerequisite test against the server experiencing the failure may provide additional information as to why the server did not pass the remote access test.