Chat now with support
Chat mit Support

Active Administrator 8.7 - User Guide

Active Administrator Overview User Provisioning Certificates Security & Delegation  Active Directory Health
Switching to Active Directory Health Using the Active Directory Health landing page Installing Active Directory Health Analyzer agents Using the Active Directory Health Analyzer agent configuration utility Excluding domain controllers Managing the Remediation Library Analyzing Active Directory health Analyzing Azure Active Directory Managing Active Directory Health Analyzer alerts Managing alert notifications Pushing alerts to System Center Operations Manager and SNMP managers Managing monitored domain controllers Managing data collectors Active Directory Health Templates Managing Active Directory Health Analyzer agents Using the Troubleshooter Recovering Active Directory Health data
Auditing & Alerting Group Policy Active Directory Recovery Active Directory Infrastructure DC Management DNS Management Configuration
Using the Configuration landing page Managing tasks Defining role-based access Setting email server options Configuring SCOM and SNMP Settings Setting notification options Setting Active Template options Setting agent installation options Setting recovery options Setting GPO history options Setting certificate configuration Setting service monitoring policy Managing archive databases Migrating data to another database Setting a preferred domain controller Setting up workstation logon auditing Managing configuration settings Setting user options Managing the Active Directory server
Diagnostic Console Alerts Appendix
Domain controller alerts
Active Directory Certificate Services service is not running Active Directory Domain Services is not running Active Directory Web Services service is not running Consecutive replication failures DC cache hits DC DIT disk space DC DIT log file disk space DC LDAP load DC LDAP response too slow DC Memory Usage DC properties dropped DC RID pool low DC SMB connections DC SYSVOL disk space DC time sync lost Detected NO_CLIENT_SITE record DFS Replication service not running DFS service is not running DFSR conflict area disk space DFSR conflict files generated DFSR RDC not enabled DFSR sharing violation DFSR staged file age DFSR staging area disk space DFSR USN records accepted DFSRS CPU load DFSRS unresponsive DFSRS virtual memory DFSRS working set DNS Client Service is not running Domain controller CPU load Domain controller page faults Domain controller unresponsive File Replication Service is not running File replication (NTFRS) staging space free in kilobytes GC response too slow Group policy object inconsistent Hard disk drive Intersite Messaging Service is not running Invalid primary DNS domain controller address Invalid secondary DNS domain controller address KDC service is not running LSASS CPU load LSASS virtual memory LSASS working set Missing SRV DNS record for either the primary or secondary DNS server NETLOGON not shared NetLogon service is not running Orphaned group policy objects exist Physical memory Power supply Primary DNS resolver is not responding Secondary DNS resolver is not responding Security Accounts Manager Service is not running SRV record is not registered in DNS SYSVOL not shared W32Time service is not running Workstation Service is not running
Domain alerts Site alerts Forest alerts Azure Active Directory Connect alerts
Event Definitions PowerShell cmdlets

Setting port numbers for services

Previous Next


Configuration > Managing the Active Directory server > Setting port numbers for services

Setting port numbers for services

The default value for the Active Administrator Foundation Service (AFS) port is 15601. The default value for the Active Administrator Data Services (ADS) port is 15602.

To set the port for AFS
1
From the Start menu, open AA Server Manager, and select the AFS & ADS Services tab.
2
Type a value in the Foundation Service Port Number box.
3
Click Set AFS Port.
To set the port for ADS
1
From the Start menu, open AA Server Manager, and select the AFS & ADS Services tab.
2
Type a value in the Data Service Port Number box.
3
Click Set ADS Port.

Enabling Full-Text Search

Previous Next


Configuration > Managing the Active Directory server > Enabling Full-Text Search

Enabling Full-Text Search

When filtering event descriptions for audit reports (see Creating a new audit report), Active Administrator can use Full-Text Search.

To use this feature, you must first install Full-Text Search, and enable the feature in Active Administrator. For information on installing Full-Text Search, refer to the documentation for SQL Server® Database Engine.

To enable Full-Text Search
1
From the Start menu, open AA Server Manager, and select the AFS & ADS Services tab.
2
Under SQL Full-Text Search, click Enable.

Updating Active Administrator licenses

Previous Next


Configuration > Managing the Active Directory server > Updating Active Administrator licenses

Updating Active Administrator licenses

 
* 
NOTE: If you are not compliant with the Active Administrator license, a warning message is sent once a day. In addition, the number of licensed users and enabled users in Active Administrator display at the bottom of the console display. If you click the numbers, the License Dashboard opens.
To apply a new license file
1
From the Start menu, open AA Server Manager, and select the Licensing & Security tab.
2
Click Update License.
3
To view details about the current license, click Details.
4
To update the license, click Update License.
5
Locate the license file (*.dlv), and click Open.

Managing Security

Previous Next


Configuration > Managing the Active Directory server > Managing Security

Managing Security

Active Administrator makes use of FIPS 140-2 compliant software to secure information and includes security management in the Active Administrator Server Manager.

To manage security
1
From the Start menu, open AA Server Manager, and select the Licensing & Security tab.
2
Under Security Manager, click Manage.

From here, you can manage the passphrase, file security, and database security

Managing the passphrase

A passphrase is used to control access to Active Administrator data. A passphrase is similar to a password in usage, but is generally longer for added security. Active Administrator content will be secured using the passphrase and requires the passphrase for accessing the content or for changing the passphrase.

 
* 
CAUTION: You must know the current passphrase to change or restore the passphrase. It is very important to record the passphrase in a secure location where it can be retrieved when required.
CAUTION: If the passphrase is lost, it will be impossible to access Active Administrator data. You will have to uninstall Active Administrator, remove all associated files, and start a new installation of Active Administrator. See the Active Administrator Installation Guide for details.
To change a passphrase
1
Under the Passphrase Management section, click Change.
2
Type the current passphrase.
3
Type a new passphrase that is between 25 and 32 characters in length and then type it again to confirm.
4
Record the passphrase in a secure location.
* 
CAUTION: You must know the current passphrase to change or restore the passphrase. It is very important to record the passphrase in a secure location where it can be retrieved when required.
5
Click OK.
6
Review the informational message.
7
Click Yes to proceed.

The registry files and database will be secured using the new passphrase.

8
Review the reminder to create new backups.
9
Click OK.

Managing file security

The security of the Active Administrator files can be managed using this option.

To secure files
1
In the Files Security Management section, click Secure Files.
2
Type the current passphrase.
3
Click OK.
To clean the registry
1
In the Files Security Management section, click Clean Registry.
2
Review the informational message.
3
Click Yes to proceed.

Managing database security

The security of an Active Administrator database can be managed using this option.

To validate the security of a database
1
In the Database Security Management section, type the server name.

- OR -

Click the ellipsis to browse, select the server, and click OK.

2
Type the database name.

- OR -

Click the ellipsis to browse, select the database, and click OK.

3
Click Validate to verify that the security of the selected database is up to date.
To secure a database
1
In the Database Security Management section, type the server name.

- OR -

Click the ellipsis to browse, select the server, and click OK.

2
Type the database name.

- OR -

Click the ellipsis to browser, select the database, and click OK.

3
Optionally, click Validate to verify that the security of the selected database is up to date.
4
Click Secure Database.
5
Type the current passphrase.
6
Click OK.
Verwandte Dokumente

The document was helpful.

Bewertung auswählen

I easily found the information I needed.

Bewertung auswählen