Active Administrator 8.7 - User Guide

Installing Active Directory Health Analyzer agents

Installing Active Directory Health Analyzer agents

To monitor Active Directory domains, an agent is required. You can install the agent on each domain controller that you want to monitor, which is called standalone mode. You also have the option to install the agents on servers in a pool that are used to monitor selected domain controllers. Installing the agents into a pool helps to distribute the workload. Finally, once you run the wizard, you can set up automatic deployment, which deploys either the agent to newly discovered domain controllers or adds the domain controller to the pool of agents.

 

IMPORTANT:   • For the Active Directory Health Analyzer agent to deploy successfully, .NET Framework 4.7.2 must be installed. • The number of pooled agents required will differ depending on the number of (and the activity generated by) the domain controllers that are being monitored, as well as the number and types of data collectors selected to run for each particular domain controller. The more data that is monitored, the busier the agent will be, and the more memory and computing resources it will consume. Users are encouraged to find the balance between the number of monitored data points and the number of required agent host machines needed to keep agent load and responsiveness at an acceptable level.

Figure 1. Active Directory Health Analyzer agent deployment options

Topics 

•	Installing Active Directory Health Analyzer agents into a pool

•	Installing Active Directory Health Analyzer agents onto domain controllers

•	Installing Active Directory Health Analyzer agents manually

•	Setting up automatic Active Directory Health Analyzer agent deployment

Installing Active Directory Health Analyzer agents into a pool

Installing Active Directory Health Analyzer agents into a pool

Active Administrator recommends installing Active Directory Health Analyzer agents into a pool to balance the workload among the servers in the pool. As domain controllers are added, removed, stopped, or started, the servers automatically adjust the workload every 24 hours. You also can initiate a workload evaluation manually at any time.

When installing the agents into a pool of servers, you can choose to have the pool monitor domain controllers in selected sites or all domain controllers.

NOTE: There must be one Active Directory Health Analyzer agent for every 25 monitored domain controllers. For example, if you need to monitor 100 domain controllers, you must have at least 4 Active Directory Health Analyzer agents in the pool.

To install Active Directory Health Analyzer agents into a pool

1	Select Active Directory Health | Agents.

2	Open the Monitored Domain Controllers tab, and click Add.

-OR-

Open the Analyzer Agents tab, and click Install.

3	On the welcome page, click Next.

4	Select Manage the Active Directory Health agent pool.

5	Click Next.

NOTE: If you selected Managed Domain Controllers | Add, the first time you open this page, you see a warning that no Active Directory Health Analyzer agents are deployed. You can close the warning message.

6	Use the Add, Edit, and Remove buttons to manage the list of servers in the pool.

 

Table 31. Active Directory Health Analyzer agent pool options

Option	Description
Add	Add a server to the pool. To add a server to the pool 1 Click Add. 2 Browse to select the server on which to install the agent. 3 Select to make the agent available to all domain controllers or select specific sites from the list. Use Select All and Clear All to help with the selection Regardless of the option you select, you will have the opportunity to select the actual domain controllers that the agent will monitor. 4 Click OK. Repeat for each server you want to add to the pool.
Edit	Edit the selected server. You can change the sites for which the agent is available.
Remove	Remove the selected servers from the pool.

7	Click Next.

8	In the Domain box, type a domain, or browse to locate a domain.

9	Click Find Domain Controllers.

If you want to load all the domain controllers for the forest, select the check box. Keep in mind that the load time depends on the size of the forest. If the forest is large, the load time may take a while.

10	Select the domain controllers that the servers in the pool will monitor. If you selected specific sites, only the unmonitored domain controllers in the selected sites are listed.

▪	To filter the list of domain controllers, start typing in the Filter Domain Controller box. The list filters as you type. You also can sort the list by clicking a column heading.

▪	To select all the listed domain controllers, click Select all.

▪	To clear the selections, click Clear all.

11	Click Next.

12	In the Run as box, type an account, or browse for an account.

IMPORTANT: For optimal monitoring of domain controllers, an account with domain administrative privileges is recommended. If you cannot use an account with domain administrative privileges, choose an account that is a member of the Performance Log Users and Distributed COM Users groups in the monitored domain. You also must enable Remote Access for WMI on remotely monitored domain controllers. Some monitoring features will not be available. NOTE: To analyze replication, the startup account must have the rights to monitor performance data and to create objects in Active Directory. NOTE: A service account that is a member of the "Protected Users" security group cannot be used for AD health agents.

13	Type the password for the account.

14	Click Next.

15	To configure Windows Firewall to allow the Active Directory Health Analyzer agent to communicate with the Active Administrator Data Service (ADS), select the check box.

16	Select the account to use to install the agent. You can use the Active Administrator Foundation Service (AFS) account, or indicate a specific user account.

 

NOTE: The selected account must be a full Administrator on the target server.

17	Click Next.

18	On the Summary page, check the settings, and click Finish.

19	Click Finish again to begin installation.

When installation is complete, the Monitors column indicates the agent is available for all domain controllers or indicates which site it is monitoring.

▪

To view the domain controllers monitored by the agent pool, click Monitored Domain Controllers. The Monitored by column indicates which server in the agent pool is monitoring each domain controller. You also can click Properties for a selected domain controller. See Managing the Remediation Library.

Installing Active Directory Health Analyzer agents onto domain controllers

Installing Active Directory Health Analyzer agents onto domain controllers

Active Administrator recommends installing Active Directory Health Analyzer agents into a pool to balance the workload among the servers in the pool. For more information, see Installing Active Directory Health Analyzer agents into a pool. It is also possible to install an Active Directory Health Analyzer agent directly onto a domain controller where the agent monitors only that domain controller.

To install Active Directory Health Analyzer Agents onto domain controllers

1	Select Active Directory Health | Agents.

2	Open the Monitored Domain Controllers tab, and click Add.

-OR-

Open the Analyzer Agents tab, and click Install.

3	On the welcome page, click Next.

4	Select Install the Active Directory Health Analyzer agents directly onto domain controllers.

5	Click Next.

6	In the Domain box, type a domain, or browse to locate a domain.

7	Click Find Domain Controllers.

If you want to load all the domain controllers for the forest, select the check box. Keep in mind that the load time depends on the size of the forest. If the forest is large, the load time may take a while.

8	Select the domain controllers on which to install the agents.

▪	To filter the list of domain controllers, start typing in the Filter Domain Controller box. The list filters as you type. You also can sort the list by clicking a column heading.

▪	To select all the listed domain controllers, click Select all.

▪	To clear the selections, click Clear all.

9	Click Next.

10	In the Run as box, type an account, or browse for an account.

IMPORTANT: For optimal monitoring of domain controllers, an account with domain administrative privileges is recommended. If you cannot use an account with domain administrative privileges, choose an account that is a member of the Performance Log Users and Distributed COM Users groups in the monitored domain. You also must enable Remote Access for WMI on remotely monitored domain controllers. Some monitoring features will not be available.

11	Type the password for the account.

12	Click Next.

13	To configure Windows® Firewall to allow the Active Directory Health Analyzer agent to communicate with the Active Administrator Data Service (ADS), select the check box.

14	Select the account to use to install the agent. You can use the Active Administrator Foundation Service (AFS) account, or indicate a specific user account.

 

NOTE: The selected account must be a full Administrator on the target server.

15	Click Next.

16	On the Summary page, check the settings, and click Finish.

17	Click Finish again to begin installation.

When installation is complete, the Monitors column indicates the agent is monitoring the domain controller on which it is installed.

Installing Active Directory Health Analyzer agents manually

Installing Active Directory Health Analyzer agents manually

Active Administrator recommends installing Active Directory Health Analyzer agents into a pool to balance the workload among the servers in the pool. For more information, see Installing Active Directory Health Analyzer agents into a pool. It is also possible to install an Active Directory Health Analyzer agent directly onto a domain controller where the agent monitors only that domain controller. For more information, see Installing Active Directory Health Analyzer agents onto domain controllers.

You can also install an Active Directory Health Analyzer agent into a pool or onto domain controllers manually. Pooled agents can monitor multiple domain controllers in a forest. Load balanced agents must be installed directly onto the domain controller to be monitored.

Before you begin installation, you need the following information:

•	The FQDN or IP address of the ADS Server.

•	The SAM Account name of the user used to run the DAAgent service.

•	The password of the user used to run the DAAgent service.

To deploy the Active Directory Health Analyzer agent

1	Locate C:\Program Files\Quest\ActiveAdministrator\Server\SLAgent\DAAgent.

2	Copy the DAAgent folder and its contents.

3	Paste the folder and its contents into C:\Windows on the target server to create C:\Windows\DAAgent.

The Windows service will be installed in this location and the Active Directory Health Analyzer Agent will run out of this location.

4	Select Start | Command Prompt (Admin), navigate to the folder where you copied the files, type Setup.exe -help, and press Enter to see the usage details for all of the available parameters.

After the installation is complete, use the Agents tab in the Active Administrator console or Setup.exe from the command line to manage the Active Directory Health Analyzer Agent.