Chat now with support
Chat mit Support

Active Administrator 8.7 - User Guide

Active Administrator Overview User Provisioning Certificates Security & Delegation  Active Directory Health
Switching to Active Directory Health Using the Active Directory Health landing page Installing Active Directory Health Analyzer agents Using the Active Directory Health Analyzer agent configuration utility Excluding domain controllers Managing the Remediation Library Analyzing Active Directory health Analyzing Azure Active Directory Managing Active Directory Health Analyzer alerts Managing alert notifications Pushing alerts to System Center Operations Manager and SNMP managers Managing monitored domain controllers Managing data collectors Active Directory Health Templates Managing Active Directory Health Analyzer agents Using the Troubleshooter Recovering Active Directory Health data
Auditing & Alerting Group Policy Active Directory Recovery Active Directory Infrastructure DC Management DNS Management Configuration
Using the Configuration landing page Managing tasks Defining role-based access Setting email server options Configuring SCOM and SNMP Settings Setting notification options Setting Active Template options Setting agent installation options Setting recovery options Setting GPO history options Setting certificate configuration Setting service monitoring policy Managing archive databases Migrating data to another database Setting a preferred domain controller Setting up workstation logon auditing Managing configuration settings Setting user options Managing the Active Directory server
Diagnostic Console Alerts Appendix
Domain controller alerts
Active Directory Certificate Services service is not running Active Directory Domain Services is not running Active Directory Web Services service is not running Consecutive replication failures DC cache hits DC DIT disk space DC DIT log file disk space DC LDAP load DC LDAP response too slow DC Memory Usage DC properties dropped DC RID pool low DC SMB connections DC SYSVOL disk space DC time sync lost Detected NO_CLIENT_SITE record DFS Replication service not running DFS service is not running DFSR conflict area disk space DFSR conflict files generated DFSR RDC not enabled DFSR sharing violation DFSR staged file age DFSR staging area disk space DFSR USN records accepted DFSRS CPU load DFSRS unresponsive DFSRS virtual memory DFSRS working set DNS Client Service is not running Domain controller CPU load Domain controller page faults Domain controller unresponsive File Replication Service is not running File replication (NTFRS) staging space free in kilobytes GC response too slow Group policy object inconsistent Hard disk drive Intersite Messaging Service is not running Invalid primary DNS domain controller address Invalid secondary DNS domain controller address KDC service is not running LSASS CPU load LSASS virtual memory LSASS working set Missing SRV DNS record for either the primary or secondary DNS server NETLOGON not shared NetLogon service is not running Orphaned group policy objects exist Physical memory Power supply Primary DNS resolver is not responding Secondary DNS resolver is not responding Security Accounts Manager Service is not running SRV record is not registered in DNS SYSVOL not shared W32Time service is not running Workstation Service is not running
Domain alerts Site alerts Forest alerts Azure Active Directory Connect alerts
Event Definitions PowerShell cmdlets

Analyzing health of a selected domain controller

Previous Next


 Active Directory Health > Analyzing Active Directory health > Analyzing health of a selected domain controller

Analyzing health of a selected domain controller

You can view information on all monitored domain controllers or a selected monitored domain controller. To view information on all domain controllers, see Analyzing health of all domain controllers.

To analyze health on a selected domain controller
1
Select Active Directory Health | Analyzer.
2
Expand the tree, and expand Monitored domain controllers.

The page heading displays general information about the selected site.

Table 35. Domain controller general information

Field

Description

Domain

Name of the domain in which the domain controller resides

Site

Name of the site in which the domain controller resides

Forest

Name of the forest in which the domain resides

OS version

Version of the operating system

System up time

Duration of time the domain controller has been running

Read only DC

Indicates if the domain controller is a read-only domain controller (RODC)

Global catalog

Indicates if the domain controller is a global catalog server

Monitored by

Name of the domain controller on which the agent is installed that is monitoring the selected domain controller

Last updated

Date and time the domain controller was last updated

The bottom pane changes depending on the tab you select. The following table lists the tabs and the information displayed.

Data collectors provide the input to the various tabs. Some data collectors can be enabled or disabled. See Managing data collectors. If you do not see the corresponding data, make sure the data collector is enabled and the necessary permissions are set. To check the required minimum permissions, see the dialog box for the individual data collector or the Alerts Appendix.

The remaining data collectors used to provide information to the tabs are not available for management and are provided to Active Administrator® through Windows® Management Instrumentation (WMI).

Table 36. Domain controller tabs

Tab

Description

Data Collectors

Summary

Displays the data collected in the indicated time frame for the enabled Performance Counters for the selected forest, domain, site, or monitored domain controller.

Performance Counters data collectors

Services

Displays the status of Windows services.

If a service is running, but has stopped at a point in time, that stoppage is indicated with red.

Windows Services data collectors

Server

Displays information about the server, the server time, memory details, disk details, and network adapters.

General data collectors:

Domain controller time synchronization

Logic disk details

Active Directory

Displays Active Directory® database and SYSVOL disk usage and LDAP response time.

Validation data collectors

General data collectors:

Active Directory database details

Domain controller relative identifier (RID)

LDAP response time

SysVol details

Current Alerts

Displays the current alerts for the selected item in the tree. See Using the analyzer pages.

Alerts are enabled by default and correspond to data controllers. Both alerts and data collectors can be enabled and disabled.

See Setting alerts and Setting data collectors.

Applications

Displays installed applications on the selected monitored domain controller. Applications installed or removed in the last 24 hours are listed in a separate pane.

Use the Filter Installed Applications by Name option to search for specific applications.

Not available for management

Updates

Displays installed updates on the selected monitored domain controller. Updates installed or removed in the last 24 hours are listed in a separate pane.

To view information about the update in the default web browser, double-click the update.

Use the Filter Installed Windows Updates by Name option to search for specific updates.

 

Not available for management

Analyzing health of all domains

Previous Next



Analyzing health of all domains

You can view information on all domains or a selected domain. To view information on a selected domain, see Analyzing health of a selected domain.

To analyze health of all domains
1
Select Active Directory Health | Analyzer.
The Summary tab lists all the domains and indicates the number of critical alerts and warnings for each domain. A vertical bar next to each domain indicates its status. A red bar indicates the site has alerts.
The Current Alerts tab lists the alerts for all the domains. See Using the analyzer pages.

Analyzing health of a selected domain

Previous Next


 Active Directory Health > Analyzing Active Directory health > Analyzing health of a selected domain

Analyzing health of a selected domain

You can view information on all domains or a selected domain. To view information on all domains, see Analyzing health of all domains.

To view information on a selected domain
1
Select Active Directory Health | Analyzer.

The page heading displays general information about the selected domain. Table 37 lists the fields that display.

Table 37. Domain general information

Field

Description

Domain

Name of the selected domain.

Domain controllers

Number of domain controllers.

GC servers

Number of global catalog (GC) servers

RODC servers

Number of read-only domain controllers (RODCs)

Functional level

Functional level of the forest, domain, or site

PDC owner

Owner of the primary domain controller (PDC) Flexible Single Master Operation (FSMO) role

RID master

Owner of the relative identifier (RID) FSMO role

Infrastructure master

Owner of the infrastructure FSMO role

Operations master consistent

Indicates if all the domain controllers report the same operation masters

Functional level consistent

Indicates if all the domain controllers report the same functional level

The bottom pane changes depending on the tab you select. Table 38 lists the tabs and the information displayed.

Table 38. Domain tabs

Tab

Description

Summary

Lists all the domain controllers in the selected domain, the domain and site in which the domain controller resides, and the number of alerts for each domain controller.

To filter the list of domain controllers, type in the Filter domain controllers box. The list filters as you type.

Replication Latency

Lists the replication latency times for a domain controller and its replication partners.

GC Replication Latency

Lists the replication latency times for the domain controller and servers hosting the global catalog.

Current Alerts

Displays the current alerts for the selected item in the tree. See Using the analyzer pages.

Analyzing health of all sites

Previous Next



Analyzing health of all sites

You can view information on all sites or a selected site. To view information on a selected site, see Analyzing health of a selected site.

To analyze health on all sites
1
Select Active Directory Health | Analyzer.

The page heading displays general information about the selected site. Table 39 lists the fields that display.

Table 39. Site general information

Field

Description

Forest

Name of the forest.

Domains

Number of domains.

Domain controllers

Number of domain controllers.

Sites

Number of sites.

Empty sites

Number of empty sites.

GC servers

Number of global catalog (GC) servers.

RODC servers

Number of read-only domain controllers (RODCs).

Application partitions

Number of application partitions.

Bridgehead servers

Number of bridgehead servers.

Functional level

Functional level of the site.

Domain naming master

Name of the domain controller with the domain naming master role.

Schema master

Name of the domain controller with the schema master role.

Operations master consistent

Indicates if all the domain controllers report the same operation masters.

Schema master consistent

Indicates if all the domain controllers report the same operation masters.

Functional level consistent

Indicates if all the domain controllers report the same functional level.

The Summary tab lists all the sites and indicates the number of critical alerts and warnings for each site. A vertical bar next to each site indicates its status. A red bar indicates the site has alerts.\

To filter the list of sites, type in the Filter sites box. The list filters as you type.

The Current Alerts tab lists the alerts for all the sites. See Using the analyzer pages.

Verwandte Dokumente

The document was helpful.

Bewertung auswählen

I easily found the information I needed.

Bewertung auswählen