Foglight for Active Directory 5.7.2.3 - User and Reference Guide

Schema Consistency diagnostic

Checks all target domain controllers against the Schema Master to ensure schema consistency.


	NOTE: The credentials for the domain controller(s) selected on the Test Targets page will be used to query the server hosting the Schema Master. Therefore, the user account used by the selected target server(s) must also have access to the server hosting the Schema Master.

Service Status diagnostic

Determines the state of Windows® services.

When you run this test, select the services that are to be checked to ensure they are running on all selected domain controllers.

Table 93. Service Status diagnostic
Test Input	Description
Select Services	Select this button to select the services to be checked. Selecting this button displays the Select Services dialog which displays a list of all existing services on the query server.

If this test fails, you should:

•

Try connecting to the Service Control Manager through Microsoft® native tools (services.msc). If you cannot connect, verify that you have administrative access to the selected DC.

•

Physically restart the affected services on the DC.

Site Configuration diagnostic

Checks the following site settings:

•

Intersite Topology Generation is disabled - checks all selected sites to determine if Intersite Topology Generation is disabled.

•

Intrasite Topology Generation is disabled - checks all selected sites to determine if Intrasite Topology Generation is disabled.

•

Exchange Server to Global Catalog ratio has been exceeded - enumerates all Exchange Servers and Global Catalogs in the target site and produces an Exchange Server to Global Catalog ratio. This ratio is then compared to the user-defined ratio. If the actual ratio is greater than the predefined ratio the test will return as a failure.

If this test fails, you should:

•

Place at least one domain controller in every site, and make at least one domain controller in each site a global catalog. Otherwise, it is recommended that universal group membership caching be enabled.

•

Verify that the Exchange server to Global Catalog ratio does not exceed 4:1 in the given site.

•

Verify that inter- and intra-site topology management are not disabled. When these generators are disabled, configuration must be performed manually, which can result in common mistakes.

Time Differential diagnostic

Compares the time of the selected domain controllers to the PDC Emulator and then compares this to the specified threshold. If the threshold is exceeded, the test will return as a failure. This test shows you child DCs whose time is not synchronized with their parent time server within a user-defined margin.


	NOTE: The credentials for the domain controller(s) selected on the Test Targets page will be used to query the PDC Emulator. Therefore, the user account used by the selected target server(s) must also have access to the PDC Emulator.

To run this test enter a time differential that represents an acceptable threshold.

Table 94. Time Differential diagnostic
Test Input	Description
Acceptable Time Difference (seconds)	Enter the time differential (in seconds) that represents an acceptable threshold for you environment. By default, the acceptable time difference is 2 seconds.