Active Administrator 8.7 - User Guide

Scheduling an account history purge and archive

Scheduling an account history purge and archive

You can choose to purge only, archive only, or purge then archive. You can select different events to purge or archive. Purged events are deleted from the live database. Archived events are copied to the Archive database, and then deleted from the live database.

To schedule an account history purge and archive

1	Select Security & Delegation | Purge Account History.

2	Click Schedule.

3	By default, scheduling is enabled. You can create a schedule and then disable it until you need it.

4	Select to archive or purge.

 

Table 29. Archive and purge options

Option	Description
Archive inactive user and computer history and account expiration history	Select to copy account history items from the live database to the active archive database, and then delete the history from the live database.
Purge inactive user and computer history and account expiration history	Select to delete account history items permanently from the live database.

5	By default, selected event entries and alert history items older than 30 days are deleted.

6	To change the default schedule, click Update.

7	Set the schedule.

8	Click Save.

 

 Active Directory Health

Active Directory Health proactively monitors and troubleshoots Active Directory so that you can deploy Windows Server with confidence.

IMPORTANT:   • The Active Directory Health license is required for the Active Directory Health module. If you do not have a license applied to your installation, the Active Directory Health module will not appear in Active Administrator. • Users must have the appropriate user roles selected to use the various features of the Active Directory Health Analyzer. See Defining role-based access. • The first time you open the Agents option, the Managed Domain Controllers page display is empty. The first task is to install an Active Directory Health Analyzer agent. See Installing Active Directory Health Analyzer agents. Once an agent is installed the Managed Domain Controllers page lists the domain controllers monitored by Active Directory Health Analyzer agents. See Managing monitored domain controllers. • If you are a current user of Quest® Directory Analyzer® and Directory Troubleshooter, you have the option of switching over to Active Directory Health gradually or all at once. See Switching to Active Directory Health. • The Active Directory Health Analyzer agent must be upgraded to the current version.

Topics 

•	Switching to Active Directory Health

•	Using the Active Directory Health landing page

•	Installing Active Directory Health Analyzer agents

•	Using the Active Directory Health Analyzer agent configuration utility

•	Excluding domain controllers

•	Managing the Remediation Library

•	Analyzing Active Directory health

•	Analyzing Azure Active Directory

•	Managing Active Directory Health Analyzer alerts

•	Managing alert notifications

•	Pushing alerts to System Center Operations Manager and SNMP managers

•	Managing monitored domain controllers

•	Managing data collectors

•	Active Directory Health Templates

•	Managing Active Directory Health Analyzer agents

•	Using the Troubleshooter

•	Recovering Active Directory Health data

Switching to Active Directory Health

Switching to Active Directory Health

Active Directory Health incorporates key features from Quest® Directory Analyzer® and Directory Troubleshooter. If you are a current user of Directory Analyzer and Directory Troubleshooter, you can switch over to Active Directory Health gradually, or right away.

To switch gradually

1	Deploy at least two agents into the Active Directory Health agent pool and add a few domain controllers to monitor. See Installing Active Directory Health Analyzer agents into a pool.

NOTE: When adding the agents into the pool, make sure that you make the agent available to all domain controllers or at least to all of the domain controllers that you plan to monitor with the pool of agents.

2	Stop, but do not uninstall, the old Directory Analyzer agent running on the domain controllers you just added.

3	Test these domain controllers in Active Directory Health.

4	If everything looks good, uninstall the old Directory Analyzer agents on the monitored domain controllers.

5	Add a few more domain controllers to the list of monitored domain controllers. See Adding monitored domain controllers.

6	Test these domain controllers in Active Directory Health.

7	If everything looks good, uninstall the old Directory Analyzer agents on the monitored domain controllers.

8	Repeat steps 5 through 7 until all of your domain controllers are monitored by the Active Directory Health Agent pool.

To switch right away

1	Deploy the number of required agents and add the domain controllers. See Installing Active Directory Health Analyzer agents into a pool.

2	Shut down the old Directory Analyzer agents.

3	Test Active Directory Health for a period of time.

4	Remove the old Directory Analyzer agents.

Using the Active Directory Health landing page

Using the Active Directory Health landing page

The first time you open the Active Directory Health module, a message displays that you need to configure Active Directory forests. Click Manage Agents and install at least one Active Directory Health Analyzer agent. See Installing Active Directory Health Analyzer agents.

Once you have installed at least one Active Directory Health Analyzer agent, the Active Directory Health landing page displays summary information for about forests, domains, sites, domain controllers, and alerts. Active tiles display summary information for each domain that is configured in Active Administrator®.

Summary area

The Summary area displays a summary of the forests, domains, sites, and domain controllers.

 

Table 30. Summary area

Object	Description
Forest	Number of forests being monitored.
Domains	Number of domains in the forest, including domains not being monitored.
Domain controllers	Number of domain controllers in the forest, including domain controllers not being monitored.
Agents	Number of installed agents.
Global catalog servers	Number of global catalog servers in all domains.
Read only domain controllers	Number of read-only domain controllers (RODCs) in all domains.
Sites	Number of sites in all forests.
Bridgehead servers	Number of bridgehead servers in all sites.
Monitored domain controllers	Number of monitored domain controllers.
Unmonitored domain controllers	Number of unmonitored domain controllers.
All agents running All schema versions consistent All schema masters consistent All naming masters consistent All PDC masters consistent All infrastructure masters consistent All RID masters consistent All functional levels consistent	Indicates the status of the object in all forests and domains. If one object has a problem, the status becomes No.

Alerts area

The Alerts area indicates the total number of critical, and warning alerts for the forest. The chart shows alert history over the past 12 hours. If you pause the cursor over the graph, you can view the number of critical, and warning alerts that were triggered or created during the hour, and the number of active alerts that occurred during the hour.

Active tiles

An active tile displays for each domain being monitored by Active Administrator®. The active tiles automatically update every 30 minutes, but you can use the icons to refresh the tiles at any time. You also can pause and resume the refresh of data. To customize the active tile refresh, see Setting general user options.

To use the Active Directory Health landing page

1	Select Active Directory Health.

2	Click the item to open a window so you can examine details.

▪	Click the Summary area to open the Analyzer window for the forest. See Analyzing the health of a forest.

▪	Click the Alert Summary area to open the Alerts window. See Viewing alerts and alert history.

▪	Click an active tile to open the Analyzer window for the domain. See Analyzing health of a selected domain.