Chat now with support
Chat with Support

Active Administrator 8.4 - User Guide

Active Administrator Overview Certificates Security & Delegation Azure Active Directory  Active Directory Health
Switching to Active Directory Health Using the Active Directory Health landing page Installing Active Directory Health Analyzer agents Using the Active Directory Health Analyzer agent configuration utility Excluding domain controllers Managing the Remediation Library Analyzing Active Directory health Analyzing Azure Active Directory Managing Active Directory Health Analyzer alerts Managing alert notifications Pushing alerts to System Center Operations Manager and SNMP managers Managing monitored domain controllers Managing data collectors Active Directory Health Templates Managing Active Directory Health Analyzer agents Using the Troubleshooter Recovering Active Directory Health data
Auditing & Alerting Group Policy Active Directory Recovery Active Directory Infrastructure DC Management DNS Management Configuration
Using the Configuration landing page Managing tasks Defining role-based access Setting email server options Configuring SCOM and SNMP Settings Configuring Azure Active Directory Setting notification options Setting Active Template options Setting agent installation options Setting recovery options Setting GPO history options Setting certificate configuration Setting service monitoring policy Managing archive databases Migrating data to another database Setting a preferred domain controller Setting up workstation logon auditing Managing configuration settings Setting user options Managing the Active Directory server
Diagnostic Console Alerts Appendix
Domain controller alerts
Active Directory Certificate Services service is not running Active Directory Domain Services is not running Active Directory Web Services service is not running Consecutive replication failures DC cache hits DC DIT disk space DC DIT log file disk space DC LDAP load DC LDAP response too slow DC Memory Usage DC properties dropped DC RID pool low DC SMB connections DC SYSVOL disk space DC time sync lost Detected NO_CLIENT_SITE record DFS Replication service not running DFS service is not running DFSR conflict area disk space DFSR conflict files generated DFSRS CPU load DFSR RDC not enabled DFSR sharing violation DFSR staged file age DFSR staging area disk space DFSR USN records accepted DFSRS unresponsive DFSRS virtual memory DFSRS working set DNS Client Service is not running Domain controller CPU load Domain controller page faults Domain controller unresponsive File Replication Service is not running File replication (NTFRS) staging space free in kilobytes GC response too slow Group policy object inconsistent Hard disk drive Intersite Messaging Service is not running Invalid primary DNS domain controller address Invalid secondary DNS domain controller address KDC service is not running LSASS CPU load LSASS virtual memory LSASS working set Missing SRV DNS record for either the primary or secondary DNS server NETLOGON not shared NetLogon service is not running Orphaned group policy objects exist Review the reported orphaned GPO folders in the local SYSVOL and remove any that are obsolete. Physical memory Power supply Primary DNS resolver is not responding Secondary DNS resolver is not responding Security Accounts Manager Service is not running SRV record is not registered in DNS SYSVOL not shared W32Time service is not running Workstation Service is not running
Domain alerts Site alerts Forest alerts Azure Active Directory Connect alerts
Event Definitions PowerShell cmdlets

Using the analyzer pages

All the analyzer pages have a similar tool bar and shortcut links that help you with analyzing the health of Active Directory®.

Refresh

Refresh the tree.

Refresh View

Refresh the data on the page.

Alert Details

View the details of a selected alert.

Copy Alert

Copy a selected alert to the clipboard.

Diagnose

Open the Diagnostic Console. See Diagnostic Console.

Mute

Mute alerts. See Muting alerts.

Mute History

View the history of mutes. See Viewing mute history.

Schedule Mute

Schedule muting alerts. See To schedule muting alerts.

Mute Schedule

View or modify the schedule of mutes. See To view and modify a scheduled mute..

The top pane on each analyzer page displays the names and numbers of objects and remains in the display when you change tabs. A count of the current alerts, critical and warnings, displays in the upper right-hand corner.

The Current Alerts tab lists the alerts for the object. A count of the current alerts, critical and warnings, displays in the upper right-hand corner.

To view details about an alert, click Alert Details or double-click an alert.

Analyzing health of all domain controllers

You can view information on all monitored domain controllers or a selected monitored domain controller. To view information on a selected domain controller, see Analyzing health of a selected domain controller.

1
Select Active Directory Health | Analyzer.
2
Expand the tree, and select Monitored Domain Controllers.
The Summary tab lists all the domain controllers and indicates the number of critical alerts and warnings for each. A vertical bar next to each domain controller indicates its status. A red bar indicates the domain controller has alerts.
To filter the list of monitored domain controllers, type in the Filter domain controller box. The list filters as you type.
The Current Alerts tab lists the alerts for all the domain controllers. See Using the analyzer pages.

Analyzing health of a selected domain controller

You can view information on all monitored domain controllers or a selected monitored domain controller. To view information on all domain controllers, see Analyzing health of all domain controllers.

1
Select Active Directory Health | Analyzer.
2
Expand the tree, and expand Monitored domain controllers.

Domain

Name of the domain in which the domain controller resides

Site

Name of the site in which the domain controller resides

Forest

Name of the forest in which the domain resides

OS version

Version of the operating system

System up time

Duration of time the domain controller has been running

Read only DC

Indicates if the domain controller is a read-only domain controller (RODC)

Global catalog

Indicates if the domain controller is a global catalog server

Monitored by

Name of the domain controller on which the agent is installed that is monitoring the selected domain controller

Last updated

Date and time the domain controller was last updated

Data collectors provide the input to the various tabs. Some data collectors can be enabled or disabled. See Managing data collectors. If you do not see the corresponding data, make sure the data collector is enabled and the necessary permissions are set. To check the required minimum permissions, see the dialog box for the individual data collector or the Alerts Appendix.

The remaining data collectors used to provide information to the tabs are not available for management and are provided to Active Administrator® through Windows® Management Instrumentation (WMI).

Summary

Displays the data collected in the indicated time frame for the enabled Performance Counters for the selected forest, domain, site, or monitored domain controller.

Performance Counters data collectors

Services

Displays the status of Windows services.

If a service is running, but has stopped at a point in time, that stoppage is indicated with red.

Windows Services data collectors

Server

Displays information about the server, the server time, memory details, disk details, and network adapters.

General data collectors:

Domain controller time synchronization

Logic disk details

Active Directory

Displays Active Directory® database and SYSVOL disk usage and LDAP response time.

Validation data collectors

General data collectors:

Active Directory database details

Domain controller relative identifier (RID)

LDAP response time

SysVol details

Current Alerts

Displays the current alerts for the selected item in the tree. See Using the analyzer pages.

Alerts are enabled by default and correspond to data controllers. Both alerts and data collectors can be enabled and disabled.

See Setting alerts and Setting data collectors.

Applications

Displays installed applications on the selected monitored domain controller. Applications installed or removed in the last 24 hours are listed in a separate pane.

Use the Filter Installed Applications by Name option to search for specific applications.

Not available for management

Updates

Displays installed updates on the selected monitored domain controller. Updates installed or removed in the last 24 hours are listed in a separate pane.

To view information about the update in the default web browser, double-click the update.

Use the Filter Installed Windows Updates by Name option to search for specific updates.

 

Not available for management

Analyzing health of all domains

You can view information on all domains or a selected domain. To view information on a selected domain, see Analyzing health of a selected domain.

1
Select Active Directory Health | Analyzer.
The Summary tab lists all the domains and indicates the number of critical alerts and warnings for each domain. A vertical bar next to each domain indicates its status. A red bar indicates the site has alerts.
The Current Alerts tab lists the alerts for all the domains. See Using the analyzer pages.
Related Documents