Chat now with support
Chat with Support

Active Administrator 8.4 - User Guide

Active Administrator Overview Certificates Security & Delegation Azure Active Directory  Active Directory Health
Switching to Active Directory Health Using the Active Directory Health landing page Installing Active Directory Health Analyzer agents Using the Active Directory Health Analyzer agent configuration utility Excluding domain controllers Managing the Remediation Library Analyzing Active Directory health Analyzing Azure Active Directory Managing Active Directory Health Analyzer alerts Managing alert notifications Pushing alerts to System Center Operations Manager and SNMP managers Managing monitored domain controllers Managing data collectors Active Directory Health Templates Managing Active Directory Health Analyzer agents Using the Troubleshooter Recovering Active Directory Health data
Auditing & Alerting Group Policy Active Directory Recovery Active Directory Infrastructure DC Management DNS Management Configuration
Using the Configuration landing page Managing tasks Defining role-based access Setting email server options Configuring SCOM and SNMP Settings Configuring Azure Active Directory Setting notification options Setting Active Template options Setting agent installation options Setting recovery options Setting GPO history options Setting certificate configuration Setting service monitoring policy Managing archive databases Migrating data to another database Setting a preferred domain controller Setting up workstation logon auditing Managing configuration settings Setting user options Managing the Active Directory server
Diagnostic Console Alerts Appendix
Domain controller alerts
Active Directory Certificate Services service is not running Active Directory Domain Services is not running Active Directory Web Services service is not running Consecutive replication failures DC cache hits DC DIT disk space DC DIT log file disk space DC LDAP load DC LDAP response too slow DC Memory Usage DC properties dropped DC RID pool low DC SMB connections DC SYSVOL disk space DC time sync lost Detected NO_CLIENT_SITE record DFS Replication service not running DFS service is not running DFSR conflict area disk space DFSR conflict files generated DFSRS CPU load DFSR RDC not enabled DFSR sharing violation DFSR staged file age DFSR staging area disk space DFSR USN records accepted DFSRS unresponsive DFSRS virtual memory DFSRS working set DNS Client Service is not running Domain controller CPU load Domain controller page faults Domain controller unresponsive File Replication Service is not running File replication (NTFRS) staging space free in kilobytes GC response too slow Group policy object inconsistent Hard disk drive Intersite Messaging Service is not running Invalid primary DNS domain controller address Invalid secondary DNS domain controller address KDC service is not running LSASS CPU load LSASS virtual memory LSASS working set Missing SRV DNS record for either the primary or secondary DNS server NETLOGON not shared NetLogon service is not running Orphaned group policy objects exist Review the reported orphaned GPO folders in the local SYSVOL and remove any that are obsolete. Physical memory Power supply Primary DNS resolver is not responding Secondary DNS resolver is not responding Security Accounts Manager Service is not running SRV record is not registered in DNS SYSVOL not shared W32Time service is not running Workstation Service is not running
Domain alerts Site alerts Forest alerts Azure Active Directory Connect alerts
Event Definitions PowerShell cmdlets

Configuring Azure Active Directory Connect application settings

1
Select Active Directory Health | Azure AD Connect.
3
Open the Agents tab.
4
Click Azure App Settings.
5
In the Tenant box, enter the fully qualified name of the Azure Active Directory domain.
6
In the Application Name box, enter AAADConnectApp as the display name.
7
In the Application ID box, enter the Application ID that you recorded from the Azure portal.
8
In the Security Key box, enter the Security key that you copied from the Azure portal.
9

Viewing Azure Active Directory Connect status

On the Summary tab you can view a summary of the output of the Synchronization Service Manager and manage the Azure Active Directory Connect Scheduler on each computer where you installed the Active Administrator Azure Active Directory Connect Health Monitoring Agent. See Installing the Azure Active Directory Connect Health Monitoring Agent.

1
Select Active Directory Health | Azure AD Connect.
3
Open the Summary tab, if necessary.
The Summary tab is divided into six sections:

Computer name

Name of the computer where the Azure Active Directory Connect agent is installed.

Operating system

Operating system on the computer where the Azure Active Directory Connect agent is installed

Azure Active Directory Sync version

Version of Azure Active Directory Sync that is running.

SQL server name

Name of the database server where the Azure Active Directory connect database is installed

Database name

Name of the Azure Active Directory Connect database (default is ADSync)

Database size

Size of the Azure Active Directory Connect database.

Last connectivity test completed

Indicates if the last connectivity test was successful or failed at the time and date shown. The connectivity test runs automatically every 15 minutes.

To view details about the test, click Test Details. You can copy the information to a text file.

Last sync

Indicates the date and time of the last synchronization.

Next sync

Indicates the date and time of the next synchronization.

Allowed sync cycle interval

Displays the minimum amount of time (30 minutes) between synchronization cycles allowed by Azure Active Directory.

Effective sync cycle interval

Displays the synchronization cycle schedule currently in effect.

Sync cycle enabled

Indicates if the synchronization cycle is enabled. To disable or enable the synchronization cycle, click Synchronization Settings.

Customized sync cycle interval

Displays the amount of time between synchronization cycles. To set the time interval, click Synchronization Settings.

Next sync cycle policy type

Indicates if the next run will process delta changes (Delta), or run a full import and sync (Initial).

Purge run history interval

Displays the amount of time that operation logs are kept. The default is to keep these logs for 7 days. To set the amount of time to keep the logs, click Maintenance Settings.

Maintenance enabled

Indicates if the maintenance process is enabled. The maintenance process updates the certificates/keys and purges the operations log. To disable or enable maintenance, click Maintenance Settings.

Staging mode enabled

Indicates if staging mode is enabled. If enabled, suppresses exports from running, but import and synchronization still run.

Scheduler suspended

Indicates if the scheduler is blocked from running, which may happen during an upgrade.

Sync cycle in progress

Indicates if the scheduler is running the import, sync, and export processes.

Start Synchronization

Start the synchronization process.

Synchronization Settings

Enable/disable synchronization. Set the time interval between synchronization cycles.

Maintenance Settings

Enable/disable maintenance. Set the amount of time to keep the operation logs,

View Configuration

View the Azure Active Directory Connect agent configuration. Click Copy to copy the list to the clipboard.

Viewing Azure Active Directory Connect alerts

On the Alerts tab, you can view current alerts, view alert history, clear alerts, and manage alert notification. To see a list of alerts, see Azure Active Directory Connect alerts.

1
Select Active Directory Health | Azure AD Connect.
3
Open the Alerts tab.
Table 50. Alerts options

Refresh

Refresh the list of alerts.

Properties

View details about a selected alert, such as the last time it was checked, which server is involved, a description of the alert, and the alert history. You also can clear an alert, except for Windows® Services alerts.

Clear

Clear the selected alert.

Alert History

View a list of the last 100 alerts. Click Load More to view more alerts. You also can double-click a selected alert to view details.

Alert Notification

Enable/disable alert notifications and manage the Azure Active Directory Connect Notifications email list.

Monitoring Azure Active Directory Connect operations

On the Operations tab you can view the output of the Synchronization Service Manager on each computer where you installed the Active Administrator Azure Active Directory Connect Health Monitoring Agent. See Installing the Azure Active Directory Connect Health Monitoring Agent.

1
Select Active Directory Health | Azure AD Connect.
3
Open the Operations tab.
4
The top pane displays the first 50 operations for the selected agent. The Sync statistics area displays a summary of the list of operations.
To filter the list, click Filter. You can filter by date or date range. To remove the filter, click Remove Filter.
The Export Statistics pane lists all the details for the selected operation.
To see a list of the objects affected by the operation, click Affected Objects. You can sort the list by clicking in a column header.
If the selected operation is an export, the Connection Status pane shows which server was used for the connection and any errors that occurred.
Related Documents