Chat now with support
Chat with Support

Active Administrator 8.4 - User Guide

Active Administrator Overview Certificates Security & Delegation Azure Active Directory  Active Directory Health
Switching to Active Directory Health Using the Active Directory Health landing page Installing Active Directory Health Analyzer agents Using the Active Directory Health Analyzer agent configuration utility Excluding domain controllers Managing the Remediation Library Analyzing Active Directory health Analyzing Azure Active Directory Managing Active Directory Health Analyzer alerts Managing alert notifications Pushing alerts to System Center Operations Manager and SNMP managers Managing monitored domain controllers Managing data collectors Active Directory Health Templates Managing Active Directory Health Analyzer agents Using the Troubleshooter Recovering Active Directory Health data
Auditing & Alerting Group Policy Active Directory Recovery Active Directory Infrastructure DC Management DNS Management Configuration
Using the Configuration landing page Managing tasks Defining role-based access Setting email server options Configuring SCOM and SNMP Settings Configuring Azure Active Directory Setting notification options Setting Active Template options Setting agent installation options Setting recovery options Setting GPO history options Setting certificate configuration Setting service monitoring policy Managing archive databases Migrating data to another database Setting a preferred domain controller Setting up workstation logon auditing Managing configuration settings Setting user options Managing the Active Directory server
Diagnostic Console Alerts Appendix
Domain controller alerts
Active Directory Certificate Services service is not running Active Directory Domain Services is not running Active Directory Web Services service is not running Consecutive replication failures DC cache hits DC DIT disk space DC DIT log file disk space DC LDAP load DC LDAP response too slow DC Memory Usage DC properties dropped DC RID pool low DC SMB connections DC SYSVOL disk space DC time sync lost Detected NO_CLIENT_SITE record DFS Replication service not running DFS service is not running DFSR conflict area disk space DFSR conflict files generated DFSRS CPU load DFSR RDC not enabled DFSR sharing violation DFSR staged file age DFSR staging area disk space DFSR USN records accepted DFSRS unresponsive DFSRS virtual memory DFSRS working set DNS Client Service is not running Domain controller CPU load Domain controller page faults Domain controller unresponsive File Replication Service is not running File replication (NTFRS) staging space free in kilobytes GC response too slow Group policy object inconsistent Hard disk drive Intersite Messaging Service is not running Invalid primary DNS domain controller address Invalid secondary DNS domain controller address KDC service is not running LSASS CPU load LSASS virtual memory LSASS working set Missing SRV DNS record for either the primary or secondary DNS server NETLOGON not shared NetLogon service is not running Orphaned group policy objects exist Review the reported orphaned GPO folders in the local SYSVOL and remove any that are obsolete. Physical memory Power supply Primary DNS resolver is not responding Secondary DNS resolver is not responding Security Accounts Manager Service is not running SRV record is not registered in DNS SYSVOL not shared W32Time service is not running Workstation Service is not running
Domain alerts Site alerts Forest alerts Azure Active Directory Connect alerts
Event Definitions PowerShell cmdlets

Excluding certificates that support cryptography

If notifications are enabled and a certificate supports the selected cryptographic hash algorithm, an email notification is sent. See Setting certificate configuration. You can exclude a selected certificate from being included in the notification.

To exclude a certificate from notification
1
Select Certificates | Certificate Management.
2
Select the computer to view the certificates.
3
Select a certificate, and select More | Notifications.
4
Select Exclude from notification.
5
Click OK.
To exclude a certificate in the repository from notification
1
Select Certificates | Certificate Repository.
2
Select a certificate, and click Edit Certificate.
3
Select Exclude from notification.
4
Click OK.

Excluding revoked certificates

By default, if a certificate is revoked, an email notification is sent. You can exclude a selected certificate from being included in the notification.

To exclude a certificate from revoked notification
1
Select Certificates | Certificate Management.
2
Select the computer to view the certificates.
3
Select a certificate, and select More | Revoke notifications.
4
Select the check box to exclude the certificate.
5
Click OK.
To exclude a certificate in the repository from revoked notification
1
Select Certificates | Certificate Repository.
2
Select a certificate, and click Edit Certificate.
3
Select Exclude from revoke notification.
4
Click OK.

Reporting on certificates

You can choose to create a certificates report to display in a report editor, to send in an email, or to save to a file. You also can report on certificates in the repository. See Reporting on certificates in the repository.

Topics:

•
Sending a report
•
Managing report schedules

Sending a report

To send a certificates report by email or save to a file
1
Select Certificates | Certificate Management.
2
Select the computer to view the certificates.
3
Select More | Report.
4
Click Next.
5
Select the data to include in the report.
 
Table 8. Certificate report options
Option
Description

All Certificates

Select to include all certificates in the report.

Certificates that should be replaced

Select to include only the certificates that should be replaced.

Specified Certificates

Select to include only the specified certificates.

•
Valid
•
Expired
•
Will expire in
•
x days
•
Parent Revoked
•
Revoked
•
You can filter the certificates by hash. By default, all certificates that support the cryptographic hash algorithm are included. To include only a specific cryptographic hash algorithm, select the filter from the list.
6
Click Next.
7
Select the computers to include in the report. To unselect all computers, clear the check box in the column heading.
* 
NOTE: The computers available for selection must be included in the list of computers being managed for certificates. See Managing computers.
8
Click Next.
9
Choose to create a Delivery report that you can print or email, or to open an Interactive report in a report editor.
If you choose Interactive, go to step 13.
10
Create a schedule for the report if desired.
a
Select Enable Schedule.
b
Click Update.
c
Set the schedule.
d
Click OK.
* 
NOTE: You can modify this schedule or disable its execution. See Managing report schedules.
11
Change the default report name if desired.
12
By default, the date and time are appended to the end of the file name. Clear the check box if you do not want the date and time appended to the file name.
13
By default, a PDF file is created. You can choose a different format.
14
You can send the report by email and save it to a file.
To send an email
a
Click Email, if necessary.
b
By default, the logged in account displays in the Email Addresses list. To add more recipients, click Add, type the email addresses, and click OK.
c
Modify the default subject line if desired.
d
Set the priority of the email.
To save the file to a folder
a
Click Save to Folder.
b
Click Add.
c
Add a path to the location where you want to store the report file.
d
Click OK.
15
Click Next.
16
Review the choices you made.
17
Click Finish.
If you chose Interactive, a report editor opens to display the report.
Related Documents