Chat now with support
Chat with Support

Active Administrator 8.4 - Web Console User Guide

Active Administrator Web Console Overview Active Directory Health Alerts Notifications Active Directory Health Check
Using the Health Check landing page Creating a Health Check Setting options for Health Check tests Health check tests
Forest tests Domain tests Domain controller tests Site tests
Active Directory Topology Reports Network Operations Center

Group policy object inconsistent

Indicates the Group Policy object (GPO) for a given policy has fallen out of sync with the representation stored on the local SYSVOL share.

Supported on: Windows Server 2012, Windows Server 2012 R2, Windows Server 2016, and Windows Server 2019
Permission requirements: When monitored locally and remotely, only domain user privilege is required.

This situation typically arises from high replication latency or duplicated NTDS Connection Objects.

A Group Policy Object on <server-name> is represented inconsistently between the local directory and the local file system. This problem can be remedied by forcing NTFRS and Active Directory® to refresh.

Installed applications

Information only. Lists the application name, version number, vendor name, and description of the application.

Installed updates

Information only. Lists the update name, type of update, URL, who installed the update, and on what date it was installed.

Invalid primary DNS domain controller IP address

Indicates that the primary DNS service is reporting one or more invalid IP addresses for domain controllers in the domain in which the DNS server is located. An invalid IP address can cause the domain controller to be unreachable by some or all clients.

Supported on: Windows Server 2012, Windows Server 2012 R2, Windows Server 2016, and Windows Server 2019
Required permissions: When monitored locally and remotely, only domain user privilege is required. When monitored remotely, the target server must have WMI remote access enabled and the user must be a member of the Distributed COM Users group.

This test queries DNS for the Service Locator (SRV) records and compares the results to the IP address reported by the Active Directory Health Analyzer agent hosted on the domain controller. The results indicate if the address retrieved in the DNS query is malformed, does not exist, or does not match the address reported by the agent.

The results are accompanied by a list of aberrant DNS SRV entries. Each entry consists of an IP address and a DNS name delimited by a single space. For example:

This situation may also occur if a domain controller is configured to obtain its IP address dynamically (via DHCP). Note that it is strongly recommended that the IP addresses of all domain controllers be statically assigned.

Reconcile the DNS SRV entries with the IP address reported by the network adapter (or by DHCP, if applicable). The SRV entries appear under _ldap._tcp.dc._msdcs.<zone-name> in the DNS Management Console.

Related Documents