Chat now with support

Get Live Help
Complete Registration

Sign In

Request Pricing

Contact Sales

FREE TRIALS

Active Administrator 8.6.3 - Web Console User Guide

Table of Contents

Active Administrator Web Console Overview

About the Web Console Configuring the web server Opening the Web Console Using the Active Administrator dashboard

Displaying the dashboard Arranging the dashboard panels Setting refresh and rotation Configuring dashboard panels

Using the help menu

Active Directory Health

About Active Directory Health Using the Active Directory Health landing page Analyzing health of a domain controller Analyzing health of a domain Analyzing health of a site Analyzing the health of a forest

Viewing alerts Viewing alert details Adding an alert to notifications Creating a notification for an alert Viewing alert history

Filtering alert history

Generating an alert history report Muting alerts Clearing mutes Viewing mute history

About alert notifications Viewing alert notifications Creating alert notifications Pushing alerts to System Center Operations Manager Limiting notifications

Active Directory Health Check

Using the Health Check landing page Creating a Health Check Setting options for Health Check tests Purging Health Check History Health check tests

Forest details Naming operations master inconsistent Naming operations master is not a global catalog server Naming operations master not responding Schema operations master inconsistent Schema operations master not responding Schema version inconsistent

Conflict encountered during replication DC replication latency DNS domain missing SRV records Domain details FSMO placement GC replication latency Infrastructure master host GC Infrastructure master not responding Infrastructure operations master inconsistent Objects exist in the Lost and Found PDC master not responding RID master not responding RID operations master inconsistent Root PDC time source missing

Domain controller tests

Active Directory Domain Service Cache copy read hits Compare SRV DNS records with Netlogon.dns file Consecutive replication failures threshold exceeded CPU processor time DC replication latency DFS namespace service DFS replication service DFSRS % processor time DFSRS conflict area disk space DFSRS conflict files generated DFSRS private bytes DFSRS RDC is not enabled DFSRS sharing violation DFSRS staged file age DFSRS staging area disk space DFSRS USN records accepted DFSRS working set Domain controller relative identifier (RID) Domain controller responsive Domain controller time synchronization File replication (NTFRS) staging space free in kilobytes GC replication latency Group policy object inconsistent Installed applications Installed updates Invalid primary DNS domain controller IP address Invalid secondary DNS domain controller IP address Kerberos Key Distribution Center service LDAP response time Logic disk details LSASS % processor time LSASS private bytes LSASS working set Memory details Memory page faults a second Missing domain controller SRV DNS record NetLogon folder shared NetLogon Windows service Network adapter information NTDS DRA inbound properties filtered a second NTDS LDAP searches a second NTDS LDAP writes a second Operating system details Primary DNS resolver not responding Secondary DNS resolver not responding Server sessions SysVol details SysVol folder shared Windows Time service

No authority in site to resolve universal group memberships Inter-site replication manager Inter-site replication topology generation disabled Intra-site replication topology generation disabled Morphed directories exist in site Site details Too few global catalog servers in site

Active Directory Topology

Viewing Active Directory forest topology Viewing alerts Customizing the topology layout

Running reports Active Directory Health reports Active Directory Infrastructure reports DNS reports Security reports Certificates reports Server configuration report

Network Operations Center

Using the Network Operations Center

Viewing operations summary Viewing topology Viewing active alerts Viewing domain controllers

Managing diagrams

Adding a new diagram Editing a diagram Deleting a diagram

Managing profiles

Adding a new profile Editing profile settings Deleting a profile

Forest tests

Active Administrator contains the following forest tests:

•

•

Naming operations master inconsistent

•

Naming operations master is not a global catalog server

•

Naming operations master not responding

•

Schema operations master inconsistent

•

Schema operations master not responding

•

Schema version inconsistent

Forest details

Information only.

Table 5. Forest details
Field	Description
Forest	Name of the forest.
Domains	Number of domains.
Domain controllers	Number of domain controllers.
Sites	Number of sites.
Empty sites	Number of empty sites.
GC servers	Number of global catalog (GC) servers.
RODC servers	Number of read-only domain controllers (RODCs).
Application partitions	Number of application partitions.
Bridgehead servers	Number of bridgehead servers.
Functional level	Functional level of the site.
Domain naming master	Name of the domain controller with the domain naming master role.
Schema master	Name of the domain controller with the schema master role.
Operations master consistent	Indicates if all the domain controllers report the same operation masters.
Schema master consistent	Indicates if all the domain controllers report the same schema masters.
Functional level consistent	Indicates if all the domain controllers report the same functional level.

Naming operations master inconsistent

Indicates that the naming operations master is not consistent among all domain controllers in the forest.

•

Supported on: Windows Server 2012, Windows Server 2012 R2, Windows Server 2016, and Windows Server 2019

•

Required permissions: Domain user privilege in all domains in the forest.

The domain naming operations master is contained in the fSMORoleOwner property of the CN=Partitions,CN=Configuration,DC=<root domain> container. Because the partitions container is part of the configuration naming context, every domain controller in the forest has a copy of the domain naming operations master. The domain naming operations master determines what domain controller in the forest can initiate a domain renaming operation. If the domain naming operations master is inconsistent, it is possible to issue a domain renaming operation simultaneously at two different domain controllers, with potentially disastrous consequences.

The domain naming operations master can become inconsistent because an administrator used NTDSUTIL.EXE to move the operations master when there was incomplete connectivity to all domain controllers. It can also occur because of replication errors.

•

Make sure that no one attempts to rename a domain.

•

Wait to see if the error clears. If an administrator has moved an operations master to another domain controller, replication to all domain controllers in the forest can take a long time.

•

If the situation does not clear, contact your Microsoft® Windows® support representative.

Naming operations master is not a global catalog server

Indicates that a server possessing the domain naming operations master does not host a global catalog (GC).

•

Supported on: Windows Server 2012, Windows Server 2012 R2, Windows Server 2016, and Windows Server 2019

•

Required permissions: Domain user privilege in the domain where the schema and naming masters reside.

The domain naming operations master must be a global catalog server because the domain naming operations master is responsible for creating objects that represent new domains. In order to do this, the domain naming operations master must be able to make sure that no other object — whether it is a domain object or not — has the same name as the new domain object. The domain naming operations master always runs a global catalog, which contains a partial replica of every object, to allow the domain naming operations master to quickly check for a duplicate object name prior to creating a new domain object.

•

Enable a global catalog on the domain naming operations master.

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating