Chat now with support
Chat with Support

Active Administrator 8.6.3 - Web Console User Guide

Active Administrator Web Console Overview Active Directory Health Alerts Notifications Active Directory Health Check
Using the Health Check landing page Creating a Health Check Setting options for Health Check tests Purging Health Check History Health check tests
Forest tests Domain tests Domain controller tests Site tests
Active Directory Topology Reports Network Operations Center

Installed applications

Information only. Lists the application name, version number, vendor name, and description of the application.

Category
•
General

Installed updates

Information only. Lists the update name, type of update, URL, who installed the update, and on what date it was installed.

Category
•
General

Invalid primary DNS domain controller IP address

Indicates that the primary DNS service is reporting one or more invalid IP addresses for domain controllers in the domain in which the DNS server is located. An invalid IP address can cause the domain controller to be unreachable by some or all clients.

Category
•
General
Requirements
•
Supported on: Windows Server 2012, Windows Server 2012 R2, Windows Server 2016, and Windows Server 2019
•
Required permissions: When monitored locally and remotely, only domain user privilege is required. When monitored remotely, the target server must have WMI remote access enabled and the user must be a member of the Distributed COM Users group.
Description

This test queries DNS for the Service Locator (SRV) records and compares the results to the IP address reported by the Active Directory Health Analyzer agent hosted on the domain controller. The results indicate if the address retrieved in the DNS query is malformed, does not exist, or does not match the address reported by the agent.

The results are accompanied by a list of aberrant DNS SRV entries. Each entry consists of an IP address and a DNS name delimited by a single space. For example:

194.165.85.104 mothra.destroy.all.monsters.com
194.165.85.99 gammra.destroy.all.monsters.com

This situation may also occur if a domain controller is configured to obtain its IP address dynamically (via DHCP). Note that it is strongly recommended that the IP addresses of all domain controllers be statically assigned.

Resolution

Reconcile the DNS SRV entries with the IP address reported by the network adapter (or by DHCP, if applicable). The SRV entries appear under _ldap._tcp.dc._msdcs.<zone-name> in the DNS Management Console.

Invalid secondary DNS domain controller IP address

Indicates that the secondary DNS service is reporting one or more invalid IP addresses for domain controllers in the domain in which the DNS server is located. An invalid IP address can cause the domain controller to be unreachable by some or all clients.

Category
•
General
Requirements
•
Supported on: Windows Server 2012, Windows Server 2012 R2, Windows Server 2016, and Windows Server 2019
•
Required permissions: When monitored locally and remotely, only domain user privilege is required. When monitored remotely, the target server must have WMI remote access enabled and the user must be a member of the Distributed COM Users group.
Description

This test queries DNS for the Service Locator (SRV) records and compares the results to the IP address reported by the Active Directory Health Analyzer agent hosted on the domain controller. This test indicates if the address retrieved in the DNS query is malformed, does not exist, or does not match the address reported by the agent.

This test is accompanied by a list of aberrant DNS SRV entries. Each entry consists of an IP address and a DNS name delimited by a single space. For example:

194.165.85.104 mothra.destroy.all.monsters.com
194.165.85.99 gammra.destroy.all.monsters.com

This situation may also occur if a domain controller is configured to obtain its IP address dynamically (via DHCP). Note that it is strongly recommended that the IP addresses of all domain controllers be statically assigned.

Resolution

Reconcile the DNS SRV entries with the IP address reported by the network adapter (or by DHCP, if applicable). The SRV entries appear under _ldap._tcp.dc._msdcs.<zone-name> in the DNS Management Console.

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating