Chat now with support
Chat with Support

Active Administrator 8.7 - User Guide

Active Administrator Overview User Provisioning Certificates Security & Delegation  Active Directory Health
Switching to Active Directory Health Using the Active Directory Health landing page Installing Active Directory Health Analyzer agents Using the Active Directory Health Analyzer agent configuration utility Excluding domain controllers Managing the Remediation Library Analyzing Active Directory health Analyzing Azure Active Directory Managing Active Directory Health Analyzer alerts Managing alert notifications Pushing alerts to System Center Operations Manager and SNMP managers Managing monitored domain controllers Managing data collectors Active Directory Health Templates Managing Active Directory Health Analyzer agents Using the Troubleshooter Recovering Active Directory Health data
Auditing & Alerting Group Policy Active Directory Recovery Active Directory Infrastructure DC Management DNS Management Configuration
Using the Configuration landing page Managing tasks Defining role-based access Setting email server options Configuring SCOM and SNMP Settings Setting notification options Setting Active Template options Setting agent installation options Setting recovery options Setting GPO history options Setting certificate configuration Setting service monitoring policy Managing archive databases Migrating data to another database Setting a preferred domain controller Setting up workstation logon auditing Managing configuration settings Setting user options Managing the Active Directory server
Diagnostic Console Alerts Appendix
Domain controller alerts
Active Directory Certificate Services service is not running Active Directory Domain Services is not running Active Directory Web Services service is not running Consecutive replication failures DC cache hits DC DIT disk space DC DIT log file disk space DC LDAP load DC LDAP response too slow DC Memory Usage DC properties dropped DC RID pool low DC SMB connections DC SYSVOL disk space DC time sync lost Detected NO_CLIENT_SITE record DFS Replication service not running DFS service is not running DFSR conflict area disk space DFSR conflict files generated DFSR RDC not enabled DFSR sharing violation DFSR staged file age DFSR staging area disk space DFSR USN records accepted DFSRS CPU load DFSRS unresponsive DFSRS virtual memory DFSRS working set DNS Client Service is not running Domain controller CPU load Domain controller page faults Domain controller unresponsive File Replication Service is not running File replication (NTFRS) staging space free in kilobytes GC response too slow Group policy object inconsistent Hard disk drive Intersite Messaging Service is not running Invalid primary DNS domain controller address Invalid secondary DNS domain controller address KDC service is not running LSASS CPU load LSASS virtual memory LSASS working set Missing SRV DNS record for either the primary or secondary DNS server NETLOGON not shared NetLogon service is not running Orphaned group policy objects exist Physical memory Power supply Primary DNS resolver is not responding Secondary DNS resolver is not responding Security Accounts Manager Service is not running SRV record is not registered in DNS SYSVOL not shared W32Time service is not running Workstation Service is not running
Domain alerts Site alerts Forest alerts Azure Active Directory Connect alerts
Event Definitions PowerShell cmdlets

Adding a GPO to the repository

Previous Next


Group Policy > Using the GPO repository > Adding a GPO to the repository

Adding a GPO to the repository

During installation, Active Administrator® creates the GPORepository folder, which is located in the Active Administrator folder. When you check in a GPO into the repository, a copy of the GPO is placed in this folder. All changes you make to the GPO are stored in this folder until you choose to publish the GPO or discard the changes.

NOTE: You also can select Group Policy | Group Policy Objects, select a Group Policy object, and select More | Add to Repository. See Managing Group Policy objects.
To add a GPO to the repository
1
Select Group Policy | GPO Repository.
2
Click Add.

If you do not see the desired domain, click Add Forest and locate the forest with the desired domain.

6
7
Click Refresh, if necessary.

When the checkout is complete, you can edit the GPO offline. See Editing a GPO offline.

Editing a GPO offline

Previous Next


Group Policy > Using the GPO repository > Editing a GPO offline

Editing a GPO offline

Once GPO is in the repository, you can check it out for editing offline. When you are done editing offline, check the GPO in, and publish it to Active Directory®.

To edit a GPO offline
1
Select Group Policy | GPO Repository.
3
Select a GPO, and select Check In/Out | Check Out.
6
8
Click Check In.

The GPO is read-only in the repository. The change is not applied to the live GPO until you publish it to Active Directory.

Modeling GPO changes

Previous Next


Group Policy > Modeling GPO changes

Modeling GPO changes

Active Administrator® provides increased levels of manageability by way of GPO modeling, which allows you to select a user and computer and view or report on the Group Policy objects that affect those accounts. To get an exact picture of how your actions will affect Group Policy application, you can perform several calculations of what if scenarios, including the addition or removal of these objects from OUs, sites, or security groups, which allows you to quickly view Group Policy object application and errors on remote computers. Recent calculations are automatically saved for easy retrieval at a later time.

Reporting on GPO Modeling allow administrators to see exactly how objects are affected by Group Policy objects and to quickly troubleshoot where application of Group Policies were not handled correctly. Active Administrator provides clear and concise reports that not only show what Group Policy objects are applied, but the effective settings of such policies.

Topics 
To model GPO changes
1
Select Group Policy | GPO Modeling.

Existing simulations display in a list. You can sort each column in ascending or descending order by clicking on the column heading.

Table 84. GPO modeling tool bar

Option

Description

Refresh

Refresh the display.

New

Create and run a new simulation. See Creating a simulation.

Run Again

Run a selected simulation.

Copy Simulation

Copy a selected simulation to make changes to create a new simulation. See Creating a simulation.

View Report

View the report for the selected simulation.

Save Report

Save the selected simulation report to an HTML file.

Delete

Delete selected simulations.

Creating a simulation

Previous Next


Group Policy > Modeling GPO changes > Creating a simulation

Creating a simulation

To create a simulation
1
Select Group Policy | GPO Modeling.
2
Click New.
NOTE: You also can select an existing simulation, and click Copy Simulation to create a new simulation by making minor changes.
3
On the Welcome page, click Next.
7
Click Next.
NOTE: To reload the list of OUs, click Refresh. All selections are cleared and any newly added OUs appear in the list.
11
Click Next.
13
Click Next.

The everyone and authenticated users groups are automatically added to the simulation and cannot be removed. You can add additional groups to simulate group membership changes.

15
Optionally, click Add for user or computer security groups, select groups, and click OK.
16
Click Next.
17
Click Finish.

The simulation displays in a report.

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating