Active Administrator 8.6.3 - User Guide

Purging account history on demand

Purging account history on demand

Deletes event entries and alert history items permanently from the live audit database based on the selected purge options.

NOTE: To schedule the purge process, see Scheduling an account history purge and archive.

To purge account history on demand

1	Select Security & Delegation | Purge Account History.

2	Click Purge Now.

3	Type a date or select a date from the calendar.

4	Click Purge Now.

Scheduling an account history purge and archive

Scheduling an account history purge and archive

You can choose to purge only, archive only, or purge then archive. You can select different events to purge or archive. Purged events are deleted from the live database. Archived events are copied to the Archive database, and then deleted from the live database.

To schedule an account history purge and archive

1	Select Security & Delegation | Purge Account History.

2	Click Schedule.

3	By default, scheduling is enabled. You can create a schedule and then disable it until you need it.

4	Select to archive or purge.

 

Table 29. Archive and purge options

Option	Description
Archive inactive user and computer history and account expiration history	Select to copy account history items from the live database to the active archive database, and then delete the history from the live database.
Purge inactive user and computer history and account expiration history	Select to delete account history items permanently from the live database.

5	By default, selected event entries and alert history items older than 30 days are deleted.

6	To change the default schedule, click Update.

7	Set the schedule.

8	Click Save.

 

 Active Directory Health

Active Directory Health proactively monitors and troubleshoots Active Directory so that you can deploy Windows Server with confidence.

IMPORTANT:   • The Active Directory Health license is required for the Active Directory Health module. If you do not have a license applied to your installation, the Active Directory Health module will not appear in Active Administrator. • Users must have the appropriate user roles selected to use the various features of the Active Directory Health Analyzer. See Defining role-based access. • The first time you open the Agents option, the Managed Domain Controllers page display is empty. The first task is to install an Active Directory Health Analyzer agent. See Installing Active Directory Health Analyzer agents. Once an agent is installed the Managed Domain Controllers page lists the domain controllers monitored by Active Directory Health Analyzer agents. See Managing monitored domain controllers. • If you are a current user of Quest® Directory Analyzer® and Directory Troubleshooter, you have the option of switching over to Active Directory Health gradually or all at once. See Switching to Active Directory Health. • The Active Directory Health Analyzer agent must be upgraded to the current version.

Topics 

•	Switching to Active Directory Health

•	Using the Active Directory Health landing page

•	Installing Active Directory Health Analyzer agents

•	Using the Active Directory Health Analyzer agent configuration utility

•	Excluding domain controllers

•	Managing the Remediation Library

•	Analyzing Active Directory health

•	Analyzing Azure Active Directory

•	Managing Active Directory Health Analyzer alerts

•	Managing alert notifications

•	Pushing alerts to System Center Operations Manager and SNMP managers

•	Managing monitored domain controllers

•	Managing data collectors

•	Active Directory Health Templates

•	Managing Active Directory Health Analyzer agents

•	Using the Troubleshooter

•	Recovering Active Directory Health data

Switching to Active Directory Health

Switching to Active Directory Health

Active Directory Health incorporates key features from Quest® Directory Analyzer® and Directory Troubleshooter. If you are a current user of Directory Analyzer and Directory Troubleshooter, you can switch over to Active Directory Health gradually, or right away.

To switch gradually

1	Deploy at least two agents into the Active Directory Health agent pool and add a few domain controllers to monitor. See Installing Active Directory Health Analyzer agents into a pool.

NOTE: When adding the agents into the pool, make sure that you make the agent available to all domain controllers or at least to all of the domain controllers that you plan to monitor with the pool of agents.

2	Stop, but do not uninstall, the old Directory Analyzer agent running on the domain controllers you just added.

3	Test these domain controllers in Active Directory Health.

4	If everything looks good, uninstall the old Directory Analyzer agents on the monitored domain controllers.

5	Add a few more domain controllers to the list of monitored domain controllers. See Adding monitored domain controllers.

6	Test these domain controllers in Active Directory Health.

7	If everything looks good, uninstall the old Directory Analyzer agents on the monitored domain controllers.

8	Repeat steps 5 through 7 until all of your domain controllers are monitored by the Active Directory Health Agent pool.

To switch right away

1	Deploy the number of required agents and add the domain controllers. See Installing Active Directory Health Analyzer agents into a pool.

2	Shut down the old Directory Analyzer agents.

3	Test Active Directory Health for a period of time.

4	Remove the old Directory Analyzer agents.