OperationsManagerActiveDirectoryManagementPackGuideWord文件下载.docx
《OperationsManagerActiveDirectoryManagementPackGuideWord文件下载.docx》由会员分享,可在线阅读,更多相关《OperationsManagerActiveDirectoryManagementPackGuideWord文件下载.docx(24页珍藏版)》请在冰豆网上搜索。
Microsoftmayhavepatents,patentapplications,trademarks,copyrights,orotherintellectualpropertyrightscoveringsubjectmatterinthisdocument.ExceptasexpresslyprovidedinanywrittenlicenseagreementfromMicrosoft,thefurnishingofthisdocumentdoesnotgiveyouanylicensetothesepatents,trademarks,copyrights,orotherintellectualproperty.
©
2007MicrosoftCorporation.Allrightsreserved.
Microsoft,MS-DOS,Windows,WindowsServer,WindowsVista,andActiveDirectoryareeitherregisteredtrademarksortrademarksofMicrosoftCorporationintheUnitedStatesand/orothercountries.
Allothertrademarksarepropertyoftheirrespectiveowners.
Contents
ActiveDirectoryManagementPackGuide5
GettingthelatestManagementPackandManagementPackDocumentation5
What'
sNew5
GettingStartedwiththeActiveDirectoryManagementPack6
BeforeYouImporttheManagementPack6
FilestoDownload6
64-bitConsiderationsonWindowsServer20037
HowtoImporttheActiveDirectoryManagementPacks8
AfterYouImporttheActiveDirectoryServerPack8
EnabletheAgencyProxySettingonAllDomainControllers8
ConfigureanAccountforReplicationMonitoring9
AfterYouImporttheActiveDirectoryClientManagementPack10
OptionalConfigurationfortheActiveDirectoryManagementPack11
SettingtheIntersiteReplicationLatencyThresholdValue13
DisablingPerformanceData14
EnableDataCollectionfortheReplicationLatencyReport14
SettingParametersforTasks15
SecurityConsiderationsfortheActiveDirectoryManagementPack16
Low-PrivilegeEnvironments16
ComputerGroups16
UnderstandingManagementPackOperations16
ObjectstheActiveDirectoryManagementPackDiscovers17
HowHealthRollsUp17
KeyMonitoringScenarios18
ViewingInformationintheOperationsManagerConsole23
Views23
Client-SideMonitoring23
ActiveDirectoryPerformanceViews24
ReplicationViews26
TopologyViews26
Reports27
ConfigurationInformation27
OperationsInformation28
MiscellaneousReports28
ManagementPackDetails29
TroubleshootingtheActiveDirectoryManagementPack29
ActiveDirectoryManagementPackGuide
MicrosoftOperationsManager2007providestwoManagementPacksforActiveDirectoryDomainServices(ADDS):
onethatmonitorsthedomaincontrollers,andonethatmonitorsActiveDirectoryclients.Tomonitorthedomaincontrollers,theActive
DirectoryServerManagementPackprovidesapredefined,ready-to-runsetofprocessingrules,monitoringscripts,andreportsthataredesignedspecificallytomonitortheperformanceandavailabilityoftheActiveDirectorydomaincontrollers.ThisManagementPackmonitorseventsthatareplacedintheApplication,System,andDirectoryServiceeventlogsbyvariousActive
Directorycomponentsandsubsystems.ItalsomonitorstheoverallhealthofActive
Directoryandalertsyoutocriticalperformanceissues.
Memberserversordesktopclientscansometimesexperienceissueseventhoughtheserversarehealthy.TheActiveDirectoryClientManagementPackhelpstoidentifytheseissues.ThisManagementPackisusedwiththeActiveDirectoryManagementPackandensuresthatActiveDirectoryisavailableforMicrosoftExchangeandotherdirectory-enabledapplications.Italsoprovidesadditionalinformationaboutwhetherthedomaincontrollersareavailablebyrunningsynthetictransactionsagainstthedirectoryservice,suchasLDAPbindsandLDAPpings.
ThisManagementPackdoesnotaddressSysvolreplication,eventhoughsomeaspectsofActiveDirectory,suchasGroupPolicysettingsforscriptsforstartup,shutdown,logon,andlogoff,relydirectlyonSysvolreplication.IfmonitoringtheFileReplicationSystem(FRS)orDistributedFileSystemReplication(DFSR)eventlogisnotsufficient,importtheFRSorDFSRManagementPacksand,inthecaseofFRS,deploytheUltrasoundmonitoringandtroubleshootingtool.
GettingthelatestManagementPackandManagementPackDocumentation
YoucanfindthelatestActiveDirectoryManagementPacksatThelatestversionofthisdocumentisavailableat
sNew
ThefollowingfeaturesarenewinthisreleaseoftheActiveDirectory:
∙DomaindiscoverythatenablesOperationsManager2007toautomaticallydiscoverdomainsinyourActiveDirectoryenvironment
∙Newperformanceandclientmonitoringviewstoprovidemorewaystoviewyourmonitoringdata
∙Anewchilddomaintopologyview,allowingyoutoseesubdomainsofotherdomains
∙Newdashboardviewsthatcombinemultipleviewsintooneviewtoallowanalysisoftrendsandsimilaritiesbetweenrelatedmetrics
GettingStartedwiththeActiveDirectoryManagementPack
BeforeYouImporttheManagementPack
BeforeyouimporttheActiveDirectoryManagementPackandtheActiveDirectoryClientManagementPack,notethefollowinglimitationsofbothManagementPacks:
∙NeitheroftheManagementPackssupportagentlessmonitoring.
∙TheActiveDirectoryManagementPackdoesnotsupportmonitoringacrossmultipleforests.
BeforeyouimporttheActiveDirectoryManagementPack,takethefollowingactions:
∙DecidewhetheryouwanttodeploytheActiveDirectoryClientManagementPack.ThisManagementPackintegrateswiththeserver-sidemonitoringcapabilitiesoftheActiveDirectoryManagementPacktoprovideamorerobustviewofActiveDirectoryhealth.
∙Verifythateachdomaincontrollerandclientyouplantomonitorhasanagentinstalled.
∙IfyouplantousetheActiveDirectoryClientManagementPack,deployitoncomputersthatarerunningdirectory-enabledapplications,suchasMicrosoftExchange
2000ServerandMicrosoftExchangeServer
2003.
FilestoDownload
DownloadthelatestManagementPackfilesfromoraccessthefilesdescribedinthefollowingtableintheManagementPackdirectoryontheinstallationmedia.
FileName
Description
Microsoft.Windows.Server.AD.2000.Discovery
RequiredformonitoringActiveDirectoryinWindowsServer2000
Microsoft.Windows.Server.AD.2000.Monitoring
Microsoft.Windows.Server.AD.2003.Discovery
RequiredformonitoringActiveDirectoryinWindowsServer2003
Microsoft.Windows.Server.AD.2003.Monitoring
Microsoft.Windows.Server.AD.Library
RequiredforallversionsofActiveDirectory
Microsoft.Windows.Server.AD.ClientMonitoring
Optional;
enablesclientmonitoring
64-bitConsiderationsonWindowsServer2003
TherearesomemigrationrestrictionsifyouarerunningMicrosoftOperationsManager2005simultaneouslywithOperationsManager2007ondomaincontrollersrunningthex64-basedversionofWindowsServer2003.
Theserestrictionsexistbecausethe2005agentrunningon64-bitdomaincontrollersisthe32-bitversionoftheagent,butthe2007agentisa64-bitversion.The2005agentcontainsthe32-bitversionoftheActiveDirectoryHelperObject(version1.0.3,alsoreferredtoasOOMADS)andtheOperationsManager200764-bitagentcannotusethe32-bitOOMADS.
Therearethefollowingrestrictions:
∙Youcannotmonitoradomaincontrollerrunningonthex65-bitversionofWindowsServer2003withOperationsManager2007andMicrosoftOperationsManager2005simultaneously.ExcludethedomaincontrollerfromtheMicrosoftOperationsManager2005monitoringandforeach64-bitdomaincontrolleranduseAddorRemoveProgramstoremoveOOMADS1.0.3.The32-bitOOMADSwillberemoved,the64bitOOMADSwillbeautomaticallyinstalledduringthenextscheduleddiscovery,andmonitoringwillbeginforOperationsManager2007.
∙IfanOperationsManager200764-bitagentisinstalledonadomaincontrollerrunningin64-bitmode,theexisting32-bitversionofOOMADSremainsandwillnotbeupgraded.Thismeansthatthe2007ActiveDirectoryManagementPackmonitoringwillnotwork.TheMicrosoftOperationsManager2005monitoringwillcontinuetowork.
HowtoImporttheActiveDirectoryManagementPacks
IntheOperationsConsole,ontheAdministratorpane,right-clicktheManagementPacksnode,clickImportManagementPack(s),andthenfollowthepromptsinthewizard.FormoreinformationaboutimportingManagementPacks,seethe"
HowtoImportManagementPacksinOperationsManager2007"
topicintheproducthelp.
OnceyouhaveimportedtheManagementPack,seethefollowingsectionsforyournextsteps:
∙AfterYouImporttheActiveDirectoryServerPack
∙Af