OperationsManagerActiveDirectoryManagementPackGuide.docx

OperationsManagerActiveDirectoryManagementPackGuide.docx

《OperationsManagerActiveDirectoryManagementPackGuide.docx》由会员分享，可在线阅读，更多相关《OperationsManagerActiveDirectoryManagementPackGuide.docx（24页珍藏版）》请在冰豆网上搜索。

OperationsManagerActiveDirectoryManagementPackGuide

ActiveDirectoryManagementPackGuideforOperationsManager2007

MicrosoftCorporation

Published:

March,2007

Author

JonobieFord

Feedback

Sendsuggestionsandcommentsaboutthisdocumenttomomdocs@.PleaseincludetheManagementPackguidenamewithyourfeedback.

Informationinthisdocument,includingURLandotherInternetWebsitereferences,issubjecttochangewithoutnotice.Unlessotherwisenoted,thecompanies,organizations,products,domainnames,e-mailaddresses,logos,people,places,andeventsdepictedinexampleshereinarefictitious.Noassociationwithanyrealcompany,organization,product,domainname,e-mailaddress,logo,person,place,oreventisintendedorshouldbeinferred.Complyingwithallapplicablecopyrightlawsistheresponsibilityoftheuser.Withoutlimitingtherightsundercopyright,nopartofthisdocumentmaybereproduced,storedinorintroducedintoaretrievalsystem,ortransmittedinanyformorbyanymeans（electronic,mechanical,photocopying,recording,orotherwise）,orforanypurpose,withouttheexpresswrittenpermissionofMicrosoftCorporation.

Microsoftmayhavepatents,patentapplications,trademarks,copyrights,orotherintellectualpropertyrightscoveringsubjectmatterinthisdocument.ExceptasexpresslyprovidedinanywrittenlicenseagreementfromMicrosoft,thefurnishingofthisdocumentdoesnotgiveyouanylicensetothesepatents,trademarks,copyrights,orotherintellectualproperty.

©2007MicrosoftCorporation.Allrightsreserved.

Microsoft,MS-DOS,Windows,WindowsServer,WindowsVista,andActiveDirectoryareeitherregisteredtrademarksortrademarksofMicrosoftCorporationintheUnitedStatesand/orothercountries.

Allothertrademarksarepropertyoftheirrespectiveowners.

Contents

ActiveDirectoryManagementPackGuide5

GettingthelatestManagementPackandManagementPackDocumentation5

What'sNew5

GettingStartedwiththeActiveDirectoryManagementPack6

BeforeYouImporttheManagementPack6

FilestoDownload6

64-bitConsiderationsonWindowsServer20037

HowtoImporttheActiveDirectoryManagementPacks8

AfterYouImporttheActiveDirectoryServerPack8

EnabletheAgencyProxySettingonAllDomainControllers8

ConfigureanAccountforReplicationMonitoring9

AfterYouImporttheActiveDirectoryClientManagementPack10

OptionalConfigurationfortheActiveDirectoryManagementPack11

SettingtheIntersiteReplicationLatencyThresholdValue13

DisablingPerformanceData14

EnableDataCollectionfortheReplicationLatencyReport14

SettingParametersforTasks15

SecurityConsiderationsfortheActiveDirectoryManagementPack16

Low-PrivilegeEnvironments16

ComputerGroups16

UnderstandingManagementPackOperations16

ObjectstheActiveDirectoryManagementPackDiscovers17

HowHealthRollsUp17

KeyMonitoringScenarios18

ViewingInformationintheOperationsManagerConsole23

Views23

Client-SideMonitoring23

ActiveDirectoryPerformanceViews24

ReplicationViews26

TopologyViews26

Reports27

ConfigurationInformation27

OperationsInformation28

MiscellaneousReports28

ManagementPackDetails29

TroubleshootingtheActiveDirectoryManagementPack29

ActiveDirectoryManagementPackGuide

MicrosoftOperationsManager2007providestwoManagementPacksforActiveDirectoryDomainServices（ADDS）:

onethatmonitorsthedomaincontrollers,andonethatmonitorsActiveDirectoryclients.Tomonitorthedomaincontrollers,theActive DirectoryServerManagementPackprovidesapredefined,ready-to-runsetofprocessingrules,monitoringscripts,andreportsthataredesignedspecificallytomonitortheperformanceandavailabilityoftheActiveDirectorydomaincontrollers.ThisManagementPackmonitorseventsthatareplacedintheApplication,System,andDirectoryServiceeventlogsbyvariousActive Directorycomponentsandsubsystems.ItalsomonitorstheoverallhealthofActive Directoryandalertsyoutocriticalperformanceissues.

Memberserversordesktopclientscansometimesexperienceissueseventhoughtheserversarehealthy.TheActiveDirectoryClientManagementPackhelpstoidentifytheseissues.ThisManagementPackisusedwiththeActiveDirectoryManagementPackandensuresthatActiveDirectoryisavailableforMicrosoftExchangeandotherdirectory-enabledapplications.Italsoprovidesadditionalinformationaboutwhetherthedomaincontrollersareavailablebyrunningsynthetictransactionsagainstthedirectoryservice,suchasLDAPbindsandLDAPpings.

ThisManagementPackdoesnotaddressSysvolreplication,eventhoughsomeaspectsofActiveDirectory,suchasGroupPolicysettingsforscriptsforstartup,shutdown,logon,andlogoff,relydirectlyonSysvolreplication.IfmonitoringtheFileReplicationSystem（FRS）orDistributedFileSystemReplication（DFSR）eventlogisnotsufficient,importtheFRSorDFSRManagementPacksand,inthecaseofFRS,deploytheUltrasoundmonitoringandtroubleshootingtool.

GettingthelatestManagementPackandManagementPackDocumentation

YoucanfindthelatestActiveDirectoryManagementPacksatThelatestversionofthisdocumentisavailableat

What'sNew

ThefollowingfeaturesarenewinthisreleaseoftheActiveDirectory:

∙DomaindiscoverythatenablesOperationsManager2007toautomaticallydiscoverdomainsinyourActiveDirectoryenvironment

∙Newperformanceandclientmonitoringviewstoprovidemorewaystoviewyourmonitoringdata

∙Anewchilddomaintopologyview,allowingyoutoseesubdomainsofotherdomains

∙Newdashboardviewsthatcombinemultipleviewsintooneviewtoallowanalysisoftrendsandsimilaritiesbetweenrelatedmetrics

GettingStartedwiththeActiveDirectoryManagementPack

BeforeYouImporttheManagementPack

BeforeyouimporttheActiveDirectoryManagementPackandtheActiveDirectoryClientManagementPack,notethefollowinglimitationsofbothManagementPacks:

∙NeitheroftheManagementPackssupportagentlessmonitoring.

∙TheActiveDirectoryManagementPackdoesnotsupportmonitoringacrossmultipleforests.

BeforeyouimporttheActiveDirectoryManagementPack,takethefollowingactions:

∙DecidewhetheryouwanttodeploytheActiveDirectoryClientManagementPack.ThisManagementPackintegrateswiththeserver-sidemonitoringcapabilitiesoftheActiveDirectoryManagementPacktoprovideamorerobustviewofActiveDirectoryhealth.

∙Verifythateachdomaincontrollerandclientyouplantomonitorhasanagentinstalled.

∙IfyouplantousetheActiveDirectoryClientManagementPack,deployitoncomputersthatarerunningdirectory-enabledapplications,suchasMicrosoftExchange 2000ServerandMicrosoftExchangeServer 2003.

FilestoDownload

DownloadthelatestManagementPackfilesfromoraccessthefilesdescribedinthefollowingtableintheManagementPackdirectoryontheinstallationmedia.

FileName

Description

Microsoft.Windows.Server.AD.2000.Discovery

RequiredformonitoringActiveDirectoryinWindowsServer2000

Microsoft.Windows.Server.AD.2000.Monitoring

RequiredformonitoringActiveDirectoryinWindowsServer2000

Microsoft.Windows.Server.AD.2003.Discovery

RequiredformonitoringActiveDirectoryinWindowsServer2003

Microsoft.Windows.Server.AD.2003.Monitoring

RequiredformonitoringActiveDirectoryinWindowsServer2003

Microsoft.Windows.Server.AD.Library

RequiredforallversionsofActiveDirectory

Microsoft.Windows.Server.AD.ClientMonitoring

Optional;enablesclientmonitoring

64-bitConsiderationsonWindowsServer2003

TherearesomemigrationrestrictionsifyouarerunningMicrosoftOperationsManager2005simultaneouslywithOperationsManager2007ondomaincontrollersrunningthex64-basedversionofWindowsServer2003.

Theserestrictionsexistbecausethe2005agentrunningon64-bitdomaincontrollersisthe32-bitversionoftheagent,butthe2007agentisa64-bitversion.The2005agentcontainsthe32-bitversionoftheActiveDirectoryHelperObject（version1.0.3,alsoreferredtoasOOMADS）andtheOperationsManager200764-bitagentcannotusethe32-bitOOMADS.

Therearethefollowingrestrictions:

∙Youcannotmonitoradomaincontrollerrunningonthex65-bitversionofWindowsServer2003withOperationsManager2007andMicrosoftOperationsManager2005simultaneously.ExcludethedomaincontrollerfromtheMicrosoftOperationsManager2005monitoringandforeach64-bitdomaincontrolleranduseAddorRemoveProgramstoremoveOOMADS1.0.3.The32-bitOOMADSwillberemoved,the64bitOOMADSwillbeautomaticallyinstalledduringthenextscheduleddiscovery,andmonitoringwillbeginforOperationsManager2007.

∙IfanOperationsManager200764-bitagentisinstalledonadomaincontrollerrunningin64-bitmode,theexisting32-bitversionofOOMADSremainsandwillnotbeupgraded.Thismeansthatthe2007ActiveDirectoryManagementPackmonitoringwillnotwork.TheMicrosoftOperationsManager2005monitoringwillcontinuetowork.

HowtoImporttheActiveDirectoryManagementPacks

IntheOperationsConsole,ontheAdministratorpane,right-clicktheManagementPacksnode,clickImportManagementPack（s）,andthenfollowthepromptsinthewizard.FormoreinformationaboutimportingManagementPacks,seethe"HowtoImportManagementPacksinOperationsManager2007"topicintheproducthelp.

OnceyouhaveimportedtheManagementPack,seethefollowingsectionsforyournextsteps:

∙AfterYouImporttheActiveDirectoryServerPack

∙Af