OperationsManagerActiveDirectoryManagementPackGuide.docx
《OperationsManagerActiveDirectoryManagementPackGuide.docx》由会员分享,可在线阅读,更多相关《OperationsManagerActiveDirectoryManagementPackGuide.docx(24页珍藏版)》请在冰豆网上搜索。
![OperationsManagerActiveDirectoryManagementPackGuide.docx](https://file1.bdocx.com/fileroot1/2023-1/25/a9a22e59-440c-4999-a0e7-c35bc2ac5e1c/a9a22e59-440c-4999-a0e7-c35bc2ac5e1c1.gif)
OperationsManagerActiveDirectoryManagementPackGuide
ActiveDirectoryManagementPackGuideforOperationsManager2007
MicrosoftCorporation
Published:
March,2007
Author
JonobieFord
Feedback
Sendsuggestionsandcommentsaboutthisdocumenttomomdocs@.PleaseincludetheManagementPackguidenamewithyourfeedback.
Informationinthisdocument,includingURLandotherInternetWebsitereferences,issubjecttochangewithoutnotice.Unlessotherwisenoted,thecompanies,organizations,products,domainnames,e-mailaddresses,logos,people,places,andeventsdepictedinexampleshereinarefictitious.Noassociationwithanyrealcompany,organization,product,domainname,e-mailaddress,logo,person,place,oreventisintendedorshouldbeinferred.Complyingwithallapplicablecopyrightlawsistheresponsibilityoftheuser.Withoutlimitingtherightsundercopyright,nopartofthisdocumentmaybereproduced,storedinorintroducedintoaretrievalsystem,ortransmittedinanyformorbyanymeans(electronic,mechanical,photocopying,recording,orotherwise),orforanypurpose,withouttheexpresswrittenpermissionofMicrosoftCorporation.
Microsoftmayhavepatents,patentapplications,trademarks,copyrights,orotherintellectualpropertyrightscoveringsubjectmatterinthisdocument.ExceptasexpresslyprovidedinanywrittenlicenseagreementfromMicrosoft,thefurnishingofthisdocumentdoesnotgiveyouanylicensetothesepatents,trademarks,copyrights,orotherintellectualproperty.
©2007MicrosoftCorporation.Allrightsreserved.
Microsoft,MS-DOS,Windows,WindowsServer,WindowsVista,andActiveDirectoryareeitherregisteredtrademarksortrademarksofMicrosoftCorporationintheUnitedStatesand/orothercountries.
Allothertrademarksarepropertyoftheirrespectiveowners.
Contents
ActiveDirectoryManagementPackGuide5
GettingthelatestManagementPackandManagementPackDocumentation5
What'sNew5
GettingStartedwiththeActiveDirectoryManagementPack6
BeforeYouImporttheManagementPack6
FilestoDownload6
64-bitConsiderationsonWindowsServer20037
HowtoImporttheActiveDirectoryManagementPacks8
AfterYouImporttheActiveDirectoryServerPack8
EnabletheAgencyProxySettingonAllDomainControllers8
ConfigureanAccountforReplicationMonitoring9
AfterYouImporttheActiveDirectoryClientManagementPack10
OptionalConfigurationfortheActiveDirectoryManagementPack11
SettingtheIntersiteReplicationLatencyThresholdValue13
DisablingPerformanceData14
EnableDataCollectionfortheReplicationLatencyReport14
SettingParametersforTasks15
SecurityConsiderationsfortheActiveDirectoryManagementPack16
Low-PrivilegeEnvironments16
ComputerGroups16
UnderstandingManagementPackOperations16
ObjectstheActiveDirectoryManagementPackDiscovers17
HowHealthRollsUp17
KeyMonitoringScenarios18
ViewingInformationintheOperationsManagerConsole23
Views23
Client-SideMonitoring23
ActiveDirectoryPerformanceViews24
ReplicationViews26
TopologyViews26
Reports27
ConfigurationInformation27
OperationsInformation28
MiscellaneousReports28
ManagementPackDetails29
TroubleshootingtheActiveDirectoryManagementPack29
ActiveDirectoryManagementPackGuide
MicrosoftOperationsManager2007providestwoManagementPacksforActiveDirectoryDomainServices(ADDS):
onethatmonitorsthedomaincontrollers,andonethatmonitorsActiveDirectoryclients.Tomonitorthedomaincontrollers,theActive DirectoryServerManagementPackprovidesapredefined,ready-to-runsetofprocessingrules,monitoringscripts,andreportsthataredesignedspecificallytomonitortheperformanceandavailabilityoftheActiveDirectorydomaincontrollers.ThisManagementPackmonitorseventsthatareplacedintheApplication,System,andDirectoryServiceeventlogsbyvariousActive Directorycomponentsandsubsystems.ItalsomonitorstheoverallhealthofActive Directoryandalertsyoutocriticalperformanceissues.
Memberserversordesktopclientscansometimesexperienceissueseventhoughtheserversarehealthy.TheActiveDirectoryClientManagementPackhelpstoidentifytheseissues.ThisManagementPackisusedwiththeActiveDirectoryManagementPackandensuresthatActiveDirectoryisavailableforMicrosoftExchangeandotherdirectory-enabledapplications.Italsoprovidesadditionalinformationaboutwhetherthedomaincontrollersareavailablebyrunningsynthetictransactionsagainstthedirectoryservice,suchasLDAPbindsandLDAPpings.
ThisManagementPackdoesnotaddressSysvolreplication,eventhoughsomeaspectsofActiveDirectory,suchasGroupPolicysettingsforscriptsforstartup,shutdown,logon,andlogoff,relydirectlyonSysvolreplication.IfmonitoringtheFileReplicationSystem(FRS)orDistributedFileSystemReplication(DFSR)eventlogisnotsufficient,importtheFRSorDFSRManagementPacksand,inthecaseofFRS,deploytheUltrasoundmonitoringandtroubleshootingtool.
GettingthelatestManagementPackandManagementPackDocumentation
YoucanfindthelatestActiveDirectoryManagementPacksatThelatestversionofthisdocumentisavailableat
What'sNew
ThefollowingfeaturesarenewinthisreleaseoftheActiveDirectory:
∙DomaindiscoverythatenablesOperationsManager2007toautomaticallydiscoverdomainsinyourActiveDirectoryenvironment
∙Newperformanceandclientmonitoringviewstoprovidemorewaystoviewyourmonitoringdata
∙Anewchilddomaintopologyview,allowingyoutoseesubdomainsofotherdomains
∙Newdashboardviewsthatcombinemultipleviewsintooneviewtoallowanalysisoftrendsandsimilaritiesbetweenrelatedmetrics
GettingStartedwiththeActiveDirectoryManagementPack
BeforeYouImporttheManagementPack
BeforeyouimporttheActiveDirectoryManagementPackandtheActiveDirectoryClientManagementPack,notethefollowinglimitationsofbothManagementPacks:
∙NeitheroftheManagementPackssupportagentlessmonitoring.
∙TheActiveDirectoryManagementPackdoesnotsupportmonitoringacrossmultipleforests.
BeforeyouimporttheActiveDirectoryManagementPack,takethefollowingactions:
∙DecidewhetheryouwanttodeploytheActiveDirectoryClientManagementPack.ThisManagementPackintegrateswiththeserver-sidemonitoringcapabilitiesoftheActiveDirectoryManagementPacktoprovideamorerobustviewofActiveDirectoryhealth.
∙Verifythateachdomaincontrollerandclientyouplantomonitorhasanagentinstalled.
∙IfyouplantousetheActiveDirectoryClientManagementPack,deployitoncomputersthatarerunningdirectory-enabledapplications,suchasMicrosoftExchange 2000ServerandMicrosoftExchangeServer 2003.
FilestoDownload
DownloadthelatestManagementPackfilesfromoraccessthefilesdescribedinthefollowingtableintheManagementPackdirectoryontheinstallationmedia.
FileName
Description
Microsoft.Windows.Server.AD.2000.Discovery
RequiredformonitoringActiveDirectoryinWindowsServer2000
Microsoft.Windows.Server.AD.2000.Monitoring
RequiredformonitoringActiveDirectoryinWindowsServer2000
Microsoft.Windows.Server.AD.2003.Discovery
RequiredformonitoringActiveDirectoryinWindowsServer2003
Microsoft.Windows.Server.AD.2003.Monitoring
RequiredformonitoringActiveDirectoryinWindowsServer2003
Microsoft.Windows.Server.AD.Library
RequiredforallversionsofActiveDirectory
Microsoft.Windows.Server.AD.ClientMonitoring
Optional;enablesclientmonitoring
64-bitConsiderationsonWindowsServer2003
TherearesomemigrationrestrictionsifyouarerunningMicrosoftOperationsManager2005simultaneouslywithOperationsManager2007ondomaincontrollersrunningthex64-basedversionofWindowsServer2003.
Theserestrictionsexistbecausethe2005agentrunningon64-bitdomaincontrollersisthe32-bitversionoftheagent,butthe2007agentisa64-bitversion.The2005agentcontainsthe32-bitversionoftheActiveDirectoryHelperObject(version1.0.3,alsoreferredtoasOOMADS)andtheOperationsManager200764-bitagentcannotusethe32-bitOOMADS.
Therearethefollowingrestrictions:
∙Youcannotmonitoradomaincontrollerrunningonthex65-bitversionofWindowsServer2003withOperationsManager2007andMicrosoftOperationsManager2005simultaneously.ExcludethedomaincontrollerfromtheMicrosoftOperationsManager2005monitoringandforeach64-bitdomaincontrolleranduseAddorRemoveProgramstoremoveOOMADS1.0.3.The32-bitOOMADSwillberemoved,the64bitOOMADSwillbeautomaticallyinstalledduringthenextscheduleddiscovery,andmonitoringwillbeginforOperationsManager2007.
∙IfanOperationsManager200764-bitagentisinstalledonadomaincontrollerrunningin64-bitmode,theexisting32-bitversionofOOMADSremainsandwillnotbeupgraded.Thismeansthatthe2007ActiveDirectoryManagementPackmonitoringwillnotwork.TheMicrosoftOperationsManager2005monitoringwillcontinuetowork.
HowtoImporttheActiveDirectoryManagementPacks
IntheOperationsConsole,ontheAdministratorpane,right-clicktheManagementPacksnode,clickImportManagementPack(s),andthenfollowthepromptsinthewizard.FormoreinformationaboutimportingManagementPacks,seethe"HowtoImportManagementPacksinOperationsManager2007"topicintheproducthelp.
OnceyouhaveimportedtheManagementPack,seethefollowingsectionsforyournextsteps:
∙AfterYouImporttheActiveDirectoryServerPack
∙Af