OperationsManagerActiveDirectoryManagementPackGuide.docx

1、OperationsManagerActiveDirectoryManagementPackGuideActive Directory Management Pack Guide for Operations Manager 2007Microsoft CorporationPublished: March, 2007AuthorJonobie FordFeedbackSend suggestions and comments about this document to momdocs. Please include the Management Pack guide name with y

2、our feedback.Information in this document, including URL and other Internet Web site references, is subject to change without notice. Unless otherwise noted, the companies, organizations, products, domain names, e-mail addresses, logos, people, places, and events depicted in examples herein are fict

3、itious. No association with any real company, organization, product, domain name, e-mail address, logo, person, place, or event is intended or should be inferred. Complying with all applicable copyright laws is the responsibility of the user. Without limiting the rights under copyright, no part of t

4、his document may be reproduced, stored in or introduced into a retrieval system, or transmitted in any form or by any means (electronic, mechanical, photocopying, recording, or otherwise), or for any purpose, without the express written permission of Microsoft Corporation. Microsoft may have patents

5、, patent applications, trademarks, copyrights, or other intellectual property rights covering subject matter in this document. Except as expressly provided in any written license agreement from Microsoft, the furnishing of this document does not give you any license to these patents, trademarks, cop

6、yrights, or other intellectual property. 2007 Microsoft Corporation. All rights reserved.Microsoft, MS-DOS, Windows, Windows Server, Windows Vista, and Active Directory are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries.All other trade

7、marks are property of their respective owners.ContentsActive Directory Management Pack Guide 5Getting the latest Management Pack and Management Pack Documentation 5Whats New 5Getting Started with the Active Directory Management Pack 6Before You Import the Management Pack 6Files to Download 664-bit C

8、onsiderations on Windows Server 2003 7How to Import the Active Directory Management Packs 8After You Import the Active Directory Server Pack 8Enable the Agency Proxy Setting on All Domain Controllers 8Configure an Account for Replication Monitoring 9After You Import the Active Directory Client Manag

9、ement Pack 10Optional Configuration for the Active Directory Management Pack 11Setting the Intersite Replication Latency Threshold Value 13Disabling Performance Data 14Enable Data Collection for the Replication Latency Report 14Setting Parameters for Tasks 15Security Considerations for the Active Di

10、rectory Management Pack 16Low-Privilege Environments 16Computer Groups 16Understanding Management Pack Operations 16Objects the Active Directory Management Pack Discovers 17How Health Rolls Up 17Key Monitoring Scenarios 18Viewing Information in the Operations Manager Console 23Views 23Client-Side Mo

11、nitoring 23Active Directory Performance Views 24Replication Views 26Topology Views 26Reports 27Configuration Information 27Operations Information 28Miscellaneous Reports 28Management Pack Details 29Troubleshooting the Active Directory Management Pack 29Active Directory Management Pack Guide Microsof

12、t Operations Manager 2007 provides two Management Packs for Active Directory Domain Services (AD DS): one that monitors the domain controllers, and one that monitors Active Directory clients. To monitor the domain controllers, the ActiveDirectory Server Management Pack provides a predefined, ready-t

13、o-run set of processing rules, monitoring scripts, and reports that are designed specifically to monitor the performance and availability of the Active Directory domain controllers. This Management Pack monitors events that are placed in the Application, System, and Directory Service event logs by v

14、arious ActiveDirectory components and subsystems. It also monitors the overall health of ActiveDirectory and alerts you to critical performance issues.Member servers or desktop clients can sometimes experience issues even though the servers are healthy. The Active Directory Client Management Pack he

15、lps to identify these issues. This Management Pack is used with the Active Directory Management Pack and ensures that Active Directory is available for Microsoft Exchange and other directory-enabled applications. It also provides additional information about whether the domain controllers are availa

16、ble by running synthetic transactions against the directory service, such as LDAP binds and LDAP pings. This Management Pack does not address Sysvol replication, even though some aspects of Active Directory, such as Group Policy settings for scripts for startup, shut down, logon, and logoff, rely di

17、rectly on Sysvol replication. If monitoring the File Replication System (FRS) or Distributed File System Replication (DFSR) event log is not sufficient, import the FRS or DFSR Management Packs and, in the case of FRS, deploy the Ultrasound monitoring and troubleshooting tool.Getting the latest Manag

18、ement Pack and Management Pack DocumentationYou can find the latest Active Directory Management Packs at The latest version of this document is available at Whats NewThe following features are new in this release of the Active Directory: Domain discovery that enables Operations Manager 2007 to autom

19、atically discover domains in your Active Directory environment New performance and client monitoring views to provide more ways to view your monitoring data A new child domain topology view, allowing you to see subdomains of other domains New dashboard views that combine multiple views into one view

20、 to allow analysis of trends and similarities between related metricsGetting Started with the Active Directory Management Pack Before You Import the Management PackBefore you import the Active Directory Management Pack and the Active Directory Client Management Pack, note the following limitations o

21、f both Management Packs: Neither of the Management Packs support agentless monitoring. The Active Directory Management Pack does not support monitoring across multiple forests. Before you import the Active Directory Management Pack, take the following actions: Decide whether you want to deploy the A

22、ctive Directory Client Management Pack. This Management Pack integrates with the server-side monitoring capabilities of the Active Directory Management Pack to provide a more robust view of Active Directory health. Verify that each domain controller and client you plan to monitor has an agent instal

23、led. If you plan to use the Active Directory Client Management Pack, deploy it on computers that are running directory-enabled applications, such as Microsoft Exchange2000 Server and Microsoft Exchange Server2003. Files to DownloadDownload the latest Management Pack files from or access the files de

24、scribed in the following table in the ManagementPack directory on the installation media. File NameDescriptionMicrosoft.Windows.Server.AD.2000.DiscoveryRequired for monitoring Active Directory in Windows Server 2000Microsoft.Windows.Server.AD.2000.MonitoringRequired for monitoring Active Directory i

25、n Windows Server 2000Microsoft.Windows.Server.AD.2003.DiscoveryRequired for monitoring Active Directory in Windows Server 2003Microsoft.Windows.Server.AD.2003.MonitoringRequired for monitoring Active Directory in Windows Server 2003Microsoft.Windows.Server.AD.LibraryRequired for all versions of Acti

26、ve DirectoryMicrosoft.Windows.Server.AD.ClientMonitoringOptional; enables client monitoring64-bit Considerations on Windows Server 2003There are some migration restrictions if you are running Microsoft Operations Manager 2005 simultaneously with Operations Manager 2007 on domain controllers running

27、the x64-based version of Windows Server 2003. These restrictions exist because the 2005 agent running on 64-bit domain controllers is the 32-bit version of the agent, but the 2007 agent is a 64-bit version. The 2005 agent contains the 32-bit version of the Active Directory Helper Object (version 1.0

28、.3, also referred to as OOMADS) and the Operations Manager 2007 64-bit agent cannot use the 32-bit OOMADS. There are the following restrictions: You cannot monitor a domain controller running on the x65-bit version of Windows Server 2003 with Operations Manager 2007 and Microsoft Operations Manager

29、2005 simultaneously. Exclude the domain controller from the Microsoft Operations Manager 2005 monitoring and for each 64-bit domain controller and use Add or Remove Programs to remove OOMADS 1.0.3. The 32-bit OOMADS will be removed, the 64 bit OOMADS will be automatically installed during the next s

30、cheduled discovery, and monitoring will begin for Operations Manager 2007. If an Operations Manager 2007 64-bit agent is installed on a domain controller running in 64-bit mode, the existing 32-bit version of OOMADS remains and will not be upgraded. This means that the 2007 Active Directory Manageme

31、nt Pack monitoring will not work. The Microsoft Operations Manager 2005 monitoring will continue to work.How to Import the Active Directory Management PacksIn the Operations Console, on the Administrator pane, right-click the Management Packs node, click Import Management Pack(s), and then follow th

32、e prompts in the wizard. For more information about importing Management Packs, see the How to Import Management Packs in Operations Manager 2007 topic in the product help. Once you have imported the Management Pack, see the following sections for your next steps: After You Import the Active Directory Server Pack Af