Appendix: Reports

Applies To: Operations Manager 2007, Windows Server 2012

The following table describes the reports that are implemented in this release of the Active Directory Management Pack (ADMP).

Name Report description Required Description/instructions

AD Domain Changes

The purpose of the AD Domain Changes report is to display any events seen on the monitored domain controllers that would indicate a change in the role of that domain controller. The report displays any events collected on a monitored domain controller with the event ID of 16408, 12297, or 16652. These events are internal to Windows Server and indicate specific changes in the domain controllers operation on the domain.

Start Data, End Data, and Time Zone

Object Type

Start Data, End Data, and Time Zone: Date information regarding when the data used in the report should be collected.

Object Type: The specific domain controllers to list in the report. If individual domain controllers are chosen, the Active Directory Domain Controller Computer Role objects must be chosen. To run a report containing all domain controllers, a user can add the AD Domain Controllers Group for each version of Windows Server supported (currently 2000, 2003, and 2008).

AD Domain Controllers

The AD Domain Controllers report displays a list of domain controllers monitored by the ADMP. For each domain controller, the IP Addresses, Active Directory Site, Windows Version, and Fully Qualified Domain Name are displayed.

Start Data, End Data, and Time Zone

Object Type

Start Data, End Data, and Time Zone: Date information regarding when the data used in the report should be collected.

Object Type: The specific domain controllers to list in the report. If individual domain controllers are chosen, the Active Directory Domain Controller Computer Role objects must be chosen. To run a report containing all domain controllers, a user can add the AD Domain Controllers Group for each version of Windows Server that is supported (currently Windows 2000 Server, Windows Server 2003, and Windows Server 2008).

AD Machine Account Authentication Failures

The AD Machine Account Authentication Failures Report contains events logged on the domain controllers that indicate a failure of a machine account to authenticate.

Start Data, End Data, and Time Zone

Object Type

Start Data, End Data, and Time Zone: Date information regarding when the data used in the report should be collected.

Object Type: The specific domain controllers to list in the report. If individual domain controllers are chosen, the Active Directory Domain Controller Computer Role objects must be chosen. To run a report containing all domain controllers, a user can add the AD Domain Controllers Group for each version of Windows Server supported (currently Windows 2000 Server, Windows Server 2003, and Windows Server2008).

AD Replication Site Links

The AD Replication Site Links report contains a list of site links in the environment and the type of transport, cost, and replication interval for each of these links.

Start Data, End Data, and Time Zone

Object Type

Start Data, End Data, and Time Zone: Date information regarding when the data used in the report should be collected.

Object Type: The Active Directory Site Link objects from the environment. For the purpose of reporting, the user may want to create a dynamic group that contains all of the site links and use that group for the report so that they do not have to manually add each link every time that they want to run the report.

AD Role Holders

The AD Role Holders report is probably the report that is most used by customers, because it gives a detailed list of the domains, forests, and domain controllers that make up the environment.

Start Data, End Data, and Time Zone

Object Type

Start Data, End Data, and Time Zone: Date information regarding when the data used in the report should be collected.

Object Type: This report utilizes three different types of objects. To make full use of this report, a user will need to include the relevant Active Directory Domain, Active Directory Forest, and any Active Directory Domain Controller Computer Role objects to be included. To run a report containing all domain controllers, a user can add the AD Domain Controllers Group for each version of Windows Server that is supported (currently Windows 2000 Server, Windows Server 2003, and Windows Server 2008).

AD SAM Account Changes

The AD SAM Account Changes report collects specific SAM events logged on domain controllers.

Start Data, End Data, and Time Zone

Object Type

Start Data, End Data, and Time Zone: Date information regarding when the data used in the report should be collected.

Object Type: The specific domain controllers to list in the report. If individual domain controllers are chosen, the Active Directory Domain Controller Computer Role objects must be chosen. To run a report containing all domain controllers, a user can add the AD Domain Controllers Group for each version of Windows Server that is supported (currently Windows 2000 Server, Windows Server 2003, and Windows Server 2008).

DC Disk Space Charts

The DC Disk Space Chart shows the size of the DIT as it changes over time. By adjusting the start and end dates, the user can customize the view of timeframe for the size of the DIT.

Data Aggregation Type

Start Data, End Data, and Time Zone

Object Type

Data Aggregation Type: How to aggregate the data, either Hourly or Daily

Start Data, End Data, and Time Zone: Date information regarding when the data used in the report should be collected.

Object Type: The specific domain controllers to list in the report. If individual domain controllers are chosen, the Active Directory Domain Controller Computer Role objects must be chosen. To run a report containing all domain controllers, a user can add the AD Domain Controllers Group for each version of Windows Server that is supported (currently Windows 2000 Server, Windows Server 2003, and Windows Server 2008).

DC Replication Bandwidth

The DC Replication Bandwidth Report shows the amount of bandwidth replication is using in the environment for each domain controller.

Data Aggregation Type

Start Data, End Data, and Time Zone

Object Type

Data Aggregation Type: How to aggregate the data, either Hourly or Daily

Start Data, End Data, and Time Zone: Date information regarding when the data used in the report should be collected.

Object Type: The specific domain controllers to list in the report. If individual domain controllers are chosen, the Active Directory Domain Controller Computer Role objects must be chosen. To run a report containing all domain controllers, a user can add the AD Domain Controllers Group for each version of Windows Server that is supported (currently Windows 2000 Server, Windows Server 2003, and Windows Server 2008).