Directory Service Availability

  • Article

Applies To: Operations Manager 2007, Windows Server 2012

For Active Directory Management Pack for Operations Manager 2007 customers, the names of the corresponding script in that management pack appear in parentheses. These services include the following:

  • A global catalog can be located in an acceptable amount of time (GC Response)

  • A global catalog can return a search result in an acceptable amount of time (GC Search Time)

  • There are an acceptable number of Lost and Found objects. (Lost & Found Count)

  • Verification of Domain Name System (DNS) records that Active Directory uses (DNS Verification)

  • A serverless bind succeeds within an acceptable amount of time (AD General Response)

Directory service availability reports the health of a number of aspects in the environment. It is covered by five monitors, as described in the following table.

Monitor Description

General Response

Measures the responsiveness of the Active Directory system to a Lightweight Directory Access Protocol (LDAP) request. It periodically binds to the domain controller to measure the response time to a simple LDAP query. If too many LDAP requests fail in a row, the health of the domain controller will be degraded.

Global Catalog Search Response

Measures the time that is required to perform a global catalog search. The query to be run can be passed as a parameter. (See the “Configuration” section later in this document.) The measurement is reported as performance data, and related rules generate alerts for unusually slow conditions.

Global Catalog Search Time

Checks the current global catalog search time against the configured thresholds to verify that searches made against a global catalog are processed in a timely fashion.

DNS Verification

Performs various checks on the Domain Name System (DNS) setup. Individual alerts for a number of issues are reported.

Lost Object Count

Checks that there are not an excessive number of lingering objects in the Lost and Found container.

Configuration

To perform the procedures in this section, you must be a member of the Operations Manager Administrators group in the Operations console. For more information, see Account Information for Operations Manager 2007 (https://go.microsoft.com/fwlink/?LinkId=165736)

To change the maximum number of failed LDAP requests

  1. In the Operations console, click Authoring.

  2. Expand Management Pack Objects, and then click Monitors.

  3. On the Monitors pane, expand Active Directory Domain Controller Server 2000 Computer Role.

  4. Expand Entity Health, and then expand Availability.

  5. Right-click AD General Response Monitor, click Overrides, click Override the Monitor, and then click For all objects of class: Active Directory Domain Controller Server 2000 Computer.

    Note

    If you do not see the rule, check that the scope is set to include the Active Directory Client Perspective by clicking Scope in the Operations Manager toolbar.

  6. Select the Override box that corresponds to the Enabled entry in the Parameter Name column.

  7. Ensure that Override Value is set to True.

  8. Select the Override box that corresponds to Failure Threshold in the Parameter Name column, and then enter the value that you want to set in the Override Value column.

  9. In Select destination management pack, select the management pack that you created for ADMP Customizations, as described in Create a New Management Pack for Customizations. If you have not yet created a management pack for your overrides, you can click New to create one now. Click OK.

  10. Repeat steps 3 through 9 for the following monitors:

    • Active Directory Domain Controller Server 2003 Computer Role

    • Active Directory Domain Controller Server 2008 Computer Role

To change the maximum number of failed global catalog search requests

  1. In the Operations console, click Authoring.

  2. Expand Management Pack Objects, and then click Monitors.

  3. In the Monitors pane, expand Active Directory Domain Controller Server 2000 Computer Role.

  4. Expand Entity Health, and then expand the Availability.

  5. Right-click AD Global Catalog Search Response Monitor, click Overrides, click Override the Monitor, select For all objects of class: Active Directory Domain Controller Server 2000 Computer, and then click OK.

    Note

    If you do not see the rule, check that the scope is set to include the Active Directory Client Perspective by clicking Scope in the Operations Console toolbar.

  6. Select the Override box that corresponds to the Enabled entry in the Parameter Name column.

  7. Ensure that Override Value is set to True.

  8. Select the Override box that corresponds to Failure Threshold in the Parameter Name column, and then enter the value that you want to set in the Override Value column.

  9. In Select destination management pack, select the management pack that you created for ADMP Customizations, as described in Create a New Management Pack for Customizations. If you have not yet created a management pack for your overrides, you can click New to create one now. Click OK.

  10. Repeat steps 3 through 9 for the following monitors:

    • Active Directory Domain Controller Server 2003 Computer Role

    • Active Directory Domain Controller Server 2008 Computer Role

To change the threshold for global catalog search time

  1. In the Operations console, click Authoring.

  2. Expand Management Pack Objects, and then click Monitors.

  3. In the Target pane, expand Active Directory Domain Controller Server 2000 Computer Role.

  4. Expand Entity Health, and then expand the Performance.

  5. Right-click AD DC Global Catalog Search Time Monitor, click Overrides, click Override the Monitor, select For all objects of class: Active Directory Domain Controller Server 2000 Computer, and then click OK.

    Note

    If you do not see the rule, check that the scope is set to include the Active Directory Client Perspective by clicking Scope in the Operations Console tool bar.

  6. Select the Override box that corresponds to the Enabled entry in the Parameter Name column.

  7. Ensure that Override Value is set to True.

  8. Select the override box that corresponds to Threshold Error (sec) in the Parameter Name column, and then enter the value that you want to configure for the threshold in the Override Value column.

  9. Select the override box that corresponds to Threshold Warning (sec) in the Parameter Name column, and then enter the value that you want to use as the threshold in the Override Value column. Click OK.

  10. Select the Override box that corresponds to Failure Threshold in the Parameter Name column, and then enter the value that you want to set in the Override Value column.

  11. In Select destination management pack, select the management pack that you created for ADMP Customizations, as described in Create a New Management Pack for Customizations. If you have not yet created a management pack for your overrides, you can click New to create one now. Click OK.

  12. Repeat steps 3 through 11 for the following monitors:

    • Active Directory Domain Controller Server 2003 Computer Role

    • Active Directory Domain Controller Server 2008 Computer Role