Essential Services

Applies To: Operations Manager 2007, Windows Server 2012

The Active Directory system comprises a number of services, some that provide services directly and some that support the Active Directory system itself. For this reason, the management pack continually checks to ensure that these essential services are working correctly. Note that some services might or might not be monitored, depending on the version of Windows Server being used and the particular configuration of your environment. The services that this management pack monitors include the following:

  • NT File Replication Service (NTFRS)

  • Distributed File System Replication (DFSR)

  • Windows Time Service (W32time)

  • Intersite Messaging (ISM)

  • Key Distribution Center (KDC)

  • NT Directory Services (NTDS)

  • Net Logon (NetLogon)

  • Active Directory Web Service (ADWS)

The NTFRS and DFSR services both provide a file replication service. Depending on your environment, you might have one or both of these services running at one time. The management pack examines your environment to determine which service or services it should checked for, and it reports an error if the required service or services are not running.

The Windows Time Service (W32time) is responsible for keeping the various domain controllers on your network in time synchronization with each other. This management pack verifies that W32time is running on all domain controllers that are monitored.

Intersite Messaging is required on Windows 2000 Server domain controllers and Windows Server 2003 domain controllers that are not operating at the Windows Server 2003 forest functional level. Intersite Messaging will be monitored where applicable.

The KDC is a key service for facilitating Kerberos in Active Directory deployments. The management pack will verify that the KDC service is running on all domain controllers being monitored.

On a Windows Server 2008 domain controller, Active Directory Domain Services (AD DS) hosts the Active Directory processes. This service must be running for the Active Directory system to function.

The Net Logon (NetLogon) service is responsible for handling a number of fundamental Active Directory authentication and location services. The ADMP verifies that the NetLogon service is running on all domain controllers being monitored.

The Active Directory Web Service (ADWS) provides services that are required by the Active Directory Administrative Center and the Active Directory module for Windows PowerShell.

SYSVOL Availability

On every domain controller, the SYSVOL share must be accessible. The management pack tests the availability of the domain controller by attempting to map a network drive using the path \127.0.0.1\SYSVOL, which represents the SYSVOL directory on the domain controller. If the script that is associated with SYSVOL availability is not able to map a network drive, it generates an event indicating the error that is returned from the attempt. If the script is able to map a network drive to the domain controller, it will not generate an event, and it will subsequently remove the mapped drive.

Configuration

There are no recommended configuration settings for this scenario.