Active Directory Monitoring
Domain controllers, functions, services, authentication and LDAP: the essential Active Directory parameters in a single package of checks.
The heart of network resource management
Active Directory is a central component of the Microsoft platform: it provides the means to manage the resources of a network, such as user accounts, computer accounts, shared folders and printers.
Among the protocols it uses is LDAP, which serves as its database: it stores centrally the information of a domain relating to authentication and access to services, and keeps it synchronised across the authentication servers. This is why it is one of the essential metrics to keep under control.
Active Directory networks range from a single installation with a few hundred objects to large installations with millions of objects, and in-depth monitoring can become laborious. The Sentinet³ Active Directory Pattern brings together the checks specific to this environment.
| At a glance | |
|---|---|
| Pattern | Sentinet³ Active Directory Pattern |
| Sources | Domain controllers, Windows services and Active Directory counters |
| Scope | Domain server, DC functions, services, authentication, LDAP |
The Pattern’s checks
Five groups of checks, from the domain server to LDAP metrics.
Domain server
| Check | What it verifies |
|---|---|
| Reachability | The machines respond on the network |
| DS Threads in Use | Number of threads in use |
| DS Directory Writes | Number of writes |
| DS Directory Reads | Number of reads |
| DS Directory Searches | Number of directory queries |
| DS Client Binds | Number of bound clients |
| DS Server Binds | Number of bound servers |
Domain controller functions
| Check | What it verifies |
|---|---|
| kccevent | The function is active on the DC |
| services | The function is active on the DC |
| advertising | The function is active on the DC |
| replications | The function is active on the DC |
| ridmanager | The function is active on the DC |
| fsmocheck | The function is active on the DC |
Services
| Check | What it verifies |
|---|---|
| W32Time | Service activity |
| Dnscache | Service activity |
| IsmServ | Service activity |
| Kdc | Service activity |
| SamSs | Service activity |
| Lanmanserver | Service activity |
| Lanmanworkstation | Service activity |
| RpcSs | Service activity |
| Netlogon | Service activity |
Authentication metrics
| Check | What it verifies |
|---|---|
| Kerberos Authentications | Number of Kerberos authentications |
| NTLM Authentications | Number of NTLM authentications |
LDAP
| Check | What it verifies |
|---|---|
| LDAP Client Sessions | LDAP client sessions |
| LDAP Active Threads | Number of active threads |
| LDAP Writes | Number of LDAP writes |
| LDAP Searches | Number of LDAP calls |
| LDAP Successful Binds | Successful connections |
| LDAP New Connections | New LDAP connections |
| LDAP New SSL Connections | New SSL connections |
| LDAP Closed Connections | Number of closed connections |
| LDAP UDP operations | Number of UDP operations |
Practical help for administrators
- From a few hundred to millions of objects: the Pattern keeps monitoring manageable even in the largest installations.
- LDAP under control: the database of authentication and access, synchronised across the servers, is one of the essential metrics.
Related topics
Want to see Sentinet³ on your infrastructure?
Tell us about your environment: sites, technologies, critical services. We will show you how Core and Infinity can work on your case.