Removing any bottlenecks may lead to higher Active Directory performance. Basic metrics can be compared against the performance baseline for the Domain Controller to detect anomalous performance behavior. These may be in the form of text messages and web hooks.ĭomain Controllers provide lots of metrics. Multiple notification methods is something monitoring solutions should offer today. Email notifications may not be delivered in these situations. However, attackers may delete or modify public DNS records. Notifications through email should be a basic requirement. Having a graph that displays the status of Domain Controllers' core services over time is a pré.
Of course, an alert when this particular service is started would be a great addition, in this case. A good Domain Controller Monitoring solution should be able to detect and properly display this information as part of the Domain Controller baseline. Active Directory admins can choose to stop and disable this service and change its permissions so only members of the Enterprise Admins security group can demote Domain Controllers. The DS Role Service, in this regard, is an interesting service. When one or more of the above services stop, a notification should be sent. Monitoring the Domain Controllers’ core servicesĪny respectable Domain Controller Monitoring solution should monitor the status of the services that any Domain Controller requires to run. These areas of monitoring should be checked against a baseline in the solution: Some organizations accept certain risks when it comes to (some of) their Domain Controllers.Īs a follow-up, I decided to provide a checklist of functionality a great Domain Controller Monitoring solution should provide and why every piece of functionality is essential to make sure that Domain Controllers meet the organization’s confidentiality, integrity and availability (CIA) needs.
Some organizations already have certain functionality as part of another solution. However, organizations may have varying requirements towards potential Domain Controller Monitoring solutions. I wrote that monitoring solutions should not treat Domain Controllers as mere ‘application servers’ or ‘nodes’, as many Active Directory Monitoring solutions, like SolarWinds’ do. Last month, I provided some context for how I feel about Active Directory Monitoring and Domain Controller Monitoring.
0 kommentar(er)
