Solved

SCOM Active Directory monitors

Posted on 2016-08-03
1
70 Views
Last Modified: 2016-09-23
I am looking to whittle down the alerts for AD and was wondering if anyone knew of a best practices guide for the most essential monitors. I believe the SCOM admin just fired up the AD Management pack and suggested we narrow it down. We have a large enterprise with about 180 DCs spread over the country and in a few other countries, so I find some of the alerts are transient causes by network issues more than AD. If anyone has a list or guide of essential monitors for AD it would give me a good start I can add to as needed. Thanks.
0
Comment
Question by:Jerry Dunning
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 14

Accepted Solution

by:
Schnell Solutions earned 500 total points
ID: 41740671
Hello Jerry,

In a similar way I use SCOM to monitor environments with +200 DCs distributed across regions. You are absolutely right, it is not enough with just firing up the AD Management Pack, what is recommended is to follow the .docx document that comes with the MP and follow step by step their configurations.

From a best practice perspective, the MP includes what Microsoft considers that is the best to monitor. However, each environment is different and it means that SCOM will require special turnings. So, despite of these best practices it is necessary to work with the MP Guide (.docx file) and configure, enable or disabled each monitor, alert, performance counter or component as it suits our environment. These configurations will include a initial configuration that includes create service accounts for SCOM, configure special permissions, configure dedicate watcher agents, configure special components if you want to monitor the health of special services, such as the SYSVOL folders replication, etc.

In summary, the general best practices are natively configured in the MP as it comes, but in particularly, we need to tune it. If not we will have a terrible experience with the product with many alerts that we will not wish to have.
0

Featured Post

Optimize your web performance

What's in the eBook?
- Full list of reasons for poor performance
- Ultimate measures to speed things up
- Primary web monitoring types
- KPIs you should be monitoring in order to increase your ROI

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Active Directory security has been a hot topic of late, and for good reason. With 90% of the world’s organization using this system to manage access to all parts of their IT infrastructure, knowing how to protect against threats and keep vulnerabil…
Let's recap what we learned from yesterday's Skyport Systems webinar.
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…
Monitoring a network: how to monitor network services and why? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the philosophy behind service monitoring and why a handshake validation is critical in network monitoring. Software utilized …

623 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question