Link to home
Start Free TrialLog in
Avatar of Pau Lo
Pau Lo

asked on

server health check scope

From a virtual server perspective (running a version of Windows Server likely >=2016 onwards), as an administrator if you were performing a quick across the estate health check of your server population (for arguments sake 50 servers), what is the critical information you would expect the health check to focus on. I don’t work in a support/admin role, but I was thinking the ‘big five’ should probably be things like:

  1. Is the server and data included in backup selections?  
  2. Is the OS and all major applications supported by the vendor in terms of security updates? 
  3. Have all the relevant latest security patches applied to the OS and all local applications.
  4. Are monitoring & alerting agents/applications installed where expected and actively reporting back on key health metrics (e.g. available disc space, memory, processing, critical error messages etc).
  5. Are all security applications and safeguards enabled and operating as expected (e.g. firewall, local anti-virus) etc. 

Is there anything else that is not on my list that would be higher up your priority checks as an admin, and any other things that you would add to the checklist that aren't covered with my priority 5.  I appreciate servers running specific roles may warrant additional/other checks, but I was thinking on the bare bones essentials that should be considered for every server. 

N/B a 'health check' is what I have seen others refer to such a procedure with, but I'd also be interested to learn if you use any other terminology for such a check, as it may help me find other information and recommended checks online.

ASKER CERTIFIED SOLUTION
Avatar of Albert Widjaja
Albert Widjaja
Flag of Australia image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Pau Lo
Pau Lo

ASKER

Appreciate the pointers, local admins is a good one, as it *should* be fairly standard set of support groups for the majority of systems, and just a few custom groups for certain server roles, e.g. DBA support role group just added to the database servers. But nothing is guaranteed and things can slip and permission levels can creep, of course. I will also check out the nagios plugins to see if there are any other priorities to consider there, as well as the software itself.

Changing passwords on a regular basis reduces the danger of live passwords falling into the hands of a hacker. Checking MFA for privileged accounts will be one of the item.


Remote console, remote reboot, and rescue mode are called the 3 essential tools for remote server management. You need to make sure that these will work in case you need them. And yes access with MFA too.


here is useful list 

https://phoenixnap.com/blog/server-maintenance-checklist