Microsoft Active Directory Monitoring with PRTG Plugins

 

Adds support for monitoring systems running Windows Active Directory on Server 2003, 2008 and 2008R2 Platforms.

Key Features

  • Monitoring all key aspects of Active Directory Performance
  • Monitoring the content and changes related to Active Directory Security in general
  • Monitoring Security related Activity in each DC in your Domain

 

 

 

 

 Supported Versions: Windows Server 2003, 2003 R2, 2008, 2008 R2, 2012, 2012 R2

Monitoring the key performance related to Active Directory Health

  • LDAP Bind Time:
    Shows the time, in milliseconds, taken for the last successful LDAP bind.
  • LDAP Client Sessions:
    Shows the number of currently connected LDAP client sessions.
  • DS Directory Searches/sec:
    Shows the number of directory searches per second.
  • DRA Inbound Object Updates Remaining in Packet:
    Shows the number of object updates received in the current directory replication update packet that have not yet been applied to the local server.
  • DRA Inbound Bytes Total/sec:
    Shows the total number of bytes replicated in. This counter is the sum of the number of uncompressed bytes (never compressed) and the number of compressed bytes (after compression).
  • DRA Outbound Bytes Total/sec:
    Shows the total number of bytes replicated out. This counter is the sum of the number of uncompressed bytes (never compressed) and the number of compressed bytes (after compression).
  • DRA Pending Replication Synchronizations:
    Shows the number of directory synchronizations that are queued for this server but not yet processed.
  • DS Threads in Use:
    Shows the current number of threads in use by the directory service (which is different from the number of threads in the directory service process). This is the number of threads currently servicing client API calls; it can be used to indicate whether additional processors should be used.
  • AB Client Sessions:
    Shows the number of connected Address Book client sessions.

 

Monitoring the contents of Active Directory

  • Number of User Accounts

  • Number of Disabled User Accounts

  • Number of Accounts where password expiration has been disabled

 

 

Monitoring the Security Related Activities of Active Directory

  • Monitor Number of User accounts Created, Changed, Deleted, Enabled and Disabled
  • Monitor Change of Passwords and Account lockout's

Security aspects related to Active Directory relay almost entirely on each DC’s log files and monitoring activity cannot be done on manual basis regularly. Based on the graphical data produced by the plugin it is very easy to monitor what is happening in Active Directory where and when. Monitoring this on regular basis may save you from a major catastrophe.

Monitoring Group Contents and Changes in Active Directory

Monitor any AD Group for content and changes. Get warnings of what was changed in the group.

 

Adding Members:

Removing Members:

AD Groups mon01

AD Groups mon02

AD Groups mon03