Presentation on theme: "Course 2786B Module 8: Implementing an Active Directory® Domain Services Monitoring Plan Presentation: 60 minutes Lab: 60 minutes This module helps students."— Presentation transcript:
1Course 2786BModule 8: Implementing an Active Directory® Domain Services Monitoring PlanPresentation: 60 minutesLab: 60 minutesThis module helps students to implement an Active Directory Domain Services (AD DS) monitoring plan.After completing this module, students will be able to:Monitor Active Directory Domain Services Using Event ViewerMonitor Active Directory Domain Servers Using Reliability and Performance MonitorConfigure Active Directory Domain Services AuditingRequired materialsTo teach this module, you need the Microsoft® Office PowerPoint® file 6425A_08.ppt.Important It is recommended that you use PowerPoint 2002 or a later version to display the slides for this course. If you use PowerPoint Viewer or an earlier version of PowerPoint, all the features of the slides might not be displayed correctly.Preparation tasksTo prepare for this module:Read all of the materials for this module.Complete the practices.This section contains information that will help you to teach this module.For some topics in this module, references to additional information appear in notes at the end of the topics. Read the additional information so that you can prepare to teach the module. During class, ensure that students are aware of the additional information.Module 8: Implementing an Active Directory Domain Services Monitoring Plan
2Course 2786BModule OverviewModule 8: Implementing an Active Directory® Domain Services Monitoring PlanMonitoring Active Directory Domain Services Using Event ViewerMonitoring Active Directory Domain Servers Using Reliability and Performance MonitorConfiguring Active Directory Domain Services Auditing
3Course 2786BLesson 1: Monitoring Active Directory Domain Services Using Event ViewerModule 8: Implementing an Active Directory® Domain Services Monitoring PlanEvent Viewer FeaturesDemonstration: Overview of the Event ViewerActive Directory Domain Services LogsWhat Are Custom Views?What Are Subscriptions?Demonstration: Configuring Custom Views and Subscriptions
4Event Viewer Features Course 2786B Module 8: Implementing an Active Directory® Domain Services Monitoring PlanExplain that Event Viewer has been rewritten from the ground up. It has a new interface and is integrated with a new, centralized event logging system. Event Viewer works with native Windows Server® 2008 and Windows Vista® event log files (.elf). It also provides backward compatibility with Event Viewer files from earlier Windows operating systems. Point out that updated features include summary and custom views, subscriptions, cross-log queries, integration with Task Scheduler, many new log files, and increased multipage support for larger result sets.ReferenceSelected Scenarios for Managing Desktops with Windows Vista technet.microsoft.com/en- us/windowsvista/aa aspxEvent Viewer Overviewaec03dc08cd51033.mspx?mfr=trueHow Longhorn Server’s Server Manager will Change Server ManagementPart2.html#
5Demonstration: Overview of the Event Viewer Course 2786BDemonstration: Overview of the Event ViewerModule 8: Implementing an Active Directory® Domain Services Monitoring PlanIn this demonstration, you will see how to navigate the Event ViewerTo complete this demonstration, you must have the 6425A-NYC-DC1 virtual machine running.Demonstration steps:Open Event Viewer and briefly discuss the new look of the Microsoft Management Console (MMC).Point out the default summary view.Expand custom views and show the default custom views.Expand Windows Logs, and point out the traditional logs and the new logs.Open one of the logs and briefly discuss the options available in the Actions pane.Show how you could attach a task to an event using the Create a Basic Task Wizard.Demonstrate copying en event’s details as text into Notepad.Double-click an event to show the details.Expand the Microsoft Windows folder and show the logs.Show how you would connect to another computer. Mention that the Remote event-log management must be enabled on the remote computer’s firewall.QuestionYou have an issue with Group Policy. What log should you view for detailed Group Policy events?Answer: The Group Policy log is one of the new application and service logs that Event Viewer includes.ReferenceEvent Viewer Overviewaec03dc08cd51033.mspx?mfr=trueNew Tools for Event Management in Windows Vistaag/issues/2006/11/EventManagement
6Active Directory Domain Services Logs Course 2786BActive Directory Domain Services LogsModule 8: Implementing an Active Directory® Domain Services Monitoring PlanThe following logs can provide specific information about Active Directory issues:Application log connectionsSystem LogDFS Replication logDirectory Service LogDNS Server logGroup Policy\OperationalEvent Viewer now provides a wide range of application and service logs. Explain how these logs can provide granular information about Active Directory and other services, like Group Policy, offline files, Windows Update client, and many others. Point out that the system log is often the first stop in troubleshooting. You can use a number of logs to track Active Directory issues. For example, the Distributed File System (DFS) Replication log, Directory Service log, Domain Name Service (DNS) Server log, and Group Policy\Operational log can provide valuable information about a Active Directory related problems. Discuss how the event log online-help feature provides the latest information about known issues.
7What Are Custom Views? Custom views : Course 2786BWhat Are Custom Views?Module 8: Implementing an Active Directory® Domain Services Monitoring PlanCustom views :Allow you to aggregate and filter information from multiple logs into a single viewAre reusableCan be exported to other computersExplain that Custom Views allow you to view event log information based on dynamic queries. Point out how to create a custom view. Custom views allow you to select from which event logs you want to view information and puts it into a single view. This can be useful for monitoring services such as AD DS – you can view all of the AD DS specific logs in one view rather than checking multiple logs.Explain that once you have queried and sorted your way to just the events you wanted to analyze, you can save that work as a named view and it will be available for your future reuse. You even can export the view to use on other computers or share with others.ReferenceEvent Viewer Overviewaec03dc08cd51033.mspx?mfr=trueHow Longhorn Server’s Server Manager will Change Server ManagementPart2.htmlEvent 1.Security logEvent 2.System logEvent ViewerEvent 3: DFS log
8What Are Subscriptions? Course 2786BWhat Are Subscriptions?Module 8: Implementing an Active Directory® Domain Services Monitoring PlanExplain that Event Viewer includes the ability to collect copies of events from multiple remote computers and store them locally. To specify which events to collect, you create an event subscription. Among other details, the subscription specifies exactly which events will be collected and in which log they will be stored locally. Once a subscription is active and events are being collected, you can view and manipulate these forwarded events as you would any other locally stored events.Explain that before you can create a subscription to collect events on a computer, you must configure both the collecting computer (collector) and each computer from which events will be collected (source).QuestionWhere would subscriptions be most useful on in your organization?Answer: Answers will varyReferenceEvent Viewer Overviewaec03dc08cd51033.mspx?mfr=trueSubscriptions collect events from multiple computers and store them locally
9Demonstration: Configuring Custom Views and Subscriptions Course 2786BDemonstration: Configuring Custom Views and SubscriptionsModule 8: Implementing an Active Directory® Domain Services Monitoring PlanIn this demonstration, you will see how to:Create a custom view and add the AD DS specific logs to the view.Create a subscription to collect logs from multiple domain controllersTo complete this demonstration, you must have the 6425A-NYC-DC1 virtual machine running.Demonstration steps:Create a custom viewCreate a new custom view that captures error events from some Active Directory related logsExport the view to an XML fileDelete the original custom view and import the XML fileCreate a SubscriptionLog on to all collector and source computers as administratorOn each source computer, type the following at an elevated command prompt: winrm quickconfigOn the collector computer, type the following at an elevated command prompt: Wecutil qcAdd the computer account of the collector computer to the local Administrators group on each of the source computersCreate the subscriptionFilter events to show only errors from the system logQuestionYou want to monitor a particular group of events across multiple Web servers. What is the best way to accomplish this?Answer: Use subscriptions to gather the particular events and filter them to a central workstation.ReferenceCreate a Custom Viewaec03dc08cd51033.mspx?mfr=trueCreate a New SubscriptionConfigure Computers to Forward and Collect Events
10Course 2786BLesson 2: Monitoring Active Directory Domain Servers Using Reliability and Performance MonitorModule 8: Implementing an Active Directory® Domain Services Monitoring PlanReliability and Performance Monitor FeaturesDemonstration: Overview of the Reliability and Performance MonitorMonitoring AD DS Using Performance MonitorWhat Is an Active Directory Baseline?Monitoring Service Availability with Reliability MonitorMonitoring Active Directory Domain Services Using Data Collector SetsDemonstration: Monitoring AD DS
11Reliability and Performance Monitor Features Course 2786BReliability and Performance Monitor FeaturesModule 8: Implementing an Active Directory® Domain Services Monitoring PlanReliability and Performance Monitor allows you to:Perform real-time monitoringüCollect dataExplain that Windows Reliability and Performance Monitor enables you to track the performance impact of applications and services, and to generate alerts or take action when user-defined thresholds for optimum performance are exceeded.Describe the new Microsoft Management Console (MMC). Explain that resource overview gives you real- time graphic monitoring with expandable sections to see activity details.Explain that Performance Monitor allows you to add counters for real-time viewing or display logging results.Describe Reliability Monitor. Discuss the System Stability Chart and Report. Discuss the Index value and its meaning. Reliability Monitor provides a system-stability overview and trend analysis with detailed information about individual events that may affect the system’s overall stability, such as software installations, operating- system updates, and hardware failures. It begins collecting data when the system is installed.Describe data collector sets -- how and when you would use them. Explain that a Data Collector Set is the building block of performance monitoring and reporting. It organizes multiple data collection points into a single component that you can use to to review or log performance. A Data Collector Set can be created and then recorded individually, grouped with other Data Collector Sets and incorporated into logs, viewed in Performance Monitor, configured to generate alerts when thresholds are reached, or used by other non- Microsoft applications. It can be associated with scheduling rules for data collection at specific times.Discuss the built-in reporting features.ReferenceWindows Server “Longhorn” Performance and Reliability Monitoring Step-by-Step Guide a88e2c8fb4d81033.mspx?mfr=trueWindows Reliability and Performance Monitor55d9a mspx?mfr=trueUse Reliability Monitoredb21ee70f0e1033.mspx?mfr=trueCreate Data Collector SetsüTrack performance of applications and servicesüGenerate alertsüTake action when thresholds are reachedüGenerate reportsü
12Demonstration: Overview of the Reliability and Performance Monitor Course 2786BDemonstration: Overview of the Reliability and Performance MonitorModule 8: Implementing an Active Directory® Domain Services Monitoring PlanIn this demonstration, you will see an overview of the Reliability and Performance monitorTo complete this demonstration, you must have the 6425A-NYC-DC1 virtual machine running.Demonstration steps:Open Reliability and Performance MonitorBriefly show the resource overview screen. Expand some sections to show details.Open Performance Monitor – mention that this has not changed significantly from Server 2003.Open Reliability Monitor – expand some details.Open Reports and show the system reports that are available.QuestionWhere can you find real-time information about network activity?Answer: The Resource Overview page has a Network section that supplies real-time data on network activity.ReferenceWindows Vista Performance and Reliability Monitoring Step-by-Step Guideedb21ee70f0e1033.mspx?mfr=true
13Monitoring AD DS Using Performance Monitor Course 2786BMonitoring AD DS Using Performance MonitorModule 8: Implementing an Active Directory® Domain Services Monitoring PlanUseful NTDS Counters for Monitoring Active Directory:NTDS\ DRA Inbound Bytes Total/secüExplain that in addition to the normal baseline counters that you monitor for all servers, there are objects and counters that are specific to active directory. The Directory Services object provides access to the NT Directory Service (NTDS) counters. Briefly describe the most important counters.Mention that there are also a number of database counters that allow you to monitor the Active Directory database at an advanced level. These counters provide information regarding the performance of the database cache, database files, and database tables. You can use some of these counters to determine whether you need more hard disks to store additional Active Directory data.Also mention that there is a predefined data collector set for Active Directory Diagnostics that collects data from many different objects.ReferenceActive Directory Operations Guide ide/part1/adogd02.mspxNTDS\ DRA Inbound ObjectüNTDS\ DRA Outbound Bytes Total/secüNTDS\ DRA Pending Replication SynchronizationsüNTDS\ Kerberos Authentications/secüNTDS\ NTLM Authenticationsü
14What Is an Active Directory Baseline? Course 2786BWhat Is an Active Directory Baseline?Module 8: Implementing an Active Directory® Domain Services Monitoring PlanA baseline defines what a server looks like under normal workload conditionsüDescribe the basic counter set that should be included in any server baseline: Pages/sec, Avg. Disk Queue Length, %Processor Time.Refer to the previous topic for the Active Directory. Active Directory counters that you should include in the Active Directory baseline.Explain that a baseline needs to be established prior to troubleshooting. You need to know what the counters look like under normal conditions before you can understand a problem’s source. Data needs to be collected for a period of time, over weeks or months, to establish a baseline. During that period, collect data at different times of the day. For example, collect it during the morning when users are authenticating, or during idle times and periods of replication.When Active Directory problems arise, compare the baseline findings to the current statistics to help identify the problem’s source.ReferenceDeploying Active Directory for Branch Office EnvironmentsChapter 9 - Post Deployment Monitoring of Domain Controllerseploy/addch09.mspx?mfr=trueServers performing different functions will have different baselines measurementsüBaseline measurements should include basic server counters and function specific countersüProblems areas can be identified by comparing baseline measurements to current statisticsü
15Monitoring Service Availability with Reliability Monitor Course 2786BMonitoring Service Availability with Reliability MonitorModule 8: Implementing an Active Directory® Domain Services Monitoring PlanExplain that Reliability Monitor calculates a System Stability Index that reflects whether unexpected problems reduced the system’s reliability. A graph of the Stability Index over time quickly identifies dates when problems began to occur. The accompanying System Stability Report provides details to help troubleshoot the root cause of reduced reliability. By viewing system changes (installation or removal of applications and updates to the operating system) and failures (application, operating system, or hardware failures), you can develop a strategy for addressing issues quickly.ReferenceWindows Vista Performance and Reliability Monitoring Step-by-Step Guideedb21ee70f0e1033.mspx?mfr=true
16Monitoring Active Directory Domain Services Using Data Collector Sets Course 2786BMonitoring Active Directory Domain Services Using Data Collector SetsModule 8: Implementing an Active Directory® Domain Services Monitoring PlanOrganizes multiple data collection points into a single componentCan be grouped with other data collection setsExplain that a Data Collector Set is the building block of performance monitoring and reporting in Windows Reliability and Performance Monitor. It organizes multiple data collection points into a single component that you can use to review or log performance. You can create a Data Collector Set and then record it individually, group it with other Data Collector Sets and incorporate it into logs, view it in Performance Monitor, configure it to generate alerts when thresholds are reached, or for use by other non-Microsoft applications. You also can associate it with scheduling rules for data collection at specific times.Explain that you can create a Data Collector Set from a template, from an existing set of Data Collectors in a Performance Monitor view, or by selecting individual Data Collectors and setting each individual option in the Data Collector Set properties.QuestionYou want to create an alert to notify you when free disk space is low. How would you create one?Answer: Create a new data collector set manually and then check the Performance Counter Alert. Add the %Free Space counter in the Logical Disk object and set the threshold as required.ReferenceCreate Data Collector Setsedb21ee70f0e1033.mspx?mfr=trueCan be incorporated into logsCan be created individually or from templatesData Collector Sets can contain the following types of data collectors:Performance countersEvent trace dataSystem configuration information (registry key values)
17Demonstration: Monitoring AD DS Course 2786BDemonstration: Monitoring AD DSModule 8: Implementing an Active Directory® Domain Services Monitoring PlanIn this demonstration, you will see how to set up monitoring of Active DirectoryTo complete this demonstration, you must have the 6425A-NYC-DC1 virtual machine running.Demonstration steps:Create a new data collector set named Active DirectoryAdd the server baseline countersAdd some of the Active Directory counters and start the data collector setPerform some activity to generate statisticsStop the data collector set and look at the user-defined reportIn the system container, start the Active Directory Diagnostics data collection setStop the data collector set and look at the system-defined reportQuestionWhat is the easiest way to log the same set of data across multiple computers?Answer: Create a data collector set that captures the information you want and save it as an XML template.ReferenceUsing Performance Logs and Alerts
18Lesson 3: Configuring Active Directory Domain Services Auditing Course 2786BLesson 3: Configuring Active Directory Domain Services AuditingModule 8: Implementing an Active Directory® Domain Services Monitoring PlanWhat Is Active Directory Domain Services Auditing?Demonstration: Configuring an Audit PolicyTypes of Events to AuditDemonstration: Configuring AD DS Auditing
19What Is Active Directory Domain Services Auditing? Course 2786BWhat Is Active Directory Domain Services Auditing?Module 8: Implementing an Active Directory® Domain Services Monitoring PlanActive Directory auditing can show old values and new values of changed attributes in audit entriesActive Directory audit policy is divided into four subcategoriesDirectory service accessDirectory service changesDirectory service replicationDetailed Directory service replicationOnly directory service access is enabled for success by defaultUse the Auditpol.exe command-line tool to view or set audit policy subcategoriesExplain that Active Directory auditing is a critical part of Active Directory administration and security. It is often a legal requirement to maintain a certain audit policy.Explain how in Windows® 2000 and Windows Server® 2003, there was one audit policy, Audit directory service access. That policy controlled whether auditing for directory service events was enabled. In Windows Server® 2008, this policy is divided into four subcategories:-Directory service access (enabled by default)-Directory service changes-Directory service replication-Detailed Directory service replicationDescribe how to enable the global audit policy. Explain that using the Group Policy Management Console (GPMC) to enable Directory service auditing will enable all the subcategories.Explain that you must use Auditpol.exe to view or set audit policy subcategories. There is no Windows interface tool available in Windows Server 2008 to view or set audit policy subcategories. Explain that the system access control list (SACL) on the object is still the ultimate authority in determining whether an access check must be audited. If there is no access control entry (ACE) in the SACL that requires that attribute modifications be logged, then no change-auditing events are logged, even if the Directory Service Changes subcategory is enabled.ReferenceWindows Server “Longhorn” Beta 3 Auditing AD DS Changes Step-by-Step Guideea8e02b4b2a51033.mspx?mfr=trueHow to use Group Policy to configure detailed security auditing settings for Windows Vista client computers in a Windows Server 2003 domain or in a Windows 2000 domainAuditpol7230c8e mspx?mfr=true
20Demonstration: Configuring an Audit Policy Course 2786BDemonstration: Configuring an Audit PolicyModule 8: Implementing an Active Directory® Domain Services Monitoring PlanIn this demonstration, you will see how to configure a global audit policy with the GPMC and adjust it with Auditpol.exeDemonstration steps:Open a command prompt as AdministratorUse the Auditpol.exe to see the current audit policy – the only subcategory that is enabled is Directory Service Access - Success Auditpol /get /category:”DS Access” Note: Auditpol /get /category:* will display the entire audit policyUse the GPMC to enable Directory Service Access auditing for successes and failures in the Default Domain Controllers PolicyUse gpupdate to refresh the policyRun the Auditpol utility again to see that the status has changed because you have enabled a global audit policy for all the subcategories of the DS Access service are set to success and failureUse Auditpol to disable Detailed Directory Service Replication. Auditpol /set /subcategory:"Detailed Directory Service Replication " /failure:disable Auditpol /set /subcategory:" Detailed Directory Service Replication " /success:disableUse the Auditpol command again to show that the policy has been modified Auditpol /get /category:”DS Access”QuestionWhat log shows you the results of auditing?Answer: The Security log displays the audit results.ReferenceAuditpol set7230c8e mspx?mfr=true
21Types of Events to Audit Course 2786BTypes of Events to AuditModule 8: Implementing an Active Directory® Domain Services Monitoring PlanEvent IDCategoryEvent4662Directory service accessAn operation was performed on an Active Directory object4722User account managementA user account was enabled4726A user account was deleted4738A user account was changed5136Directory service changesAn Active Directory object was modified5137A new Active Directory object was created5138An Active Directory object was undeletedThe Directory Service Access category still provides information about all the events that occur in the directory. It is enabled by default.Directory Service Replication and Detailed Directory Service Replication provide information about replication events. These subcategories are disabled by default unless you enable a global directory access policy.Explain that Directory Services Changes category provides new functionality. The types of changes that you can audit include a user (or any security principal) creating, modifying, moving, or undeleting an object. The new audit policy subcategory adds the following capabilities to auditing in AD DS:- When a successful modify operation is performed on an attribute, AD DS logs the attribute’s previous and current values.- If a new object is created, values of the attributes that are populated at creation time are logged. If the user adds attributes during the create operation, those new attribute values are logged.- If an object is moved, the previous and new location (distinguished name) is logged for moves within the domain.- If an object is undeleted, the location is logged to which the object is moved.This subcategory also is disabled by default.ReferenceWindows Server “Longhorn” Beta 3 Auditing AD DS Changes Step-by-Step Guideea8e02b4b2a51033.mspx?mfr=true
22Demonstration: Configuring AD DS Auditing Course 2786BDemonstration: Configuring AD DS AuditingModule 8: Implementing an Active Directory® Domain Services Monitoring PlanIn this demonstration, you will see how to configure the site link object to manage replication between sitesTo complete this demonstration, you must have the 6425A-NYC-DC1 virtual machine running.This demonstration is carried over from the last demo where you used Group Policy to enable a global audit policy.Demonstration steps:Create a new organizational unit (OU).Use the properties page to access the security properties of the OU. Ensure that Advanced View is enabled.Use the Auditing tab in advanced security to enable auditing for Administrator for successful account-object creation.Refresh Group Policy.Create a new user in the OU. Set logon hours and a profile path for the user.Open Event Viewer and display the results.Examine event 4720 “A user account was created” Examine the last events, 4738, that show the values for logon hours and profile path that you configured. QuestionHow would enable the tracking of failure events for the directory service change subcategory?Answer: You must use the Auditpol.exe to enable failure tracking.ReferenceWindows Server “Longhorn” Beta 3 Auditing AD DS Changes Step-by-Step Guide ea8e02b4b2a51033.mspx?mfr=true
23Lab: Monitoring Active Directory Domain Services Course 2786BLab: Monitoring Active Directory Domain ServicesModule 8: Implementing an Active Directory® Domain Services Monitoring PlanExercise 1: Monitor AD DS Using Event ViewerExercise 2: Monitor AD DS Using Performance and Reliability MonitorExercise 3: Configure AD DS AuditingLab objectivesObjectives covered in the Lab:Monitor AD DS using the Event ViewerMonitor AD DS using Performance and Reliability MonitorConfigure AD DS AuditingScenario:Woodgrove Bank has completed their deployment of AD DS. As the AD DS administrator, you must monitor AD DS availability and performance. The server administrator has provided a monitoring plan that includes service availability, performance, and Event log monitoring components. Using Performance and Reliability Monitoring, Event Viewer, and other tools, you will monitor AD DS domain controllers.This lab consists of three exercises.Exercise 1: Monitor AD DS Using Event ViewerThe student will configure Event Viewer to monitor AD DS based on the monitoring plan prepared by the server administrator. Tasks include creating custom views and creating subscriptions to capture all of the AD DS relevant log information in a single location.Exercise 2: Monitor AD DS Using Performance and Reliability MonitorThe student will configure Performance and Reliability Monitor to monitor AD DS based on the monitoring plan prepared by the server administrator. Tasks include creating data collector sets, monitoring server performance by using Performance Monitor, and configuring alerts that are triggered when services are not available.Exercise 3: Configure AD DS AuditingThe student will configure AD DS auditing to comply with the monitoring plan prepared by the server administrator.Inputs: AD DS monitoring plan provided by the server administrator.Outputs: AD DS monitoring is configured in compliance with the monitoring plan.Logon informationVirtual machineNYC-DC1, NYC-DC2User nameAdministratorPasswordPa$$w0rdEstimated time: 60 minutes
24Course 2786BLab ReviewModule 8: Implementing an Active Directory® Domain Services Monitoring PlanYou want to enable the Directory Service Changes subcategory without enabling a global audit policy. How could you do this?What services must be running on a source computer in order to provide information to a subscription?You have enabled a global audit policy to collect directory service access events, but no events are showing up in the security log. What might the problem be?1. You want to enable the Directory Service Changes subcategory without enabling a global audit policy. How could you do this?Use the auditpol.exe command to enable just the Directory Service Changes subcategory for success or failure or both.2. What services must be running on a source computer to provide information to a subscription?The Windows Event Collector Service and the Windows Remote Management (WS-Management) services must be running.3. You have enabled a global audit policy to collect directory service access events, but no events are showing up in the security log. What might the problem be?You have not configured the SACL for the container that you are trying to audit.
25Module Review and Takeaways Course 2786BModule Review and TakeawaysModule 8: Implementing an Active Directory® Domain Services Monitoring PlanReview questionsConsiderationsReview questions1. What kinds of events are logged in the Setup log?Answer: The setup log records events relating to each new application’s installation.2. For what event ID would you filter to see deleted user accounts?Answer: Event ID 4726.3. What service you enable on computers collecting subscription events from remote computers?Answer: The Windows Event Collector (Wecsvc) service must be enabled on the collecting computer.4. Where can you get up to date information about event IDs?Answer: Event log online help.5. Where can you get historical information about application failures?Answer: The Reliability Monitor tracks historical information about application failures.6. The NTDS\ DRA Pending Replication Synchronizations counter is now consistently higher than the established baseline value for that counter. What might this indicate?Answer: Higher values indicate that the hardware is not adequately servicing replication.7. You want to view all the occurrences of a particular event ID across multiple logs. What is the best way to accomplish this?Answer: Create a custom view for that event ID across multiple logs.Event Viewer allows you to save filters as reusable custom views.
26Beta Feedback Tool Beta feedback tool helps: Walkthrough of the tool Course 2786BBeta Feedback ToolModule 8: Implementing an Active Directory® Domain Services Monitoring PlanBeta feedback tool helps:Collect student roster information, module feedback, and course evaluations.Identify and sort the changes that students request, thereby facilitating a quick team triage.Save data to a database in SQL Server that you can later query.Walkthrough of the tool
27Beta Feedback Overall flow of module: Pacing: Learner activities: Course 2786BBeta FeedbackModule 8: Implementing an Active Directory® Domain Services Monitoring PlanOverall flow of module:Which topics did you think flowed smoothly, from topic to topic?Was something taught out of order?Pacing:Were you able to keep up? Are there any places where the pace felt too slow?Were you able to process what the instructor said before moving on to next topic?Did you have ample time to reflect on what you learned? Did you have time to formulate and ask questions?Learner activities:Which demos helped you learn the most? Why do you think that is?Did the lab help you synthesize the content in the module? Did it help you to understand how you can use this knowledge in your work environment?Were there any discussion questions or reflection questions that really made you think? Were there questions you thought weren’t helpful?