Nagios Support Forum

Hi all.

How do I go about monitoring active directory in xi? I've seen some plugins referencing monitoring active directory but I haven't the slightest idea as to how to implement them and I haven't seen any HowTo's or documentation on doing this.

One way that we monitor Active Directory is by monitoring the NTDS process. We used the "Windows Server Wizard" to set it up.

Edit: I was mistaken, it simply allows you to use AD directory passwords, not monitor active directory.

niebais wrote:One way that we monitor Active Directory is by monitoring the NTDS process. We used the "Windows Server Wizard" to set it up.

I'm unfamiliar with AD but wouldn't the process monitoring just show up/down? Are there any metrics to capture for AD? (health, connections, etc?)

Unfortunately there is not to my knowledge. There are a few plugins on the Exchange

http://exchange.nagios.org/directory/Pl ... TK/details

http://exchange.nagios.org/directory/Pl ... ck/details

I don't have an Active Directory environment here to test it on so I wouldn't be able to tell how well they work but adding checks in Nagios xi is pretty straightforward. If you want documentation on the process:

http://assets.nagios.com/downloads/nagi ... ios_xi.pdf

Regards,

Question is what do you want to monitor in AD? Plenty of things to. WMI is your friend here and if you don't know what you are looking for use the scriptomatic as a tool to browse WMI and find what you are looking for. http://www.microsoft.com/download/en/de ... n&id=12028

With AD I assume you want to monitor Domain Contoller and make sure they are up. Be aware that there are specific roles assigned to AD servers which can add what you want to monitor.
Again the question is what do you want to monitor.

WMI Namespace root\MicrosoftActiveDirectory which can give you the replication status of ADS servers
WMI Namespace root\Directory\LDAP which contains a ton of classes.

Then you could use the Win32_PerfRawData_NTDS_NTDS

Select LDAPClientSessions,LDAPBindTime,LDAPActiveThreads,DSThreadsinUse,DSNotifyQueueSize,ABClientSessions,ABBrowsesPersec,LDAPSearchesPersec,DSDirectoryWritesPersec,DSDirectorySearchesPersec,DSDirectoryReadsPersec from Win32_PerfRawData_NTDS_NTDS

Of course I could be totally wrong and provide this info with a disclaimer and warning to use are your own risk.

Thanks for the input rseiwert!