12Monitorización – Tareas diarias TasksImportanceVerify that all domain controllers are communicating with the central monitoring console or collector.Communication failure between the domain controller and the monitoring infrastructure prevents you from receiving alerts so you can examine and resolve them.View and examine all new alerts on each domain controller, resolving them in a timely fashion.This precaution helps you avoid service outages.Resolve alerts indicating the following services are not running: FRS, Net Logon, KDC, W32Time, ISMSERV. MOM reports these as Active Directory Essential Services.Active Directory depends on these services. They must be running on every domain controller.Resolve alerts indicating SYSVOL is not shared.Active Directory cannot apply Group Policy unless SYSVOL is shared.Resolve alerts indicating that the domain controller is not advertising itself.Domain controllers must register DNS records to be able to respond to LDAP and other service requests.Resolve alerts indicating time synchronization problems.The Kerberos authentication protocol requires that time be synchronized between all domain controllers and clients that use it.Resolve all other alerts in order of severity. If alerts are given error, warning, and information status similar to the event log, resolve alerts marked error first.The highest priority alerts indicate the most serious risk to your service level.
13Monitorización – Tareas semanales TasksImportanceReview the Time Synchronization Report to detect intermittent problems and resolve time-related alerts.The Kerberos authentication protocol requires that time be synchronized between all domain controllers and clients that use it.Review the Authentication Report to help resolve problems generated by computer accounts with expired passwords.Expired passwords must be reset to allow the computers to authenticate and participate in the domain.Review the Duplicate Service Principal Name Report to list all security principals that have a service principal name conflict.User or computer accounts cannot be authenticated or log on if they share an SPN with another account.Review a report of the top alerts generated by the Active Directory monitoring indicators and resolve those items that occur most frequently.Report shows alerts that occur most often. Focusing on the top alert generators significantly reduces the number of alerts seen by the operator.Review the report that lists all trust relationships in the forest and check for obsolete, unintended, or broken trusts.Authentication between domains or forests requires trust relationships.
14Monitorización – Tareas mensuales TasksImportanceVerify that all domain controllers are running with the same service pack and hot fix patches.Potential issues can arise if distributed services are running with different versions of software.Review all Active Directory reports and adjust thresholds as needed. Examine each report and determine which reports, data, and alerts are important for your environment and service level agreement.Examining the data that is relevant to your environment allows you to determine the thresholds that trigger the alerts to your service level delivery.Review the Replication Monitoring Report to verify that replication throughout the forest occurs within acceptable limitsTimely replication helps assure that you meet your service level agreements.Review the Active Directory response time reports.Services must respond quickly for the system to function properly and applications such as to work properly.Review the domain controller disk space reports.The drives containing the Active Directory database and log files must have sufficient free space to accommodate growth and routine processing.Review all performance-related reports. These reports are called Health Monitoring reports in MOM.These reports can help you determine the baseline for your environment and adjust thresholds.Review all performance-related reports for capacity planning purposes to ensure that you have enough capacity for current and expected growth. These reports are called Health Monitoring reports in MOM.These reports help you track growth trends in your environment and plan for future hardware and software needs.Adjust performance counter thresholds or disable rules that are not applicable to your environment or that generate irrelevant alerts.Monitoring indicators must be adjusted to suit your environment. The goal is to provide alerts that are concise, highly relevant, and lead an operator to resolve the problem.
34Guía de operaciones de AD Administering Active Directory OperationsIntroduction to Administering Active DirectoryAdministering Domain and Forest TrustsAdministering the Windows Time ServiceAdministering SYSVOLAdministering the Global CatalogAdministering Operations Master RolesAdministering Active Directory Backup and RestoreAdministering Intersite ReplicationAdministering the Active Directory DatabaseAdministering Domain ControllersAdditional Resources for Administering Active DirectoryTroubleshooting Active Directory OperationsConfiguring a Computer for Troubleshooting Active DirectoryTroubleshooting Active Directory Replication ProblemsAdditional Resources for Troubleshooting Active Directory(Buscar en ms.com/downloads: “Active Directory Operations Guide Version 1.5”)
41Webcast grabados de temas relacionados Más Acciones ...Webcast grabados de temas relacionadosActive Directory - Usos y conceptos básicos del Directorio ActivoActive Directory - Conceptos Avanzados de Directorio ActivoActive Directory - La importancia del DNS para el Directorio ActivoActive Directory - Replicación del Directorio ActivoActive Directory - Replicación FRSActive Directory - Uso avanzado de las politicas de GrupoActive Directory - Mejores Practicas para un buen diseño del Directorio ActivoActive Directory - Chequeo de salud del directorio Activo
42Próximos WebcastActive Directory - Migración desde Windows NT a Directorio ActivoRegistro en:
43Próximas acciones desde TechNet Microsoft TechNet Security Daysecurity/default.aspMADRID : 10 mayo de 2006Seminario TechNet: Seguridad Práctica para Empresas:t.aspPamplona: 19 de Abril
44Más acciones desde TechNet Para ver los webcast grabados sobre éste tema y otros temas, diríjase a:Para información y registro de Futuros Webcast de éste y otros temas diríjase a:Para mantenerse informado sobre todos los Eventos, Seminarios y webcast suscríbase a nuestro boletín TechNet Flash en ésta dirección:Descubra los mejores vídeos para TI gratis y a un solo clic:Para acceder a toda la información, betas, actualizaciones, recursos, puede suscribirse a Nuestra Suscripción TechNet en: