Active Directory Users Test
This test reports the status of user accounts configured in the Active Directory server and thus, quickly points you to ‘unused’ accounts that can be deleted to make room for those that are actively used.
For more details about the performance issues that users could encounter in the Active Directory environment and the solutions for the same, refer toTop 8 Active Directory Performance Problems and How to Solve Them page.
Target of the test : An Active Directory or Domain Controller on Windows
Agent deploying the test : An internal agent
Outputs of the test : One set of results for every Active Directory site that is being monitored
| Parameters | Description |
|---|---|
|
Test period |
This indicates how often should the test be executed. |
|
Host |
The IP address of the machine where the Active Directory is installed. |
|
Port |
The port number through which the Active Directory communicates. The default port number is 389. |
|
Inactive Days |
Specify the number of days beyond which the Active Directory users should be identified as inactive. By default, this is set to 90. |
|
Show Users |
By default, this parameter is set to No indicating that this test will not report the detailed diagnosis for the Total Users measure by default. However, if you wish to view the detailed diagnosis for the Total Users measure, set this flag to Yes. |
| DD Frequency |
Refers to the frequency with which detailed diagnosis measures are to be generated for this test. The default is 4:1. This indicates that, by default, detailed measures will be generated every fourth time this test runs, and also every time the test detects a problem. You can modify this frequency, if you so desire. Also, if you intend to disable the detailed diagnosis capability for this test, you can do so by specifying none against DD frequency. |
|
Detailed Diagnosis |
To make diagnosis more efficient and accurate, the eG Enterprise embeds an optional detailed diagnostic capability. With this capability, the eG agents can be configured to run detailed, more elaborate tests as and when specific problems are detected. To enable the detailed diagnosis capability of this test for a particular server, choose the On option. To disable the capability, click on the Off option. The option to selectively enable/disable the detailed diagnosis capability will be available only if the following conditions are fulfilled:
|
| Measurement | Description | Measurement Unit | Interpretation |
|---|---|---|---|
|
Never logged on users |
Indicates the indicates the number of AD users who have never logged on to the network. |
Number |
A healthy AD server is one that has no or very few ‘unused’ user accounts. A high value is therefore not desired for this measure. To know who these users are, use the detailed diagnosis of this measure. |
|
Inactive users |
Indicates the number of users who are currently inactive in the AD server. |
Number |
To identify the inactive users, use the detailed diagnosis of this measure. The detailed diagnosis displays the Distinguished Name of the user, the date/time he/she logged in last, and the date/time at which the user account was created. This will help you in figuring out how long that user has been inactive. If you think that the user will never again become active, you can proceed to delete that user account. |
|
Disabled users |
Indicates the number of user accounts that are currently disabled on the AD server. |
Number |
To identify the disabled users, use the detailed diagnosis of this measure. The detailed diagnosis displays the Distinguished Name of the user and the date/time at which the user account was created. This will help you in figuring out how long each user account has remained disabled. If you think that the user will never again become active, you can proceed to delete that user account. |
|
Total users |
Indicates the total number of users managed by the AD server. |
Number |
The detailed diagnosis of this measure if enabled, lists the Distinguished Names of the users on the Active Directory server. |
