Active Directory / Domain Controller / Health monitoring tools

Question

Hi,
Looking for opinions/advice on what tools other companies use to monitor their Active Directory health in regards to the infrastructure of AD, not the administration of it? What I mean by that, for example, is a tool that'll provide details on the health of replication, site status, group policy state, dns, etc. Many tools I'm finding track the details of user or group management, but I'm looking more for the health of our domain.

We used to use Solar Winds, but due to the not so distant past issue they had with their exposed vulnerability, the company made the decision to remove that from our environment. I'm looking for a replacement. We recently had, for example, an issue with one of our sysvols and a tool maybe would have caught that before we stumbled upon it.

I know we can use built - in tools (dcdiag, replmon, event monitoring, etc) but looking for a global tool we don't have to put some effort into automating.

Thanks in advance for any advice / suggestions / opinions.

Answer 1

hello,

in our side we used : SCOM and if you have a hybrid environment you can deploy Azure AD connect Health for AD and ADFS :

https://learn.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-health-agent-install

Answer 2

dcdiag, repadmin are my goto tools. Another one is the replication status tool.
https://www.microsoft.com/en-us/download/details.aspx?id=30005

Other than that it sounds like you're looking for some third party tools then I'd check the vendor site for more info on them.

--please don't forget to upvote and Accept as answer if the reply is helpful--

Answer 3

Glad to hear, you're welcome. These are microsoft forums, so I'd suggest reaching out to the third-party vendors (or ask in their forums) about specifics on their tools.

--please don't forget to upvote and Accept as answer if the reply is helpful--

Answer 4

You can also check SmartProfiler for Active Directory which ships with a DC Health Checker component - can be scheduled and notify you via email if any DC Health issues occur. Check out here: https://microsoft-assessment.com/

Answer 5

You can also try InfraSOS Active Directory Health Check Tool. Perform over 150 checks against for AD for replication issues, AD configuration, DNS, GPOs, Permissions, DC Hardware, Security Assessments & more.. https://infrasos.com/active-directory-reporting/health-check-tool/