Share via

Manually run an Assessment

  1. First, start an administrative command prompt.

    The Task Scheduler window that shows the Command Prompt command and the Run as Administrator menu item.

  2. Then go to the folder under your working directory where the "ADAssessment" run command is stored. From there, run the run command.

    The Administrator Command Prompt window, which shows the run command has been run in the working directory.

  3. The run command starts the OmsAssessment.exe, which is the actual executable that collects and analyzes data from your domain controllers.

    The Task Manager window, which shows that OmsAssessment.exe is running.

  4. In Task Manager, you should see OmsAssessment.exe running.

    Note

    For small environments, it may finish in less than 30 minutes. For larger environments, it could take a few hours.

  5. Now that the assessment is running, take a closer look at the working directory. In the working directory, there's a numbered folder that stores the collected data.

    Note

    You can also review the following log files.

    The file explorer window, which shows that the working directory has a numbered folder that stores collected data.

  6. Now we'll just need to wait for OmsAssessment.exe to finish the data collection and analysis phase of the assessment.

  7. Once the OmsAssessment.exe finishes and disappears from Task Manager, the results are stored in the working directory. The files with a processed prefix mean they have been processed and uploaded to Azure Log Analytics.

    The file explorer window, which shows the results from OmsAssessment.exe.

  8. Under the numbered folder there is a log file that you can review in case of any issues during data collection and analysis phase of the assessment.

    The Microsoft Azure window, which shows the On Demand Assessment tiles.

  9. There is also a separate log file called Discovery Log that records the environment discovery phase of the process. In this case, you should see the domain controllers in your environment discovered successfully by the assessment.

    Note

    In this example image, there are two domain controllers in the environment, DC1 and DC2. You should be able to see that they have been successfully discovered.

    The Microsoft Azure window, which shows the two domain controllers, DC1 and DC2, have been successfully discovered.

  10. Wait a few moments for Azure Log Analytics to ingest and index the uploaded data, the Active Directory Assessment tile should now show the number of recommendations and passed checks.

    The Microsoft Azure window, which shows that the Active Directory Assessment tile has the number of recommendations and passed checks.

  11. Select the tile to review the results, which are categorized into several focus areas.

  12. You can select any one of the focus areas to review issues found, detailed recommendations, and the suggested actions to remediate.

  13. If everything looks good, you can return to the Task Scheduler and set the assessment task to run on schedule.