3.9 DCHealthMonitor

Use this Knowledge Script to monitor CPU and memory usage, and disk space availability for an Active Directory domain controller. You can also use this script to monitor the CPU and memory usage for the LSASS process. This script raises an event if a monitored value exceeds the threshold you set.

LSASS, the Windows Local Security Authority Server process, handles Windows security mechanisms. It verifies the validity of user logons to your computer or server. Technically, the software generates the process that is responsible for authenticating users for the Winlogon service.

HINT:If you use this script, you should not need to perform additional operating system monitoring for CPU, memory, or disk space usage.

3.9.1 Resource Objects

Active Directory domain controller

3.9.2 Default Schedule

The default interval for this script is Every 5 minutes.

3.9.3 Setting Parameter Values

The default settings for the Advanced tab on the Properties dialog box are overridden for this script. Specifically, the Collapse duplicates option is disabled, and the Raise event if event condition occurs option is set to 3 times within 3 job iterations.

Set the following parameters as needed:

Parameter	How to Set It
General Settings
Raise event if job fails
Event severity when job fails	Set the severity level, from 1 to 40, to indicate the importance of an event in which the DCHealthMonitor job fails. The default is 35.
Monitor CPU, memory, and disk utilization?
Event Notification
Raise event if CPU utilization exceeds threshold?	Select Yes to raise an event if CPU usage exceeds the threshold you set. The default is Yes.
Threshold -- Maximum CPU utilization	Specify the maximum percentage of CPU resources that can be used by the Active Directory domain controller before an event is raised. The default is 90%.
Event severity when CPU utilization exceeds threshold	Set the severity level, from 1 to 40, to indicate the importance of an event in which CPU usage exceeds the threshold. The default is 5.
Raise event if memory utilization exceeds threshold?	Select Yes to raise an event if memory usage exceeds the threshold you set. The default is Yes.
Threshold -- Maximum memory utilization	Specify the maximum percentage of memory resources that can be used by the Active Directory domain controller before an event is raised. The default is 90%
Event severity when memory utilization exceeds threshold	Set the severity level, from 1 to 40, to indicate the importance of an event in which memory usage exceeds the threshold. The default is 5.
Raise event if disk utilization exceeds threshold?	Select Yes to raise an event is disk usage exceeds the threshold you set. The default is Yes.
Threshold -- Maximum disk utilization	Specify the maximum percentage of disk space that can be used by the Active Directory domain controller before an event is raised. The default is 90%.
Event severity when disk utilization exceeds threshold	Set the severity level, from 1 to 40, to indicate the importance of an event in which disk usage exceeds the threshold. The default is 5.
Data Collection
Collect data for system CPU utilization?	Select Yes to collect data for charts and reports. If enabled, data collection returns the CPU usage of the server as a percentage of total CPU time. The default is unselected. Tip Enable this parameter for domain controller load trend analysis.
Collect data for system memory utilization?	Select Yes to collect data for charts and reports. If enabled, data collection returns the memory usage of the server (as a percentage of total system memory). The default is unselected. Tip Enable this parameter for domain controller load trend analysis.
Collect data for disk utilization?	Select Yes to collect data for charts and reports. If enabled, data collection returns the disk usage of the server (as a percentage of total disk space). The default is unselected. Tip Enable this parameter for domain controller load trend analysis.
Monitor memory and CPU for LSASS?	Select Yes to monitor CPU and memory usage of the LSASS process. The default is Yes.
Event Notification
Raise event if LSASS CPU utilization exceeds threshold?	Select Yes to raise an event if LSASS CPU usage exceeds the threshold you set. The default is Yes.
Threshold -- Maximum LSASS CPU usage	Specify the maximum percentage of CPU resources that can be used by LSASS before an event is raised. The default is 90%.
Event severity when LSASS CPU utilization exceeds threshold	Set the event severity level, from 1 to 40, to indicate the importance of an event in which LSASS CPU usage exceeds the threshold. The default is 5.
Raise event if LSASS memory utilization exceeds threshold?	Select Yes to raise an event if LSASS memory usage exceeds the threshold you set. The default is Yes.
Threshold -- Maximum LSASS memory usage	Specify the maximum amount of memory (in KB) that can be used by LSASS before an event is raised. The default is 1700000 KB (1.7 GB). NOTE:Set this parameter to 2700000 (2.7 GB) if the ”/3GB” option is enabled in the boot.ini file.
Event severity when LSASS memory utilization exceeds threshold	Set the severity level, from 1 to 40, to indicate the importance of an event in which LSASS memory usage exceeds the threshold. The default is 5.
Data Collection
Collect data for LSASS CPU utilization?	Select Yes to collect data for charts and reports. If enabled, data collection returns the CPU usage of the LSASS process as a percentage of total CPU time. The default is unselected. Tip Enable this parameter for domain controller load trend analysis.
Collect data for LSASS memory utilization?	Select Yes to collect data for charts and reports. If enabled, data collection returns the memory usage of the LSASS process as a percentage of total LSASS memory. The default is unselected. Tip Enable this parameter for domain controller load trend analysis.