Perform Configuration Check of a Target

Perform Configuration Check of a Target

One of the functions AD Health Profiler performs is to report on the configuration changes. A Health Set can be used to report configuration changes of the target managed by the Health Profile which, in turn, helps you maintain configuration and health of the Target.

A Health Set contains data that you would like to compare with corresponding Dynamic Pack data. For example, you can create a Health Set by name "FSMO Health Set" and then have AD Health Profiler compare “FSMO Health Set” data with the "Get Active Directory Domain FSMO" Dynamic Pack data. If data doesn't match, AD Health Profiler will report severity that you had defined when creating the Health Set.

Health Set Characteristics:

  • Each Dynamic Pack can have one Health Set associated with it. For example, HSet1 can be associated with "Get Active Domain Info" Dynamic Pack and HSet2 can be associated with "Get Active Directory Forest Info" Dynamic Pack.
  • You cannot create a blank Health Set. Health Set obtains its data from the Dynamic Pack.
  • Health Sets are supported only for “Configuration Check” profiles. Health Sets are not supported for “Health Check” profiles.

You are required to create a Configuration Check Health Profile for AD Health Profiler to report on configuration changes. I would recommend you reading Using Active Directory Health Profiler article to help you understand a few terms associated with it.

Note: The process for performing Configuration Check of other targets such as Microsoft Hyper-V, Exchange, SQL, Azure and Office 365 Subscription is similar to what we are going to explain here. All you need to do is select Target and Target Dynamic Packs when creating a Configuration Check Health Profile.

AD Health Profiler ships with 88 PowerShell based Active Directory Dynamic Packs that you can execute via a Health Profile against the Active Directory Target managed by the Health Profile. This article explains how you can use Active Directory Dynamic Packs to have AD Health Profiler report on Configuration changes.

Before you start to follow the steps mentioned in this article, we need to ensure that you have registered Active Directory Forest as a Target with the AD Health Profiler. You can follow Registering Targets with AD Health Profiler post to register AD Forest as a Target.

Creating Configuration Check Health Profile

Once you have registered Targets with AD Health Profiler, you are ready to create a Configuration Check Health Profile and select registered AD Forest as a Target. To create a Health Profile, click on "Manage Health Profiles" button in the Left Pane. Once clicked, right pane will show Manage Health Profiles window as shown in the screenshot below:

Creating a Health Profile

Creating a Health Profile

When creating Health Profile, you are required to provide the following inputs:

  • Health Profile Name: Unique name of the Health Profile. Health Profile name must be unique across AD Health Profiler.
  • Select Target: Select Target that will be managed by the Health Profile. Since we are creating a Health Profile that will manage an Active Directory, select "Microsoft Active Directory" in the dropdown.

Tip: If AD Health Profiler does not have Dynamic Packs for a selected Target, you will not be able to create the Health Profile. For example, if you select "Microsoft Hyper-V" as a target in the dropdown and if there are no Dynamic Packs available or Dynamic Packs have not been imported yet, you will not be able to create the Health Profile. 

  • Select Active Directory Forest Target: Select recently registered AD Forest name from the dropdown.
  • Select Profile Type: Select the Profile Type here.

Before you start to create a Health Profile, let me help you understand a few terms associated with Health Profiles. A Health Profile created in AD Health Profile has the following characteristic:

  • Health Profile can be of two types; Health Check and Configuration Check.
  • The sole purpose of creating a Health Profile is to perform a Health Check or report on configuration changes of the Target managed by the Health Profile.
  • A Health Profile contains Health Check or Configuration Check Dynamic Packs, but cannot contain Dynamic Packs from both the categories.

Select "Configuration Check" as the Profile Type from the dropdown.

  • Select Dynamic Packs: In the "Select Dynamic Packs" tree, you will see available Dynamic Packs based on the Health Profile Type. Since you selected Configuration Check Profile Type, you will only see Dynamic Packs from Configuration Check Dynamic Packs category as shown in the screenshot below:

Showing Configuration Check Dynamic Packs

Showing Configuration Check Dynamic Packs

You can select all or required Dynamic Packs.

Once you have selected required Dynamic Packs, click on "Create Health Profile" button to create the Health Profile. Once Health Profile is created, AD Health Profiler will refresh Health Profiles tree as shown in the screenshot below:

Health Profile in AD Health Profiler

Health Profile in AD Health Profiler

Once you have created the Health Profile you are ready to open the Dynamic Packs window and execute Health Profile or individual Dynamic Packs.

Opening and Executing Health Profile

At this stage, you are ready to perform some actions on the Health Profile you just created. You can either execute complete Health Profile or Open Dynamic Packs window and then execute individual Dynamic Packs. Lets start by explaining how to open Dynamic Packs Window of a Health Profile.

To open the Dynamic Packs Window for a Health Profile, select the Health Profile in the "Health Profiles" tree and then click on the "Dynamic Packs" button as shown in the red circle of the screenshot below:

Dynamic Packs Window for a Health Profile

Dynamic Packs Window for a Health Profile

Dynamic Packs window shows you the Dynamic Packs that are available for execution against the target managed by the Health Profile. As you can see in the screenshot above, in Dynamic Packs window, AD Health Profiler identifies the currently opened Health Profile and it's Target and then shows the Dynamic Packs that are available for the Target. Since the Health Profile that we created in previous steps contains an Active Directory Forest as a Target, you will see Dynamic Packs from Microsoft Active Directory Dynamic Packs bundle.

To learn more about Dynamic Packs Window, we recommend you reading Working with Dynamic Packs Window post.

You can execute all Dynamic Packs for currently opened Health Profile or execute individual Dynamic Packs. To execute all Dynamic Packs, all you need to do is click on the "Execute All Packs" button shown right above the Dynamic Packs tree.

To execute individual Dynamic Packs, expand any of the Dynamic Packs Categories, right click on a Dynamic Pack and then click on the "Execute" button as shown in the screenshot below:

Executing a Dynamic Pack

Executing a Dynamic Pack

When you execute all or individual Dynamic Packs, AD Health Profiler will execute Dynamic Packs against the target (Active Directory Forest in this case) managed by the Health Profile and then display the execution status of each Dynamic Pack in the "Execution Status" window as shown in the screenshot below:

Execution Status Window

Execution Status Window

Execution Status window will show you the Dynamic Pack status with their process ID as shown in the screenshot above.

Here is an explanation of Actions available on the Right Click Context menu of a Dynamic Pack:

  • Execute: Execute currently selected Dynamic Pack.
  • Stop: Stops currently selected Dynamic Pack if it is running.
  • Load Result: Load Dynamic Pack data in right pane.
  • Show Execution Errors: If there were any errors during execution of a Dynamic Pack, this action will show errors in the right pane.
  • Refresh Execution Status: Refreshes execution status for currently selected Dynamic Pack.
  • Disable Dynamic Pack: This option can be used if you do not want to execute Dynamic Pack when you click on the "Execute All Tests". All Disabled Dynamic Packs in a Health Profile will be exempted from execution.

When you click on "Execute All Packs" or individual Dynamic Packs, AD Health Profiler will turn Dynamic Packs into red. To refresh the current status of Dynamic Packs, you need to click on "Refresh Status" button found in the Dynamic Packs window. When you click on the "Refresh All" button, AD Health Profiler will take following actions:

  • Mark Dynamic Packs icon in Green for Dynamic Packs that have been executed successfully.
  • Mark Dynamic Packs icon in full Red for Dynamic Packs that failed to execute.

To go back to Dynamic Packs window for currently opened Health Profile, click on the Red Cross icon found on the Execution Status Window.

Let me summarize what we did in previous steps:

  • We created a Configuration Check Health Profile.
  • We executed Dynamic Packs in Configuration Check Health Profile.

So, at this stage, you are ready to generate the Health Profile report. If you wish AD Health Profiler to report on configuration changes, you must create Health Sets for required Dynamic Packs. If you don't create Health Sets, all you are doing is collecting information from the target managed by the Health Profile and then generating a report in HTML format. To know how to generate a Health Profile report, please follow Working with Report Window post.

Creating Health Sets

A Health Set contains data that you would like to compare with corresponding Dynamic Pack data. For example, you can create a Health Set by name "FSMO Health Set" and then have AD Health Profiler compare “FSMO Health Set” data with the "Get Active Directory Domain FSMO" Dynamic Pack data. If data doesn't match, AD Health Profiler will report severity that you had defined when creating the Health Set.

A Health Set can only be created from the Dynamic Packs Window. After creating the Health Sets, you can manage all Health Sets by clicking "Manage Health Sets" button.

Before you create a Health Set, please ensure:

  • Currently opened Health Profile is a Configuration Check Health Profile.
  • You have executed Dynamic Pack for which you want to create a Health Set.

You will not be able to create Health Set if above conditions do not meet.

Please follow the steps mentioned below to create a Health Set:

Step 1: Do a single click on Dynamic Pack to populate the Dynamic Pack data that AD Health Profiler collected when you executed the Dynamic Pack. This is required in order to create a Health Set.

Step 2: Click on "Create Health Set" button as shown in the screenshot below:

Creating a Health Set

Creating a Health Set

When you click on "Create Health Set", AD Health Profiler will perform the following checks:

  • A Dynamic Pack is selected in the Dynamic Packs Window.
  • There are some data available in the data grid for the selected Dynamic Pack.

Once conditions are met, AD Health Profiler will show "Create Health Set" window as shown in the screenshot below:

Creating Health Set in AD Health Profiler

Creating Health Set in AD Health Profiler

Provide Health Set details as listed below:

  • Health Set Name: A Unique Health Set name is required.
  • Health Set Type: Select Health Set type. If you select "Data-To-Data" type, AD Health Profiler will compare complete Health Set data with Dynamic Pack Data. If you select "Entry-To-Entry", AD Health Profiler will compare only entries that you mark as “Must Match”.
  • Health Set Severity: Select Health Set Severity. You can select High, Critical, Medium or Low. Health Set Severity will be shown in the Health Profile report if any of the conditions that you define fail. For example, if data does not match, defined Health Set Severity will be shown in the report.

Step 3: Click "Create" button to create the Health Set.

Once Health Set is created, click on "Manage Health Sets" in the left pane to modify the Health Set data.

Modifying Health Sets

To modify the Health Set data, click on the "Manage Health Sets" button. When you click on "Manage Health Sets" button, AD Health Profiler will show Manage Health Sets Window as shown in the screenshot below:

Modifying Health Set Data

Modifying Health Set Data

As you can see in the screenshot above, I have created a Health Set by name "AD Forest Info" which applies to "Get AD Forest Info and FSMO" Dynamic Pack in "HRC2" Health Profile. In the Right Pane, I can modify Health Set data. I would like AD Health Profiler to compare Dynamic Pack data with Health Set Data that I define. If data doesn't match, AD Health Profiler will report the severity in the Health Profiler report that I have defined for the Health Set.

Once you have done modifying Health Set data, please ensure you click on "Save Health Set Data" button to save modified data.

There are 23 Dynamic Packs available for Microsoft Active Directory Target and you can create and associate one Health Set with each Dynamic Pack. If you don't find a Dynamic Pack of your choice, do let us know.

Ok. At this stage, you are ready to generate the Health Profile report. Please follow Working with Report Window post.

***

 

It's only fair to share...Share on FacebookShare on Google+Tweet about this on TwitterShare on LinkedInShare on Reddit