Template Active Directory / Domain Controller

[tof233]

Hello,
I couldn't find any template for monitoring Microsoft Active Directory / Domain Controller infrastructure.
I'm quite surprised as it should be something really useful.

Does someone made one?
Otherwise I will try to create it and publish

[mmarkwitzz]

I have something really basic that monitors kerberos auth/sec and NTLM auth/sec, the status of the kdc and netlogon services.

Also a script for monitoring various events from the eventlog like directory replication error, file replication error, file replication time sync error and global catalog unavailable.

I guess it could be extended with some of the checks that netdiag or dcdiag does, or even with some from repadmin.

Attached you have the template and the script for interrogating the event log.

Here is a sample from the config file:

#windows eventlog
UserParameter = system.eventlog[*],cscript "C:\Program Files\Zabbix agent\zabbix_win_eventlog.vbs" //Nologo $1 $2 $3 $4

NOTES:
The template uses active agent checks. You can change this on each of the items if that does not fit with you infrastructure.

The eventlog items can only detect when there is a problem, there is no way to detect when the issue is resolved. So you might as well create a custom action that does not send recovery emails.

[tof233]

Thank you mmarkwitzz,
It helped me very well.
I have added some other stuffs to the templates:
Here is the linkage tree
Template_Windows_Active ->Template_AD -> (Template_AD_Domain_Controller / Template_AD_NAS).

[lfssouto]

Template for zabbix 3.4

I'm trying to use this template in Zabbix 3.4 and importing Template_AD gives error when updating "description" for template trigger "{HOSTNAME} is unreachable".

Any idea?

Does anyone know of a template to monitor Windows Active Directory in Zabbix 3.4?


Thanks a lot

[bono28]

I am using zabbix 3.4
i have an error to when import Template_AD.xml

[Anthonypruiz]

Change all the instances of "{HOSTNAME}" to "{HOST.NAME}" and it will work.

[Chewbakka-Wakka]

I'm interested in this, will need to import and check these out.

[Chewbakka-Wakka]

Imported and looked. Could use more such as Netlogon items. It is basic but works. I am tempted to clone it to my git then improve upon it. I am not sure that a script is needed here...

"I have something really basic that monitors kerberos auth/sec and NTLM auth/sec, the status of the kdc and netlogon services." - just as you said.

https://msdn.microsoft.com/en-us/library/cc237121.aspx?f=255&MSPPError=-2147217396

[Chewbakka-Wakka]

"Change all the instances of "{HOSTNAME}" to "{HOST.NAME}" and it will work." - Would be good if owner of this would make the changes then re-upload the attachments again. I fixed this manually once, imported and one works the others do not

"Cannot update "description" for templated trigger "{HOST.NAME} is unreachable"." ... needs fixing.

[Chewbakka-Wakka]

"I have added some other stuffs to the templates:
Here is the linkage tree
Template_Windows_Active ->Template_AD -> (Template_AD_Domain_Controller / Template_AD_NAS)." - I looked at all these and I can provide dramatic improvements all round here. Instead of referring to C drive as a static item better to use LLD for VFS side. Only a small selection of items and the dependencies between templates is not needed here. I need to fix these and give you guys a proper working template for AD.

[aidaitzabbix]

Hy folks!!!
Any new template for monitoring AD controllers in zabbix 6.2? Thanks in advance

[AlexNikonov]

Hy folks!!!
Any new template for monitoring AD controllers in zabbix 6.2? Thanks in advance

Did you try these?
AD DS Health and Performance
AD DS Monitoring and Attack Detection

[pedroskky]

Hi I have a problem. i have an error to when import Template_AD.xml

Cannot find value map "2" used for item "Host status" on "Template_Windows_Active".

Zabbix 5.0.35

Thanks