About Dynamic Pack

A Dynamic Pack consists of PowerShell code. Dynamic Packs can be used to perform Health Check, collect information, and maintain health of the target. All of our Dynamic Packs have been written by industry experts such as Microsoft MVPs and IT experts. We are in the process of designing more Dynamic Packs. The Health Check Dynamic Packs are used for reporting issues, severity and recommendations to fix the issues. Health Check Dynamic Packs can be used only with the O365 IT Risk & Health Scanner product. All of the Dynamic Packs designed by us follow vendor recommendations and best practices.

Importing Dynamic Pack

O365 IT Risk & Health Scanner Execution SubSystem supports importing Dynamic Packs from Dynamic Packs Server or file. Once new Dynamic Packs are available you can import them using O365 IT Risk & Health Scanner Import Packs section. If you have designed a Dynamic Pack that you would like to import into the O365 IT Risk & Health Scanner.

Modifying Existing Dynamic Packs

If you wish to modify any of the Dynamic Packs to include your own comment, change severity and so on you can do so by using the Packs Manager.

Design New Dynamic Packs

Using the Packs Manager you can design new Dynamic Packs.

Request Dynamic Pack

You can request Dynamic Pack of your choice. Once the Dynamic Pack is available you will be able to import from within the O365 IT Health & Risk Scanner Console.








Available Dynamic Packs

Here is a list of Dynamic Packs that ship with O365 IT Health & Risk Scanner V4.0.

Microsoft Active Directory Dynamic Packs

Number Of Dynamic Packs : 74

Assessment Target: Microsoft Active Directory Forest

Reported Severity: Critical, High, Medium, Low and Passed

CATEGORY DYNAMIC PACK CREDENTIAL NEEDED DESCRIPTION
AD Domain Computers Health Checks Domain Computers Operating Systems Test Domain User Dynamic Pack checks to see how many Windows XP and Windows 7 and other OSes are there in each domain.
AD Domain Security Groups Health Checks Domain Duplicate Security Groups Test Domain User Dynamic Pack collects duplicate security groups in each domain.
AD Domain GPO Health Checks Domain GPOs No Override Test Domain User Dynamic Pack cheks to see how many GPOs have been configured with No Override options. Dynamic Pack is executed against each domain.
AD Domain Computers Health Checks Domain Computers Disabled Test Domain User Dynamic Pack gets disabled computer accounts in each AD Domain. Test is considered failed if more than 100 disabled computers are found in a domain.
AD Domain Computers Health Checks Domain Computers Stale Accounts Test Domain User Dynamic Pack gets stale computer accounts in each AD Domain. Test is considered failed if more than 100 stale computer accounts are found in a domain.
AD Forest Health Checks AD Partitions Backup Test Domain User Dynamic Pack is used to check if any backups have been performed for AD Partitions.
AD Forest Health Checks AD Forest ISTG Test Domain User Dynamic Pack Checks to see if an ISTG role is defined in each Active Directory Site. Test reports failure if no ISTG is found in an Active Directory Site.
AD Forest Health Checks AD Forest Replication Test Domain User Dynamic Pack Checks Active Directory Forest Replication status.
AD Forest Health Checks AD Manual Replication Connection Objects Test Domain User Dynamic Pack Checks Manual Replication Connection Objects created in Active Directory Forest.
AD Forest Health Checks AD Forest Orphaned ISTG Test Domain User Dynamic Pack Reports Orphaned ISTG in Active Directory forest.
AD Forest Health Checks AD Duplicate Site Links Test Domain User Dynamic Pack Checks to see how many AD Sites are configured in more than one Site Link.
AD Forest Health Checks AD Site Location Test Domain User Dynamic Pack Checks if each AD Site has location text defined.
AD Forest Health Checks AD Adjacent Site Test Domain User Dynamic Pack checks to what sites are Adjacent sites configured for each AD Site.
AD Forest Health Checks AD Site Undefined Subnets Test Domain User Dynamic Pack Checks for Subnets that have not been defined in the AD Site and Services. Test checks all domain controllers.
AD Forest Health Checks AD Site Not In Site Link Test Domain User Dynamic Pack Checks to see how many AD Sites have not been defined in a Site Link.
AD Forest Health Checks AD Site Bridgehead Servers Test Domain User Dynamic Pack Checks manually and automatically configured Bridgehead Servers for each site.
AD Forest Health Checks AD Site Link Topology Test Domain User Dynamic Pack Checks to see how many sites are present in an AD Site Link. Test report includes if there are three or more sites in a Site Link.
AD Forest Health Checks AD Site Replication Interval Test Domain User Dynamic Pack Checks Replication Interval defined for each site and report sites that have larger replication interval configured.
AD Forest Health Checks AD Site Without Domain Controllers Test Domain User Dynamic Pack Checks how many AD Sites do not have a domain controller.
AD Forest Health Checks AD Site Without Subnets Test Domain User Dynamic Pack Check to make sure each Site has at least one Subnet associated with it.
AD Forest Health Checks AD Site Redundancy Test Domain User Dynamic Pack Checks to make sure each Active Directory Site has at least two domain controllers.
AD Forest Health Checks AD Site Redundant Connections Test Domain User Dynamic Pack Checks to make sure each Active Directory site has at least two Replication Connection Objects created.
AD Forest Health Checks AD Site Service Records Test Domain User Dynamic Pack Ensures Site specific records for each AD Site are registered in the DNS Server.
AD Forest Health Checks AD Site Port Test Domain User Dynamic Pack checks AD port status between all AD sites. Requires PortQry to be installed on AD Health Profiler computer.
AD Forest Health Checks AD Site Latency Test Domain User Dynamic Pack tests Network Latency between all AD sites.
AD Forest Health Checks AD Replication Summary Domain User Dynamic Pack reports result returned by the RepAdmin command.
AD Forest Health Checks AD Forest Orphaned Domain Controllers Domain User Dynamic Pack checks how many servers in each AD Site do not have NTDS Object.
AD Forest Health Checks AD FSMO Placement Test Domain User Dynamic Pack checks how Flexible Single Master Operation Roles are hosted in AD Forest for all domains.
AD Forest Health Checks AD Site Without Global Catalog Test Domain User Dynamic Pack checks to make sure each site has a Global Catalog Server available.
AD Forest Health Checks AD Forest and Domain Functional Level Test Domain User Dynamic Pack checks current AD Forest and Domain functional levels.
AD Forest Health Checks AD Forest TombstoneLifetime Test Domain User Dynamic Pack checks to make sure  tombstoneLifetime  is set to 180 days.
AD Forest Health Checks AD Domain Controller Redundancy test Domain User Dynamic Pack checks to make sure each domain has at least two domain controllers.
AD Domain Controller Health Checks Domain Controller Local Disks Test Domain User Dynamic Pack checks disk space on local drives and ensure domain controllers have enough space. Failure is reported for domain controllers that have less than 10 GB of free disk space available.
AD Domain Controller Health Checks Domain Controllers DCDiag Test Domain User Dynamic Pack collects DCDiag results from each domain controller and analyze.
AD Domain Controller Health Checks Domain Controller Up Time Test Domain User Dynamic Pack executes to check Up Time for all domain controllers and report failure if any of the domain controllers have not been rebooted since last 30 days.
AD Domain Controller Health Checks Domain Controller Performance Test Domain User Dynamic Pack checks performance of each domain controller and report status.
AD Domain Controller Health Checks Domain Controller Missing All Updates Test Domain User Dynamic Pack checks for missing security updates on each domain controller.
AD Domain Controller Health Checks Domain Controller OS Test Domain User Dynamic Pack checks OS Version; Service Pack level and hot fixes.
AD Domain Controller Health Checks Domain Controller DNS Configuration Test Domain User Dynamic Pack checks how DNS Servers settings are configured in TCP/IP on each Domain Controller.
AD Domain Controller Health Checks Domain Controller TCP/IP Configuration Test Domain User Dynamic Pack checks Network card properties and ensure register this connection's DNS Address is enabled on NIC.
AD Domain Controller Health Checks Domain Controller Multihomed Test Domain User Dynamic Pack checks to make sure Domain Controller is not configured with multiple Network Cards to avoid multihomed DC issue.
AD Domain Controller Health Checks Domain Controller SRV Records Test Domain User Dynamic Pack checks to make sure SRV Records for each domain controller is registered in the DNS Server.
AD Domain Controller Health Checks Domain Controller CNAME Records Test Domain User Dynamic Pack checks to make sure CNAME records for domain controllers are registered in the DNS Server.
AD Domain Controller Health Checks Domain Controller A/AAAA Records Test Domain User Dynamic Pack checks to make sure A Records are registered for domain controllers in the DNS Server.
AD Domain Controller Health Checks Domain Controller DNS Resolver Test Domain User Dynamic Pack checks to make sure Domain Controller can register required resource records dynamically.
AD Domain Controller Health Checks Domain Controller OU Location Test Domain User Dynamic Pack checks to make sure each Domain Controller is located in its default OU and Domain Controller GPO is applying successfully.
AD Domain Users Health Checks Domain Users Disabled Test Domain User Dynamic Pack gets disabled user accounts in each AD Domain. Test is considered failed if more than 100 stale user accounts are found.
AD Domain Users Health Checks Domain Users Account Expired Test Domain User Dynamic Pack collects user accounts expired in each domain.
AD Domain Users Health Checks Domain Users Password Never Expire Test Domain User Dynamic Pack collects Password Never Expire users in each domain.
AD Domain Users Health Checks Domain Users Accounts Locked Out Test Domain User Dynamic Pack collects Locked Out User accounts in each domain.
AD Domain Security Groups Health Checks Domain Security Groups with No Members Test Domain User Dynamic Pack collects Security Groups without members in each domain.
AD Domain OUs Health Checks Domain OU with No GPO Linked Test Domain User Dynamic Pack collects Ous which have not been linked to any GPOs. Dynamic Pack is executed against each domain.
AD Domain OUs Health Checks Domain OU Empty Test Domain User Dynamic Pack collects Ous which do not hold any Active Directory Objects. Dynamic Pack is executed against each domain.
AD Domain Users Health Checks Domain Users Stale Accounts Test Domain User Dynamic Pack collects Stale User accounts in each domain.
AD Domain GPO Health Checks Domain GPO Modification Frequency Test Domain User Dynamic Pack checks how frequently GPOs are being modified in each domain.
AD Domain GPO Health Checks Domain GPO Backup Test Domain User Dynamic Pack checks to make sure a recent GPO backup has been taken.
AD Domain GPO Health Checks Domain GPO Disabled Test Domain User Dynamic Pack returns the list of GPOs that are disabled.
AD Domain GPO Health Checks Domain GPO WMI Filters Test Domain User Dynamic Pack returns the list of GPOs that have been configured with WMI Filters.
AD Domain GPO Health Checks Domain GPO Description Test Domain User Dynamic Pack checks to see if any GPO is not configured with description text.
AD Domain GPO Health Checks Domain GPO Not Applied Test Domain User Dynamic Pack checks GPOs that are configured in the domain but are not applying to any objects.
AD Domain GPO Health Checks Domain GPO Naming Test Domain User Dynamic Pack checks to see how GPOs are named in the domain.
AD Domain GPO Health Checks Domain GPOs Block Inheritance Test Domain User Dynamic Pack is used to collect list of GPOs that have Block Inheritence enabled. Test reports list of GPOs if high number of GPOs using Block Inheritenace is found.
AD Domain Controller Health Checks Domain Controller Recent Updates Test Domain User Dynamic Pack checks if any domain controller was patched within 45 days and provide last date of patching.
AD Domain Controller Health Checks Domain Controller Updates Level Test Domain User Dynamic Packs check if domain controllers are running with same Patch Level or not.
AD Domain Controller Health Checks Domain Controller Event Log Test Domain User Dynamic Pack checks Number of Errors and Warnings logged in event logs of domain controllers. Dynamic Pack uses DCLogs.DPC file to know the Event Log to be checked. Specify one Event Log per line.
AD Domain Controller Health Checks Domain Controller Services Status Test Domain User Dynamic Pack executes to check all domain controller services and their status. Reports failure if any of the service is not running or malfunctioning. Dynamic Pack uses DCServices.DPC file for services to be queried. Please specify one service short name per line.
AD Domain Controller Health Checks Domain Controller Custom Missing Updates Test Domain User Dynamic Pack checks missing updates on Domain Controllers. You need to provide a list of updates that will be checked on each domain controller in CustomUpdates.DPC file. Please provide update KB number per line such as KB7645656.
AD DNS Health Checks DNS Forwarders Test Domain User Dynamic Pack Checks to make sure DNS Servers are configured with proper Forwarders.
AD DNS Health Checks DNS Root Hints Test Domain User Dynamic Pack checks to make sure DNS Servers are configured with proper root hints
AD DNS Health Checks DNS Round Robin Test Domain User Dynamic Pack checks to make sure DNS Round Robin is enabled on DNS Servers in order to load balance authentication traffic coming from client computers.
AD DNS Health Checks DNS Name Servers Test Domain User Dynamic Pack checks to make sure Name Servers are configured properly on each DNS Server.
AD Domain Zone Health Checks AD Domain Zone Secure Test Domain User Dynamic Pack checks Zone secure status.
AD Domain Zone Health Checks AD Domain Zone Integration Test Domain User Dynamic Pack checks Zone integration status.
AD Domain Zone Health Checks AD Domain Zone Scavenging Test Domain User Dynamic Pack checks to make sure DNS Scavenging is enabled on each Zone.
AD Domain Zone Health Checks AD Domain Zone Static Records Test Domain User Dynamic Pack checks static records created in the DNS Zones and report.
AD Forest Time Synchronization Health Checks AD Root PDC Time Configuration Test Domain User Dynamic Pack checks to make sure root PDC is configured to sync time from an external NTP Server and all required registry entries are set correctly.
AD Forest Time Synchronization Health Checks AD Domain PDC Time Configuration Test Domain User Dynamic Pack checks to make sure domain PDCs are conifgured to sync time from Root PDC and all required registry entries are set correctly.
AD Forest Time Synchronization Health Checks AD Domain Controller Time Configuration Test Domain User Dynamic Pack checks to make sure Domain controllers are configured to sync time from Domain PDCs and all required registry entries are set correctly.

Microsoft Hyper-V Dynamic Packs

Number Of Dynamic Packs : None

Assessment Target: Microsoft Hyper-V

Reported Severity: Critical, High, Medium, Low and Passed

CATEGORY DYNAMIC PACK CREDENTIAL NEEDED DESCRIPTION
Hyper-V Virtual Machines Hyper-V Virtual Machine Integration Services Test Domain User Dynamic Pack checks Integration Services status on all virtual machines.
Hyper-V Hosts Hyper-V Host Configuration Test Domain User Dynamic Pack checks Hyper-V host configuration.
Hyper-V Virtual Machines Hyper-V Virtual Machine Version Test Domain User Dynamic Pack checks Virtual Machine Version.
Hyper-V Virtual Machines Hyper-V Virtual Machine Uptime Test Domain User Checks uptime for Virtual Machines.
Hyper-V Virtual Machines Hyper-V Virtual Machine Running Test Domain User Checks to ensure Virtual Machines are operating normally and have no issues.
Hyper-V Virtual Machines Hyper-V Virtual Machine Clustering Test Domain User Checks if any of the virtual machines is not configured for clustering.
Hyper-V Virtual Machines Hyper-V Virtual Machine Status Test Domain User Checks virtual machine status
Hyper-V Virtual Machines Hyper-V Virtual Machine RDP Test Domain User Checks RDP status for all virtual machines.
Hyper-V Virtual Machines Hyper-V Virtual Machine Memory Test Domain User Dynamic Pack performs memory test for all virtual machines and report if any virtual machine is running low on memory.

Microsoft Exchange Server Dynamic Packs

Number Of Dynamic Packs : 20

Assessment Target: Microsoft Exchange Server

Reported Severity: Critical, High, Medium, Low and Passed

CATEGORY DYNAMIC PACK CREDENTIAL NEEDED DESCRIPTION
Exchange Server Host Exchange Server Host Health Status Test Domain User Dynamic Pack performs memory test for all virtual machines and report if any virtual machine is running low on memory.
Exchange Server Host Exchange Server OS and Service Pack Test Domain User Dynamic Pack performs memory test for all virtual machines and report if any virtual machine is running low on memory.
Exchange Server Host Exchange Server Host Health Status Test Domain User Dynamic Pack performs memory test for all virtual machines and report if any virtual machine is running low on memory.
Exchange Server Host Exchange Server Host Health Status Test Domain User Dynamic Pack performs memory test for all virtual machines and report if any virtual machine is running low on memory.
Exchange Server Host Exchange Server Host Roles Test Domain User Dynamic Pack performs memory test for all virtual machines and report if any virtual machine is running low on memory.
Exchange Database Exchange Server Database Availability Test Domain User Dynamic Pack performs memory test for all virtual machines and report if any virtual machine is running low on memory.
Exchange Server Backup Exchange Server Host Backup Test Domain User Dynamic Pack performs memory test for all virtual machines and report if any virtual machine is running low on memory.
Exchange Database Exchange Server Database Size and WhiteSpace Test Domain User Dynamic Pack performs memory test for all virtual machines and report if any virtual machine is running low on memory.
Exchange Server Host Exchange Server Message Latency Test Domain User Dynamic Pack performs memory test for all virtual machines and report if any virtual machine is running low on memory.
Exchange Server Host Exchange Server Mail Queue Test Domain User Dynamic Pack performs memory test for all virtual machines and report if any virtual machine is running low on memory.
Exchange Database Exchange Server Database Mount Status Domain User Dynamic Pack performs memory test for all virtual machines and report if any virtual machine is running low on memory.

Microsoft Office 365 and Azure Dynamic Packs

Number Of Dynamic Packs : 20

Assessment Target: Microsoft Office 365 and Azure

Reported Severity: Critical, High, Medium, Low and Passed

CATEGORY DYNAMIC PACK CREDENTIAL NEEDED DESCRIPTION
Azure Users Azure Users Licensing Test Azure User Dynamic Pack can be used to collect user licenses from Office 365 and check how many users require licenses.
Azure Storage Azure Storage Accounts Performance Test Azure User Dynamic Pack can check Azure Storage Accounts performance.
Azure Users Azure Services Dashboard Azure User Dynamic Pack provides an Azure Services Dashboard.
Azure Users Azure Virtual Machine Test Azure User Dynamic Pack is used to check virtual machines status in each Resource Group.
Azure Users Office 365 MailBox Last Logon Test Azure User Dynamic Pack can be used to check Mailbox Last Logon time provides a report on users who have been inactive.
Azure Users Office 365 Mailbox Statistics Test Azure User Dynamic Pack provides Mailbox report.
Azure Users Azure Users Deleted Test Azure User Checks how many users have been deleted recently.
Azure Users Azure Users Disabled Test Azure User Dynamic Pack can be used to check how many users are disabled in Azure
Azure Users Azure Users Reconciliation Test Azure User Checks to see if any users require License Reconciliation
Azure Users Office 365 User Roles Test Azure User Checks to make sure Office 365 User Roles do not contain more than 10 members in each.
Azure Users Azure Users Not In Group Test Azure User Dynamic Pack can be used to check users which are not part of any Groups in Office 365.
Azure Users Azure Users Password Never Expires Test Azure User Dynamic Pack can be used to check how many users have been set their password not to expire.
Azure Users Azure Users Weak Password Allowed Test Azure User Checks weak password for Azure accounts.
Azure Users Azure Users Password Not Changed Test Azure User Checks how many Azure Users have not changed their password.
Azure Users Azure Users Password Never Changes Test Azure User Checks how many Azure users have set their password to Never Expire.
Azure Users Azure Users Sync Test Domain User Dynamic Pack can be used to check Azure Synchronization status.
Azure Users Azure MFA Test Domain User This Dynamic Pack can be used to check MFA enabled users and how many users are enforced.

Microsoft System Center Dynamic Packs

Number Of Dynamic Packs : 0

Assessment Target: Microsoft Active Directory Forest

Reported Severity: Critical, High, Medium, Low and Passed

Microsoft SQL Server Dynamic Packs

Number Of Dynamic Packs : 13

Assessment Target: Microsoft SQL Server

Reported Severity: Critical, High, Medium, Low and Passed

CATEGORY DYNAMIC PACK CREDENTIAL NEEDED DESCRIPTION
SQL Server Host SQL Server Backup Test Domain User NA
SQL Server Host SQL Server OS and Service Pack Test Domain User NA
SQL Server Host SQL Server Backup Test Domain User NA
SQL Server Host SQL Server Services and Instances Test Domain User NA
SQL Database SQL Server Database Backup Test Domain User NA
SQL Server Host SQL Server Free Space Test Domain User NA
SQL Server Host SQL Server Configuration Test Domain User NA
SQL Server Host SQL Server User Database Test Domain User NA
SQL Server Host SQL Server Systems Database Test Domain User NA

Microsoft EcoSystem Dynamic Packs

Number Of Dynamic Packs : 0

Assessment Target: Other Microsoft Technologies

Reported Severity: Critical, High, Medium, Low and Passed

Other EcoSystem Dynamic Packs

Number Of Dynamic Packs : 0

Assessment Target: Other Technologies

Reported Severity: Critical, High, Medium, Low and Passed

Schedule a Demo