A Dynamic Pack consists of PowerShell code. Dynamic Packs can be used to perform Health Check, collect information, and maintain health of the target. All of our Dynamic Packs have been written by industry experts such as Microsoft MVPs and IT experts. We are in the process of designing more Dynamic Packs. The Health Check Dynamic Packs are used for reporting issues, severity and recommendations to fix the issues. Health Check Dynamic Packs can be used only with the O365 IT Risk & Health Scanner product. All of the Dynamic Packs designed by us follow vendor recommendations and best practices.
O365 IT Risk & Health Scanner Execution SubSystem supports importing Dynamic Packs from Dynamic Packs Server or file. Once new Dynamic Packs are available you can import them using O365 IT Risk & Health Scanner Import Packs section. If you have designed a Dynamic Pack that you would like to import into the O365 IT Risk & Health Scanner.
If you wish to modify any of the Dynamic Packs to include your own comment, change severity and so on you can do so by using the Dynamic Packs Manager. Dynamic Packs Manager also allows you to create new Dynamic Packs and import into Scanner.
Using Dynamic Packs Manager you can create your own Dynamic Packs bundle which includes specific checks that you would like to reuse for your customers. Packs Manager allows creation of multiple Dynamic Packs bundle.
You can request Dynamic Pack of your choice. Once the Dynamic Pack is available you will be able to import from within the O365 IT Health & Risk Scanner Console.
Number Of Dynamic Packs : 74
Assessment Target: Microsoft Active Directory Forest
Reported Severity: Critical, High, Medium, Low and Passed
| CATEGORY | DYNAMIC PACK | CREDENTIAL NEEDED | DESCRIPTION |
|---|---|---|---|
| AD Domain Computers Health Checks | Domain Computers Operating Systems Test | Domain User | Dynamic Pack checks to see how many Windows XP and Windows 7 and other OSes are there in each domain. |
| AD Domain Security Groups Health Checks | Domain Duplicate Security Groups Test | Domain User | Dynamic Pack collects duplicate security groups in each domain. |
| AD Domain GPO Health Checks | Domain GPOs No Override Test | Domain User | Dynamic Pack cheks to see how many GPOs have been configured with No Override options. Dynamic Pack is executed against each domain. |
| AD Domain Computers Health Checks | Domain Computers Disabled Test | Domain User | Dynamic Pack gets disabled computer accounts in each AD Domain. Test is considered failed if more than 100 disabled computers are found in a domain. |
| AD Domain Computers Health Checks | Domain Computers Stale Accounts Test | Domain User | Dynamic Pack gets stale computer accounts in each AD Domain. Test is considered failed if more than 100 stale computer accounts are found in a domain. |
| AD Forest Health Checks | AD Partitions Backup Test | Domain User | Dynamic Pack is used to check if any backups have been performed for AD Partitions. |
| AD Forest Health Checks | AD Forest ISTG Test | Domain User | Dynamic Pack Checks to see if an ISTG role is defined in each Active Directory Site. Test reports failure if no ISTG is found in an Active Directory Site. |
| AD Forest Health Checks | AD Forest Replication Test | Domain User | Dynamic Pack Checks Active Directory Forest Replication status. |
| AD Forest Health Checks | AD Manual Replication Connection Objects Test | Domain User | Dynamic Pack Checks Manual Replication Connection Objects created in Active Directory Forest. |
| AD Forest Health Checks | AD Forest Orphaned ISTG Test | Domain User | Dynamic Pack Reports Orphaned ISTG in Active Directory forest. |
| AD Forest Health Checks | AD Duplicate Site Links Test | Domain User | Dynamic Pack Checks to see how many AD Sites are configured in more than one Site Link. |
| AD Forest Health Checks | AD Site Location Test | Domain User | Dynamic Pack Checks if each AD Site has location text defined. |
| AD Forest Health Checks | AD Adjacent Site Test | Domain User | Dynamic Pack checks to what sites are Adjacent sites configured for each AD Site. |
| AD Forest Health Checks | AD Site Undefined Subnets Test | Domain User | Dynamic Pack Checks for Subnets that have not been defined in the AD Site and Services. Test checks all domain controllers. |
| AD Forest Health Checks | AD Site Not In Site Link Test | Domain User | Dynamic Pack Checks to see how many AD Sites have not been defined in a Site Link. |
| AD Forest Health Checks | AD Site Bridgehead Servers Test | Domain User | Dynamic Pack Checks manually and automatically configured Bridgehead Servers for each site. |
| AD Forest Health Checks | AD Site Link Topology Test | Domain User | Dynamic Pack Checks to see how many sites are present in an AD Site Link. Test report includes if there are three or more sites in a Site Link. |
| AD Forest Health Checks | AD Site Replication Interval Test | Domain User | Dynamic Pack Checks Replication Interval defined for each site and report sites that have larger replication interval configured. |
| AD Forest Health Checks | AD Site Without Domain Controllers Test | Domain User | Dynamic Pack Checks how many AD Sites do not have a domain controller. |
| AD Forest Health Checks | AD Site Without Subnets Test | Domain User | Dynamic Pack Check to make sure each Site has at least one Subnet associated with it. |
| AD Forest Health Checks | AD Site Redundancy Test | Domain User | Dynamic Pack Checks to make sure each Active Directory Site has at least two domain controllers. |
| AD Forest Health Checks | AD Site Redundant Connections Test | Domain User | Dynamic Pack Checks to make sure each Active Directory site has at least two Replication Connection Objects created. |
| AD Forest Health Checks | AD Site Service Records Test | Domain User | Dynamic Pack Ensures Site specific records for each AD Site are registered in the DNS Server. |
| AD Forest Health Checks | AD Site Port Test | Domain User | Dynamic Pack checks AD port status between all AD sites. Requires PortQry to be installed on AD Health Profiler computer. |
| AD Forest Health Checks | AD Site Latency Test | Domain User | Dynamic Pack tests Network Latency between all AD sites. |
| AD Forest Health Checks | AD Replication Summary | Domain User | Dynamic Pack reports result returned by the RepAdmin command. |
| AD Forest Health Checks | AD Forest Orphaned Domain Controllers | Domain User | Dynamic Pack checks how many servers in each AD Site do not have NTDS Object. |
| AD Forest Health Checks | AD FSMO Placement Test | Domain User | Dynamic Pack checks how Flexible Single Master Operation Roles are hosted in AD Forest for all domains. |
| AD Forest Health Checks | AD Site Without Global Catalog Test | Domain User | Dynamic Pack checks to make sure each site has a Global Catalog Server available. |
| AD Forest Health Checks | AD Forest and Domain Functional Level Test | Domain User | Dynamic Pack checks current AD Forest and Domain functional levels. |
| AD Forest Health Checks | AD Forest TombstoneLifetime Test | Domain User | Dynamic Pack checks to make sure tombstoneLifetime is set to 180 days. |
| AD Forest Health Checks | AD Domain Controller Redundancy test | Domain User | Dynamic Pack checks to make sure each domain has at least two domain controllers. |
| AD Domain Controller Health Checks | Domain Controller Local Disks Test | Domain User | Dynamic Pack checks disk space on local drives and ensure domain controllers have enough space. Failure is reported for domain controllers that have less than 10 GB of free disk space available. |
| AD Domain Controller Health Checks | Domain Controllers DCDiag Test | Domain User | Dynamic Pack collects DCDiag results from each domain controller and analyze. |
| AD Domain Controller Health Checks | Domain Controller Up Time Test | Domain User | Dynamic Pack executes to check Up Time for all domain controllers and report failure if any of the domain controllers have not been rebooted since last 30 days. |
| AD Domain Controller Health Checks | Domain Controller Performance Test | Domain User | Dynamic Pack checks performance of each domain controller and report status. |
| AD Domain Controller Health Checks | Domain Controller Missing All Updates Test | Domain User | Dynamic Pack checks for missing security updates on each domain controller. |
| AD Domain Controller Health Checks | Domain Controller OS Test | Domain User | Dynamic Pack checks OS Version; Service Pack level and hot fixes. |
| AD Domain Controller Health Checks | Domain Controller DNS Configuration Test | Domain User | Dynamic Pack checks how DNS Servers settings are configured in TCP/IP on each Domain Controller. |
| AD Domain Controller Health Checks | Domain Controller TCP/IP Configuration Test | Domain User | Dynamic Pack checks Network card properties and ensure register this connection’s DNS Address is enabled on NIC. |
| AD Domain Controller Health Checks | Domain Controller Multihomed Test | Domain User | Dynamic Pack checks to make sure Domain Controller is not configured with multiple Network Cards to avoid multihomed DC issue. |
| AD Domain Controller Health Checks | Domain Controller SRV Records Test | Domain User | Dynamic Pack checks to make sure SRV Records for each domain controller is registered in the DNS Server. |
| AD Domain Controller Health Checks | Domain Controller CNAME Records Test | Domain User | Dynamic Pack checks to make sure CNAME records for domain controllers are registered in the DNS Server. |
| AD Domain Controller Health Checks | Domain Controller A/AAAA Records Test | Domain User | Dynamic Pack checks to make sure A Records are registered for domain controllers in the DNS Server. |
| AD Domain Controller Health Checks | Domain Controller DNS Resolver Test | Domain User | Dynamic Pack checks to make sure Domain Controller can register required resource records dynamically. |
| AD Domain Controller Health Checks | Domain Controller OU Location Test | Domain User | Dynamic Pack checks to make sure each Domain Controller is located in its default OU and Domain Controller GPO is applying successfully. |
| AD Domain Users Health Checks | Domain Users Disabled Test | Domain User | Dynamic Pack gets disabled user accounts in each AD Domain. Test is considered failed if more than 100 stale user accounts are found. |
| AD Domain Users Health Checks | Domain Users Account Expired Test | Domain User | Dynamic Pack collects user accounts expired in each domain. |
| AD Domain Users Health Checks | Domain Users Password Never Expire Test | Domain User | Dynamic Pack collects Password Never Expire users in each domain. |
| AD Domain Users Health Checks | Domain Users Accounts Locked Out Test | Domain User | Dynamic Pack collects Locked Out User accounts in each domain. |
| AD Domain Security Groups Health Checks | Domain Security Groups with No Members Test | Domain User | Dynamic Pack collects Security Groups without members in each domain. |
| AD Domain OUs Health Checks | Domain OU with No GPO Linked Test | Domain User | Dynamic Pack collects Ous which have not been linked to any GPOs. Dynamic Pack is executed against each domain. |
| AD Domain OUs Health Checks | Domain OU Empty Test | Domain User | Dynamic Pack collects Ous which do not hold any Active Directory Objects. Dynamic Pack is executed against each domain. |
| AD Domain Users Health Checks | Domain Users Stale Accounts Test | Domain User | Dynamic Pack collects Stale User accounts in each domain. |
| AD Domain GPO Health Checks | Domain GPO Modification Frequency Test | Domain User | Dynamic Pack checks how frequently GPOs are being modified in each domain. |
| AD Domain GPO Health Checks | Domain GPO Backup Test | Domain User | Dynamic Pack checks to make sure a recent GPO backup has been taken. |
| AD Domain GPO Health Checks | Domain GPO Disabled Test | Domain User | Dynamic Pack returns the list of GPOs that are disabled. |
| AD Domain GPO Health Checks | Domain GPO WMI Filters Test | Domain User | Dynamic Pack returns the list of GPOs that have been configured with WMI Filters. |
| AD Domain GPO Health Checks | Domain GPO Description Test | Domain User | Dynamic Pack checks to see if any GPO is not configured with description text. |
| AD Domain GPO Health Checks | Domain GPO Not Applied Test | Domain User | Dynamic Pack checks GPOs that are configured in the domain but are not applying to any objects. |
| AD Domain GPO Health Checks | Domain GPO Naming Test | Domain User | Dynamic Pack checks to see how GPOs are named in the domain. |
| AD Domain GPO Health Checks | Domain GPOs Block Inheritance Test | Domain User | Dynamic Pack is used to collect list of GPOs that have Block Inheritence enabled. Test reports list of GPOs if high number of GPOs using Block Inheritenace is found. |
| AD Domain Controller Health Checks | Domain Controller Recent Updates Test | Domain User | Dynamic Pack checks if any domain controller was patched within 45 days and provide last date of patching. |
| AD Domain Controller Health Checks | Domain Controller Updates Level Test | Domain User | Dynamic Packs check if domain controllers are running with same Patch Level or not. |
| AD Domain Controller Health Checks | Domain Controller Event Log Test | Domain User | Dynamic Pack checks Number of Errors and Warnings logged in event logs of domain controllers. Dynamic Pack uses DCLogs.DPC file to know the Event Log to be checked. Specify one Event Log per line. |
| AD Domain Controller Health Checks | Domain Controller Services Status Test | Domain User | Dynamic Pack executes to check all domain controller services and their status. Reports failure if any of the service is not running or malfunctioning. Dynamic Pack uses DCServices.DPC file for services to be queried. Please specify one service short name per line. |
| AD Domain Controller Health Checks | Domain Controller Custom Missing Updates Test | Domain User | Dynamic Pack checks missing updates on Domain Controllers. You need to provide a list of updates that will be checked on each domain controller in CustomUpdates.DPC file. Please provide update KB number per line such as KB7645656. |
| AD DNS Health Checks | DNS Forwarders Test | Domain User | Dynamic Pack Checks to make sure DNS Servers are configured with proper Forwarders. |
| AD DNS Health Checks | DNS Root Hints Test | Domain User | Dynamic Pack checks to make sure DNS Servers are configured with proper root hints |
| AD DNS Health Checks | DNS Round Robin Test | Domain User | Dynamic Pack checks to make sure DNS Round Robin is enabled on DNS Servers in order to load balance authentication traffic coming from client computers. |
| AD DNS Health Checks | DNS Name Servers Test | Domain User | Dynamic Pack checks to make sure Name Servers are configured properly on each DNS Server. |
| AD Domain Zone Health Checks | AD Domain Zone Secure Test | Domain User | Dynamic Pack checks Zone secure status. |
| AD Domain Zone Health Checks | AD Domain Zone Integration Test | Domain User | Dynamic Pack checks Zone integration status. |
| AD Domain Zone Health Checks | AD Domain Zone Scavenging Test | Domain User | Dynamic Pack checks to make sure DNS Scavenging is enabled on each Zone. |
| AD Domain Zone Health Checks | AD Domain Zone Static Records Test | Domain User | Dynamic Pack checks static records created in the DNS Zones and report. |
| AD Forest Time Synchronization Health Checks | AD Root PDC Time Configuration Test | Domain User | Dynamic Pack checks to make sure root PDC is configured to sync time from an external NTP Server and all required registry entries are set correctly. |
| AD Forest Time Synchronization Health Checks | AD Domain PDC Time Configuration Test | Domain User | Dynamic Pack checks to make sure domain PDCs are conifgured to sync time from Root PDC and all required registry entries are set correctly. |
| AD Forest Time Synchronization Health Checks | AD Domain Controller Time Configuration Test | Domain User | Dynamic Pack checks to make sure Domain controllers are configured to sync time from Domain PDCs and all required registry entries are set correctly. |
Number Of Dynamic Packs : 20
Assessment Target: Microsoft Office 365 and Azure
Reported Severity: Critical, High, Medium, Low and Passed
| CATEGORY | DYNAMIC PACK | CREDENTIAL NEEDED | DESCRIPTION |
|---|---|---|---|
| Azure Users | Azure Users Licensing Test | Azure User | Dynamic Pack can be used to collect user licenses from Office 365 and check how many users require licenses. |
| Azure Storage | Azure Storage Accounts Performance Test | Azure User | Dynamic Pack can check Azure Storage Accounts performance. |
| Azure Users | Azure Services Dashboard | Azure User | Dynamic Pack provides an Azure Services Dashboard. |
| Azure Users | Azure Virtual Machine Test | Azure User | Dynamic Pack is used to check virtual machines status in each Resource Group. |
| Azure Users | Office 365 MailBox Last Logon Test | Azure User | Dynamic Pack can be used to check Mailbox Last Logon time provides a report on users who have been inactive. |
| Azure Users | Office 365 Mailbox Statistics Test | Azure User | Dynamic Pack provides Mailbox report. |
| Azure Users | Azure Users Deleted Test | Azure User | Checks how many users have been deleted recently. |
| Azure Users | Azure Users Disabled Test | Azure User | Dynamic Pack can be used to check how many users are disabled in Azure |
| Azure Users | Azure Users Reconciliation Test | Azure User | Checks to see if any users require License Reconciliation |
| Azure Users | Office 365 User Roles Test | Azure User | Checks to make sure Office 365 User Roles do not contain more than 10 members in each. |
| Azure Users | Azure Users Not In Group Test | Azure User | Dynamic Pack can be used to check users which are not part of any Groups in Office 365. |
| Azure Users | Azure Users Password Never Expires Test | Azure User | Dynamic Pack can be used to check how many users have been set their password not to expire. |
| Azure Users | Azure Users Weak Password Allowed Test | Azure User | Checks weak password for Azure accounts. |
| Azure Users | Azure Users Password Not Changed Test | Azure User | Checks how many Azure Users have not changed their password. |
| Azure Users | Azure Users Password Never Changes Test | Azure User | Checks how many Azure users have set their password to Never Expire. |
| Azure Users | Azure Users Sync Test | Domain User | Dynamic Pack can be used to check Azure Synchronization status. |
| Azure Users | Azure MFA Test | Domain User | This Dynamic Pack can be used to check MFA enabled users and how many users are enforced. |
Number Of Dynamic Packs : None
Assessment Target: Microsoft Hyper-V
Reported Severity: Critical, High, Medium, Low and Passed
| CATEGORY | DYNAMIC PACK | CREDENTIAL NEEDED | DESCRIPTION |
|---|---|---|---|
| Hyper-V Virtual Machines | Hyper-V Virtual Machine Integration Services Test | Domain User | Dynamic Pack checks Integration Services status on all virtual machines. |
| Hyper-V Hosts | Hyper-V Host Configuration Test | Domain User | Dynamic Pack checks Hyper-V host configuration. |
| Hyper-V Virtual Machines | Hyper-V Virtual Machine Version Test | Domain User | Dynamic Pack checks Virtual Machine Version. |
| Hyper-V Virtual Machines | Hyper-V Virtual Machine Uptime Test | Domain User | Checks uptime for Virtual Machines. |
| Hyper-V Virtual Machines | Hyper-V Virtual Machine Running Test | Domain User | Checks to ensure Virtual Machines are operating normally and have no issues. |
| Hyper-V Virtual Machines | Hyper-V Virtual Machine Clustering Test | Domain User | Checks if any of the virtual machines is not configured for clustering. |
| Hyper-V Virtual Machines | Hyper-V Virtual Machine Status Test | Domain User | Checks virtual machine status |
| Hyper-V Virtual Machines | Hyper-V Virtual Machine RDP Test | Domain User | Checks RDP status for all virtual machines. |
| Hyper-V Virtual Machines | Hyper-V Virtual Machine Memory Test | Domain User | Dynamic Pack performs memory test for all virtual machines and report if any virtual machine is running low on memory. |
Not Available
Not Available
Not Available
Not Available
Schedule a Demo