PowerShell-based Dynamic Packs

O365 IT Risk & Health Scanner Execution SubSystem leverages PowerShell-based Dynamic Packs.

About Dynamic Pack

A Dynamic Pack consists of PowerShell code. Dynamic Packs can be used to perform Health Check, collect information, and maintain health of the target. All of our Dynamic Packs have been written by industry experts such as Microsoft MVPs and IT experts. We are in the process of designing more Dynamic Packs. The Health Check Dynamic Packs are used for reporting issues, severity and recommendations to fix the issues. Health Check Dynamic Packs can be used only with the O365 IT Risk & Health Scanner product. All of the Dynamic Packs designed by us follow vendor recommendations and best practices.

Importing Dynamic Pack

O365 IT Risk & Health Scanner Execution SubSystem supports importing Dynamic Packs from Dynamic Packs Server or file. Once new Dynamic Packs are available you can import them using O365 IT Risk & Health Scanner Import Packs section. If you have designed a Dynamic Pack that you would like to import into the O365 IT Risk & Health Scanner.

Modifying Existing Dynamic Packs

If you wish to modify any of the Dynamic Packs to include your own comment, change severity and so on you can do so by using the Dynamic Packs Manager. Dynamic Packs Manager also allows you to create new Dynamic Packs and import into Scanner.

Create your Own Packs Bundle

Using Dynamic Packs Manager you can create your own Dynamic Packs bundle which includes specific checks that you would like to reuse for your customers. Packs Manager allows creation of multiple Dynamic Packs bundle.

Request Dynamic Pack

You can request Dynamic Pack of your choice. Once the Dynamic Pack is available you will be able to import from within the O365 IT Health & Risk Scanner Console.








Available Dynamic Packs

Here is a list of Dynamic Packs that ship with O365 IT Health & Risk Scanner V4.0. Our team is in the process of designing new Dynamic Packs for other technologies. New Dynamic Packs can be downloaded from Import Section from within the O365 IT Scanner.

Number Of Dynamic Packs : 74

Assessment Target: Microsoft Active Directory Forest

Reported Severity: Critical, High, Medium, Low and Passed

CATEGORYDYNAMIC PACKCREDENTIAL NEEDEDDESCRIPTION
AD Domain Computers Health ChecksDomain Computers Operating Systems TestDomain UserDynamic Pack checks to see how many Windows XP and Windows 7 and other OSes are there in each domain.
AD Domain Security Groups Health ChecksDomain Duplicate Security Groups TestDomain UserDynamic Pack collects duplicate security groups in each domain.
AD Domain GPO Health ChecksDomain GPOs No Override TestDomain UserDynamic Pack cheks to see how many GPOs have been configured with No Override options. Dynamic Pack is executed against each domain.
AD Domain Computers Health ChecksDomain Computers Disabled TestDomain UserDynamic Pack gets disabled computer accounts in each AD Domain. Test is considered failed if more than 100 disabled computers are found in a domain.
AD Domain Computers Health ChecksDomain Computers Stale Accounts TestDomain UserDynamic Pack gets stale computer accounts in each AD Domain. Test is considered failed if more than 100 stale computer accounts are found in a domain.
AD Forest Health ChecksAD Partitions Backup TestDomain UserDynamic Pack is used to check if any backups have been performed for AD Partitions.
AD Forest Health ChecksAD Forest ISTG TestDomain UserDynamic Pack Checks to see if an ISTG role is defined in each Active Directory Site. Test reports failure if no ISTG is found in an Active Directory Site.
AD Forest Health ChecksAD Forest Replication TestDomain UserDynamic Pack Checks Active Directory Forest Replication status.
AD Forest Health ChecksAD Manual Replication Connection Objects TestDomain UserDynamic Pack Checks Manual Replication Connection Objects created in Active Directory Forest.
AD Forest Health ChecksAD Forest Orphaned ISTG TestDomain UserDynamic Pack Reports Orphaned ISTG in Active Directory forest.
AD Forest Health ChecksAD Duplicate Site Links TestDomain UserDynamic Pack Checks to see how many AD Sites are configured in more than one Site Link.
AD Forest Health ChecksAD Site Location TestDomain UserDynamic Pack Checks if each AD Site has location text defined.
AD Forest Health ChecksAD Adjacent Site TestDomain UserDynamic Pack checks to what sites are Adjacent sites configured for each AD Site.
AD Forest Health ChecksAD Site Undefined Subnets TestDomain UserDynamic Pack Checks for Subnets that have not been defined in the AD Site and Services. Test checks all domain controllers.
AD Forest Health ChecksAD Site Not In Site Link TestDomain UserDynamic Pack Checks to see how many AD Sites have not been defined in a Site Link.
AD Forest Health ChecksAD Site Bridgehead Servers TestDomain UserDynamic Pack Checks manually and automatically configured Bridgehead Servers for each site.
AD Forest Health ChecksAD Site Link Topology TestDomain UserDynamic Pack Checks to see how many sites are present in an AD Site Link. Test report includes if there are three or more sites in a Site Link.
AD Forest Health ChecksAD Site Replication Interval TestDomain UserDynamic Pack Checks Replication Interval defined for each site and report sites that have larger replication interval configured.
AD Forest Health ChecksAD Site Without Domain Controllers TestDomain UserDynamic Pack Checks how many AD Sites do not have a domain controller.
AD Forest Health ChecksAD Site Without Subnets TestDomain UserDynamic Pack Check to make sure each Site has at least one Subnet associated with it.
AD Forest Health ChecksAD Site Redundancy TestDomain UserDynamic Pack Checks to make sure each Active Directory Site has at least two domain controllers.
AD Forest Health ChecksAD Site Redundant Connections TestDomain UserDynamic Pack Checks to make sure each Active Directory site has at least two Replication Connection Objects created.
AD Forest Health ChecksAD Site Service Records TestDomain UserDynamic Pack Ensures Site specific records for each AD Site are registered in the DNS Server.
AD Forest Health ChecksAD Site Port TestDomain UserDynamic Pack checks AD port status between all AD sites. Requires PortQry to be installed on AD Health Profiler computer.
AD Forest Health ChecksAD Site Latency TestDomain UserDynamic Pack tests Network Latency between all AD sites.
AD Forest Health ChecksAD Replication SummaryDomain UserDynamic Pack reports result returned by the RepAdmin command.
AD Forest Health ChecksAD Forest Orphaned Domain ControllersDomain UserDynamic Pack checks how many servers in each AD Site do not have NTDS Object.
AD Forest Health ChecksAD FSMO Placement TestDomain UserDynamic Pack checks how Flexible Single Master Operation Roles are hosted in AD Forest for all domains.
AD Forest Health ChecksAD Site Without Global Catalog TestDomain UserDynamic Pack checks to make sure each site has a Global Catalog Server available.
AD Forest Health ChecksAD Forest and Domain Functional Level TestDomain UserDynamic Pack checks current AD Forest and Domain functional levels.
AD Forest Health ChecksAD Forest TombstoneLifetime TestDomain UserDynamic Pack checks to make sure  tombstoneLifetime  is set to 180 days.
AD Forest Health ChecksAD Domain Controller Redundancy testDomain UserDynamic Pack checks to make sure each domain has at least two domain controllers.
AD Domain Controller Health ChecksDomain Controller Local Disks TestDomain UserDynamic Pack checks disk space on local drives and ensure domain controllers have enough space. Failure is reported for domain controllers that have less than 10 GB of free disk space available.
AD Domain Controller Health ChecksDomain Controllers DCDiag TestDomain UserDynamic Pack collects DCDiag results from each domain controller and analyze.
AD Domain Controller Health ChecksDomain Controller Up Time TestDomain UserDynamic Pack executes to check Up Time for all domain controllers and report failure if any of the domain controllers have not been rebooted since last 30 days.
AD Domain Controller Health ChecksDomain Controller Performance TestDomain UserDynamic Pack checks performance of each domain controller and report status.
AD Domain Controller Health ChecksDomain Controller Missing All Updates TestDomain UserDynamic Pack checks for missing security updates on each domain controller.
AD Domain Controller Health ChecksDomain Controller OS TestDomain UserDynamic Pack checks OS Version; Service Pack level and hot fixes.
AD Domain Controller Health ChecksDomain Controller DNS Configuration TestDomain UserDynamic Pack checks how DNS Servers settings are configured in TCP/IP on each Domain Controller.
AD Domain Controller Health ChecksDomain Controller TCP/IP Configuration TestDomain UserDynamic Pack checks Network card properties and ensure register this connection’s DNS Address is enabled on NIC.
AD Domain Controller Health ChecksDomain Controller Multihomed TestDomain UserDynamic Pack checks to make sure Domain Controller is not configured with multiple Network Cards to avoid multihomed DC issue.
AD Domain Controller Health ChecksDomain Controller SRV Records TestDomain UserDynamic Pack checks to make sure SRV Records for each domain controller is registered in the DNS Server.
AD Domain Controller Health ChecksDomain Controller CNAME Records TestDomain UserDynamic Pack checks to make sure CNAME records for domain controllers are registered in the DNS Server.
AD Domain Controller Health ChecksDomain Controller A/AAAA Records TestDomain UserDynamic Pack checks to make sure A Records are registered for domain controllers in the DNS Server.
AD Domain Controller Health ChecksDomain Controller DNS Resolver TestDomain UserDynamic Pack checks to make sure Domain Controller can register required resource records dynamically.
AD Domain Controller Health ChecksDomain Controller OU Location TestDomain UserDynamic Pack checks to make sure each Domain Controller is located in its default OU and Domain Controller GPO is applying successfully.
AD Domain Users Health ChecksDomain Users Disabled TestDomain UserDynamic Pack gets disabled user accounts in each AD Domain. Test is considered failed if more than 100 stale user accounts are found.
AD Domain Users Health ChecksDomain Users Account Expired TestDomain UserDynamic Pack collects user accounts expired in each domain.
AD Domain Users Health ChecksDomain Users Password Never Expire TestDomain UserDynamic Pack collects Password Never Expire users in each domain.
AD Domain Users Health ChecksDomain Users Accounts Locked Out TestDomain UserDynamic Pack collects Locked Out User accounts in each domain.
AD Domain Security Groups Health ChecksDomain Security Groups with No Members TestDomain UserDynamic Pack collects Security Groups without members in each domain.
AD Domain OUs Health ChecksDomain OU with No GPO Linked TestDomain UserDynamic Pack collects Ous which have not been linked to any GPOs. Dynamic Pack is executed against each domain.
AD Domain OUs Health ChecksDomain OU Empty TestDomain UserDynamic Pack collects Ous which do not hold any Active Directory Objects. Dynamic Pack is executed against each domain.
AD Domain Users Health ChecksDomain Users Stale Accounts TestDomain UserDynamic Pack collects Stale User accounts in each domain.
AD Domain GPO Health ChecksDomain GPO Modification Frequency TestDomain UserDynamic Pack checks how frequently GPOs are being modified in each domain.
AD Domain GPO Health ChecksDomain GPO Backup TestDomain UserDynamic Pack checks to make sure a recent GPO backup has been taken.
AD Domain GPO Health ChecksDomain GPO Disabled TestDomain UserDynamic Pack returns the list of GPOs that are disabled.
AD Domain GPO Health ChecksDomain GPO WMI Filters TestDomain UserDynamic Pack returns the list of GPOs that have been configured with WMI Filters.
AD Domain GPO Health ChecksDomain GPO Description TestDomain UserDynamic Pack checks to see if any GPO is not configured with description text.
AD Domain GPO Health ChecksDomain GPO Not Applied TestDomain UserDynamic Pack checks GPOs that are configured in the domain but are not applying to any objects.
AD Domain GPO Health ChecksDomain GPO Naming TestDomain UserDynamic Pack checks to see how GPOs are named in the domain.
AD Domain GPO Health ChecksDomain GPOs Block Inheritance TestDomain UserDynamic Pack is used to collect list of GPOs that have Block Inheritence enabled. Test reports list of GPOs if high number of GPOs using Block Inheritenace is found.
AD Domain Controller Health ChecksDomain Controller Recent Updates TestDomain UserDynamic Pack checks if any domain controller was patched within 45 days and provide last date of patching.
AD Domain Controller Health ChecksDomain Controller Updates Level TestDomain UserDynamic Packs check if domain controllers are running with same Patch Level or not.
AD Domain Controller Health ChecksDomain Controller Event Log TestDomain UserDynamic Pack checks Number of Errors and Warnings logged in event logs of domain controllers. Dynamic Pack uses DCLogs.DPC file to know the Event Log to be checked. Specify one Event Log per line.
AD Domain Controller Health ChecksDomain Controller Services Status TestDomain UserDynamic Pack executes to check all domain controller services and their status. Reports failure if any of the service is not running or malfunctioning. Dynamic Pack uses DCServices.DPC file for services to be queried. Please specify one service short name per line.
AD Domain Controller Health ChecksDomain Controller Custom Missing Updates TestDomain UserDynamic Pack checks missing updates on Domain Controllers. You need to provide a list of updates that will be checked on each domain controller in CustomUpdates.DPC file. Please provide update KB number per line such as KB7645656.
AD DNS Health ChecksDNS Forwarders TestDomain UserDynamic Pack Checks to make sure DNS Servers are configured with proper Forwarders.
AD DNS Health ChecksDNS Root Hints TestDomain UserDynamic Pack checks to make sure DNS Servers are configured with proper root hints
AD DNS Health ChecksDNS Round Robin TestDomain UserDynamic Pack checks to make sure DNS Round Robin is enabled on DNS Servers in order to load balance authentication traffic coming from client computers.
AD DNS Health ChecksDNS Name Servers TestDomain UserDynamic Pack checks to make sure Name Servers are configured properly on each DNS Server.
AD Domain Zone Health ChecksAD Domain Zone Secure TestDomain UserDynamic Pack checks Zone secure status.
AD Domain Zone Health ChecksAD Domain Zone Integration TestDomain UserDynamic Pack checks Zone integration status.
AD Domain Zone Health ChecksAD Domain Zone Scavenging TestDomain UserDynamic Pack checks to make sure DNS Scavenging is enabled on each Zone.
AD Domain Zone Health ChecksAD Domain Zone Static Records TestDomain UserDynamic Pack checks static records created in the DNS Zones and report.
AD Forest Time Synchronization Health ChecksAD Root PDC Time Configuration TestDomain UserDynamic Pack checks to make sure root PDC is configured to sync time from an external NTP Server and all required registry entries are set correctly.
AD Forest Time Synchronization Health ChecksAD Domain PDC Time Configuration TestDomain UserDynamic Pack checks to make sure domain PDCs are conifgured to sync time from Root PDC and all required registry entries are set correctly.
AD Forest Time Synchronization Health ChecksAD Domain Controller Time Configuration TestDomain UserDynamic Pack checks to make sure Domain controllers are configured to sync time from Domain PDCs and all required registry entries are set correctly.
    

Number Of Dynamic Packs : 20

Assessment Target: Microsoft Office 365 and Azure

Reported Severity: Critical, High, Medium, Low and Passed

CATEGORYDYNAMIC PACKCREDENTIAL NEEDEDDESCRIPTION
Azure UsersAzure Users Licensing TestAzure UserDynamic Pack can be used to collect user licenses from Office 365 and check how many users require licenses.
Azure StorageAzure Storage Accounts Performance TestAzure UserDynamic Pack can check Azure Storage Accounts performance.
Azure UsersAzure Services DashboardAzure UserDynamic Pack provides an Azure Services Dashboard.
Azure UsersAzure Virtual Machine TestAzure UserDynamic Pack is used to check virtual machines status in each Resource Group.
Azure UsersOffice 365 MailBox Last Logon TestAzure UserDynamic Pack can be used to check Mailbox Last Logon time provides a report on users who have been inactive.
Azure UsersOffice 365 Mailbox Statistics TestAzure UserDynamic Pack provides Mailbox report.
Azure UsersAzure Users Deleted TestAzure UserChecks how many users have been deleted recently.
Azure UsersAzure Users Disabled TestAzure UserDynamic Pack can be used to check how many users are disabled in Azure
Azure UsersAzure Users Reconciliation TestAzure UserChecks to see if any users require License Reconciliation
Azure UsersOffice 365 User Roles TestAzure UserChecks to make sure Office 365 User Roles do not contain more than 10 members in each.
Azure UsersAzure Users Not In Group TestAzure UserDynamic Pack can be used to check users which are not part of any Groups in Office 365.
Azure UsersAzure Users Password Never Expires TestAzure UserDynamic Pack can be used to check how many users have been set their password not to expire.
Azure UsersAzure Users Weak Password Allowed TestAzure UserChecks weak password for Azure accounts.
Azure UsersAzure Users Password Not Changed TestAzure UserChecks how many Azure Users have not changed their password.
Azure UsersAzure Users Password Never Changes TestAzure UserChecks how many Azure users have set their password to Never Expire.
Azure UsersAzure Users Sync TestDomain UserDynamic Pack can be used to check Azure Synchronization status.
Azure UsersAzure MFA TestDomain UserThis Dynamic Pack can be used to check MFA enabled users and how many users are enforced.

Number Of Dynamic Packs : None

Assessment Target: Microsoft Hyper-V

Reported Severity: Critical, High, Medium, Low and Passed

CATEGORYDYNAMIC PACKCREDENTIAL NEEDEDDESCRIPTION
Hyper-V Virtual MachinesHyper-V Virtual Machine Integration Services TestDomain UserDynamic Pack checks Integration Services status on all virtual machines.
Hyper-V HostsHyper-V Host Configuration TestDomain UserDynamic Pack checks Hyper-V host configuration.
Hyper-V Virtual MachinesHyper-V Virtual Machine Version TestDomain UserDynamic Pack checks Virtual Machine Version.
Hyper-V Virtual MachinesHyper-V Virtual Machine Uptime TestDomain UserChecks uptime for Virtual Machines.
Hyper-V Virtual MachinesHyper-V Virtual Machine Running TestDomain UserChecks to ensure Virtual Machines are operating normally and have no issues.
Hyper-V Virtual MachinesHyper-V Virtual Machine Clustering TestDomain UserChecks if any of the virtual machines is not configured for clustering.
Hyper-V Virtual MachinesHyper-V Virtual Machine Status TestDomain UserChecks virtual machine status
Hyper-V Virtual MachinesHyper-V Virtual Machine RDP TestDomain UserChecks RDP status for all virtual machines.
Hyper-V Virtual MachinesHyper-V Virtual Machine Memory TestDomain UserDynamic Pack performs memory test for all virtual machines and report if any virtual machine is running low on memory.

Not Available

Not Available

Not Available

Not Available

Schedule a Demo