O365 IT Risk & Health Scanner

Can Active Directory Health Profiler be used to do health check of just Active Directory Forests?

AD Health Profiler supports Active Directory as the assessment target. Though different targets are supported by AD Health Profiler, main target is the Active Directory Forest under which all other targets such as Microsoft Hyper-V, Exchange Servers, and SQL Servers, operates. Every Active Directory Forest that needs to be checked via AD Health Profiler must be registered and discovered in AD Health Profiler. Active Directory Forests running Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2, and Windows Server 2016 are supported. Other targets are supported via Dynamic Packs.

Can I design Dynamic Packs to target systems other than Active Directory?

Active Directory Health Profiler supports other targets through Dynamic Packs. You can utilize Packs Manager to design Dynamic Packs for other targets. However, before you start to design Dynamic Packs you need to search for PowerShell Cmdlet. For example, if you wish to design a Dynamic Pack to gather Virtual Machines running on a Hyper-V Server, you must know the PowerShell Cmdlet that can be used to perform the required task by the Dynamic Pack. For example, Get-VM PowerShell cmdlet can be used to collect Virtual Machine information from target Hyper-V Servers.

Does AD Health Profiler require Enterprise Admins and Domain Admins credentials?

AD Health Profiler requires a “normal” domain user account to collect information from Active Directory Forest except a few Dynamic Packs that need special privileges. The following Dynamic Packs require Domain Admin or Local Admin access to the Domain Controllers in order to connect and collect the required information from Domain Controllers:

  • Get Domain Controller Up Time
  • Get Domain Controller Services Status
  • Get Domain Controller Local Disks

Other than above Dynamic Packs, all Dynamic Packs can be executed under a normal AD user account who that is (a) part of Domain Users Security group in the domain.

Can I Do Health Assessment Of Multiple Active Directory Forests?

Every health profile that you create in AD Health Profiler contains an AD Forest as the assessment target. If you have registered another Active Directory Forest in AD Health Profiler, you can create another health profile and then add the AD Forest. Same AD Forest can be used in more than one Health Profile. For example, if you have registered three Active Directory Forests as Target in AD Health Profiler then you can add three AD Forests to three or more Health Profiles which, in turn, allows the health assessment of multiple Active Directory Forests.

What Is A Health Profile?

A Health Profile created in the AD Health Profiler has the following characteristics:    

  • A Health Profile contains an Active Directory Forest that you have already registered and discovered.
  • A Health Profile contains the Dynamic Packs that you can execute against an Active Directory Forest managed by the Health Profile.
  • A Health Profile can be executed under a different set of credential.
A Health Profile Can Be Executed Under A Different Set Of Credential?

Free version of Active Directory Health Profiler does not support more than two health profiles. However, registered version can support unlimited Health Profiles. For example, you can create two health profiles containing same Active Directory Forest. One Health Profile is responsible for executing a complete Active Directory health check and second health profile will contain Dynamic Packs that help in performing basic Active Directory health check. You can also create a Replication Check health profile to check replication status every day.

Does Ad Health Profiler Perform Any Write Operations In Active Directory?

No. The Active Directory Health Profiler is a read only product. It does not write anything to the target systems.

Can I Modify Existing Dynamic Packs?

You can modify existing Dynamic Packs using the Packs Manager that is built-into the Active Directory Health Profiler. You can also create new Dynamic Packs using Packs Manager.

Is Support Available For Active Directory Health Profiler?

Support is available to registered users. You can also contact us on WhatsApp group to quickly get us on phone to troubleshoot an issue while you are on-site with a customer.

My Currently Logged On Credentials Do Not Allow To Connect To Active Directory Forest

Active Directory Health Profiler supports executing Health Profiles under different set of credentials. All you need to do is add credentials and then select the credential when executing Health Profile or individual Dynamic Packs.

What Are the Supported Scenarios for AD Health Profiler?

AD Health Profiler supports multiple scenarios as listed below:

Scenario 1: AD Health Profile computer is NOT part of Active Directory domain: In Scenario 1 you will be required to add credentials under AD Health Profiler. This scenario is sometimes referred to as running AD Health Profiler on an Admin computer which can do assessment of all managed AD Forests from a single computer.

Scenario 2: AD Health Profile computer is part of Active Directory domain: In Scenario 2 you can use Locally Logged On Credential to connect to AD Forest.

LICENSING

Do I Need To Buy Active Directory Health Profiler Every Year?

We charge one-time fee for AD Health Profiler Execution SubSystem. The AD Health Profiler is a powerful execution SubSystem that you will have to buy in order to execute the Dynamic Packs.

Can I Manage Multiple Active Directory Forests Using Ad Health Profiler?

You must buy AD Forest Licenses apart from purchasing Active Directory Health Profiler Execution SubSystem. In case you need to manage multiple Active Directory Forest or do a health assessment of multiple Active Directory Forests, you must buy Additional AD Forest licenses.

Do I Need To Renew AD Forest License Every Year?

AD Forest License will be available to you for one year. You must buy Additional AD Forest licenses in following conditions:

  • You would like to renew existing AD Forest License.
  • You have to add an additional Active Directory Forest under the management of Active Directory Health Profiler.

REQUIREMENTS

What Are The Requirements To Run Ad Health Profiler?

Note that before you can use Active Directory Health Profiler, you need to ensure you install Active Directory Health Profiler on a supported Windows Operating System and have required software installed. The following is the minimum requirements for AD Health Profiler:

  • Operating System: We have tested AD Health Profiler on Windows Server 2012 and Windows Server 2012 R2 Operating Systems. However, as long as you are running RSAT for Windows Server 2012/R2 on a Windows Operating System other than Windows Server 2012 and Windows Server 2012 R2, you can try running on other Windows Operating Systems.
  • PowerShell: Since AD Health Profiler uses Dynamic Packs that are designed using PowerShell cmdlets, you are required to install PowerShell Modules for the target managed by the Health Profile. For example, if Health Profile contains Active Directory as a Target, you’re required to install Active Directory PowerShell modules on the AD Health Profiler computer.
  • Local Administrator: This is required to install the AD Health Profiler on the computer.
Does AD Health Profiler Require Antivirus Exclusion?

You are required to exclude C:ProgramDataDynamicPacksTechnologies folder from antivirus. AD Health Profiler Execution SubSystem creates PowerShell scripts on fly for execution. Some antivirus products might block execution of scripts.

 

Schedule a Demo