Active Directory Health Profiler

Risk Assessment of multiple targets

AD Health Profiler is a robust Execution SubSystem which is designed to do complete health assessment of supported targets. Currently, AD Health Profiler supports Microsoft Active Directory Forest as the assessment target. AD Health Profiler can help you minimize the disruption in your business by finding the issues and providing the recommendations to fix the issues.

Dynamic Packs, sometimes referred to as Health Checks can be used to check components of targets. We offer 74 PowerShell-based Microsoft Active Directory Dynamic Packs as part to perform Health Check of multiple Active Directory Forests. All of our Microsoft Active Directory Dynamic Packs follow Microsoft recommendations for Active Directory Health Assessment.

Notable Features

Unlimited Assessment Targets

AD Health Profiler supports unlimited assessment targets. An Active Directory Forest is a target in AD Health Profiler terminology. Though different targets are supported by AD Health Profiler, main target is Active Directory Forest under which all other targets such as Microsoft Hyper-V, Exchange Servers, and SQL Servers, operates. Every Active Directory Forest that needs to be checked via AD Health Profiler must be registered and discovered in AD Health Profiler. Active Directory Forests running Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2, and Windows Server 2016 are supported.

Unlimited Health Profiles

Health Profiles are backbone of AD Health Profiler. A Health Profile includes Active Directory Forest and Dynamic Packs. In AD Health Profiler, we can create multiple health profiles containing separate AD Forests and Dynamic Packs of our choice.

Dynamic Solution

One of the benefits AD Health Profiler provides is that it supports importing new Dynamic Packs from Dynamic Packs Server and/or from Dynamic Pack file. You can design a Dynamic Pack and import into AD Health Profiler.

Report Issues, Severity and Recommendations

AD Health Profiler not just performs Health Check, but also reports issue severity and recommendations to fix the issues. The Issue Severity and Recommendations are defined in the Dynamic Packs which can be modified using Packs Manager.

Credential Support

If you are managing multiple Active Directory Forests under AD Health Profiler, you can add credentials for each Active Directory Forest. Once credentials are added AD Health Profiler can connect to AD Forest managed by the Health Profile and do the assessment.

Hybrid Dynamic Packs

Currently, AD Health Profiler ships with Microsoft Active Directory Dynamic Packs. However, once Dynamic Packs for other systems such as Hyper-V, VMWare, Azure, Office 365, Windows Servers, Windows Clients, SQL Servers, and Exchange Servers are available the Dynamic Packs can be imported via AD Health Profiler.

Design Your Own Health Check or Customize Existing Health Checks

AD Health Profile is an Execution SubSystem which supports executing Health Checks (Dynamic Packs) designed using PowerShell. In case you need to perform Health Check of a specific technology component let’s say Azure or VMWare, either you can use Packs Manager to design the Health Check or request us to design for you.

Import More Health Checks (Dynamic Packs) from Server

We design new Dynamic Packs every month. You can import new Dynamic Packs from within the AD Health Profiler console and use them.

Customize Reporting

Reporting Module can help customize the report based on a Word Template. It supports modifying Severity of the issue and add your own comments against each issue. Reporting Module also supports excluding Health Checks from the report.

Dynamic Packs

A Dynamic Pack consists of PowerShell code. Dynamic Packs can be used to perform Health Check, collect information and maintain health of targets. Currently, AD Health Profiler provides 74 Dynamic Packs for Active Directory and all of Dynamic Packs are designed by industry experts such as Microsoft MVPs and IT Experts. Active Directory Dynamic Packs can perform a thorough health check of Active Directory Forests.

Here is the list of Microsoft Active Directory Dynamic Packs that ship with AD Health Profiler:

Category Dynamic Pack Credential Requirement Description
AD Domain Computers Health Checks Domain Computers Operating Systems Test Domain User Domain Computers Operating Systems Test
AD Domain Security Groups Health Checks Domain Duplicate Security Groups Test Domain User Dynamic Pack collects duplicate security groups in each domain.
AD Domain GPO Health Checks Domain GPOs No Override Test Domain User Dynamic Pack checks to see how many GPOs have been configured with.

How It Works

AD Health Profiler is a unique solution and dynamic in nature. We provide two components as part of the AD Health Profiler:

  • AD Health Profiler Execution SubSystem: Execution SubSystem provides execution environment for executing Dynamic Packs.
  • Dynamic Packs: Dynamic Packs are PowerShell-based scripts which are imported into the Execution SubSystem. Once imported Dynamic Packs can be added to a Health Profile which contains an assessment target. When you execute Health Profile, the Dynamic Packs are executed as part of the execution against the assessment target maintained by the Health Profile.

As it shows in the figure above, you will be required to register a target which is always an Active Directory Forest. Multiple Active Directory Forests can be registered. Once registered, create a health profile which contains both Active Directory Forest and Dynamic Packs.

Screenshots

Requirements

Components and Modules

AD Health Profiler requires following components to be installed:

  • Active Directory PowerShell Modules
  • Group Policy PowerShell Modules
  • DNS Server PowerShell Modules
  • .NET 3.5 Framework
Operating System

AD Health Profiler must be running on one of the below Operating Systems:

  • Windows 8, Windows 8.1
  • Windows Server 2012 or Windows Server 2012 R2
  • Windows Server 2016
  • AD Health Profile can run on a member computer. It doesn’t have to be a domain controller

Important:AD Health Profile can run on a member computer. It doesn’t have to be a domain controller.

Antivirus Exclusion

Since AD Health Profiler executes PowerShell-based scripts on fly, you will be required to whitelist following directory in your Antivirus:

C:\ProgramData\DynamicPacksTechnologies\ADHealthProfiler

Access & Scenarios

Access Requirements for AD Health Profiler depends as listed below:

Scenario 1: AD Health Profile computer is NOT part of Active Directory domain: In Scenario 1 you will be required to add credentials under AD Health Profiler. This scenario is sometimes referred to as running AD Health Profiler on an Admin computer which can do assessment of all managed AD Forests from a single computer.

Scenario 2: AD Health Profile computer is part of Active Directory domain: In Scenario 2 you can use Locally Logged On Credential to connect to AD Forest.

Resources

Designing Dynamic Packs

Article provides information on various terms used in the AD Health Profiler.

Registering Active Directory Forest with AD Health Profiler

Article explains how to register an Active Directory Forest with AD Health Profiler before you can perform health check of Active Directory.

Creating and Executing Health Profiles

Article explains how to create Health Profiles after registering Active Directory Forests with AD Health Profiler.

Generating Summary and Reports

Article explains how to generate Summary which shows issues reported by the Dynamic Packs and how to generate HTML Reports for Health Profile.

Generating Report Using AD Profiler Reporter

Article Explains how to generate reports using AD Profiler Reporter.

Exporting/Importing Health Profiles

Article explains why to use Export/Import health profile feature of AD Health Profiler and how to export and import Health Profiles.

Designing Dynamic Packs

Learn how to design Dynamic Packs using Dynamic Pack Manager.

Using AD Health Profiler Options

Configure various AD Health Profiler Options such opening default Health Profile, etc.

Comparision

AD Health Profiler ships in three versions; BASIC, PRO and EXPERT. Below table provides the comparison between each version:

FEATURES AD Profiler BASIC (FREE) AD Profiler PRO (PAID) AD Profiler EXPERT (PAID)
Execution of 74 Dynamic Packs
Highlight Of Issues
Critical Issues Only Number of Issues
High Issues Only Number of Issues
Medium Issues Only Number of Issues
Low Issues
Passed Items
Create New Pack
Modify Existing Pack
Import Pack From File
Export Pack To File
Credential Support
Add Credential
Health Profiles Management
Multiple Health Profiles
Export Health Profile
Import Health Profile
Import Packs
Request Pack
Import From Server
Import From Bundle
Health Profile Summary
Export Summary
AD Forest Registration
Can Add Multiple AD Forests Limited to Single AD Forest Unlimited
Single-Click Assessment
Reporting
Modify Severity and Add Comments
Detailed Reporting
Separate Reporting Tool
Hybrid Dynamic Packs
Active Directory Packs
Exchange Server Packs
Azure Packs
AWS Packs
Database Server Packs

Schedule a Demo