Dell Directory Analyzer Installation Guide

Transcription

1 Dell Directory Analyzer 4.14

2 2014 Dell Inc. ALL RIGHTS RESERVED. This guide contains proprietary information protected by copyright. The software described in this guide is furnished under a software license or nondisclosure agreement. This software may be used or copied only in accordance with the terms of the applicable agreement. No part of this guide may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopying and recording for any purpose other than the purchaser s personal use without the written permission of Dell Inc. The information in this document is provided in connection with Dell products. No license, express or implied, by estoppel or otherwise, to any intellectual property right is granted by this document or in connection with the sale of Dell products. EXCEPT AS SET FORTH IN THE TERMS AND CONDITIONS AS SPECIFIED IN THE LICENSE AGREEMENT FOR THIS PRODUCT, DELL ASSUMES NO LIABILITY WHATSOEVER AND DISCLAIMS ANY EXPRESS, IMPLIED OR STATUTORY WARRANTY RELATING TO ITS PRODUCTS INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT. IN NO EVENT SHALL DELL BE LIABLE FOR ANY DIRECT, INDIRECT, CONSEQUENTIAL, PUNITIVE, SPECIAL OR INCIDENTAL DAMAGES (INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF PROFITS, BUSINESS INTERRUPTION OR LOSS OF INFORMATION) ARISING OUT OF THE USE OR INABILITY TO USE THIS DOCUMENT, EVEN IF DELL HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. Dell makes no representations or warranties with respect to the accuracy or completeness of the contents of this document and reserves the right to make changes to specifications and product descriptions at any time without notice. Dell does not make any commitment to update the information contained in this document. If you have any questions regarding your potential use of this material, contact: Dell Inc. Attn: LEGAL Dept 5 Polaris Way Aliso Viejo, CA Refer to our web site (software.dell.com) for regional and international office information. Patents This product is protected by U.S. Patent #6,249,883. For more information, go to Trademarks Dell and the Dell logo are trademarks of Dell Inc. and/or its affiliates. Microsoft, Windows, Windows Server, Internet Explorer, SQL Server, and Active Directory are either registered trademarks or trademarks of the Microsoft Corporation in the United States and/or other countries. Pentium is a registered trademark of Intel Corporation in the U.S. and/or other countries. Other trademarks and trade names may be used in this document to refer to either the entities claiming the marks and names or their products. Dell disclaims any proprietary interest in the marks and names of others. Legend CAUTION: A CAUTION icon indicates potential damage to hardware or loss of data if instructions are not followed. WARNING: A WARNING icon indicates a potential for property damage, personal injury, or death. IMPORTANT NOTE, NOTE, TIP, MOBILE, or VIDEO: An information icon indicates supporting information. Directory Analyzer Updated - June 2014 Software Version

3 Contents Installation Overview Introduction Before you begin System requirements Communications protocol and ports System overview Installation overview Sample installation scenario Installing the Enterprise Agent Overview Installing the Enterprise Agent Enterprise Agent Installation Wizard Installing the Client and Deployment Wizard Overview Installing the client and deployment wizard Directory Analyzer Client Setup Wizard Deploying Site and DC Agents Overview Deploying agents Agent Deployment Wizard Directory Analyzer Web Portal Overview DAWeb internals Requirements SSL encryption Installing the Web Portal Removing the Web Portal MOM Integration Overview Installing the MOM Connector Framework and Product Connector Installing the Directory Analyzer MOM Product Connector and Configuration tool Directory Analyzer MOM Product Connector InstallShield Wizard Configuring and registering the Directory Analyzer MOM Product Connector Directory Analyzer to MOM Product Connector Configuration wizard Using the MOM/Directory Analyzer Product Connector Service Assign alerts from MOM to Directory Analyzer Respond to assigned alerts within the Directory Analyzer console Use Directory Troubleshooter integration Unregistering the Dell MOM Product Connector

4 Uninstalling the MOM Product Connector Uninstalling the Directory Analyzer MOM Product Connector Removing Directory Analyzer Overview Removing Site and DC Agents Agent Deployment Wizard Removing the Directory Analyzer Client Removing the Enterprise Agent Directory Analyzer and SNMP Importing and Configuring the Directory Analyzer MOM Management Pack Microsoft Operations Manager (MOM) integration Importing/updating the Directory Analyzer Management Pack Configuring the MOM server Directory Analyzer Database Access and Event Log Database access Database credentials Requisite privileges Event Log About Dell Contacting Dell Technical Support Resources Index

5 1 Installation Overview Introduction Before you begin System requirements System overview Installation overview Introduction Dell Directory Analyzer, a Spotlight on Active Directory Pack solution, proactively monitors and diagnoses critical, directory-wide infrastructure issues from replication latency to Domain Name System (DNS) inconsistencies. Using a graphical interface, Directory Analyzer provides a holistic view showing directory status. When a problem occurs, an instant alert notifies you of its exact nature and location The contains the information required to install, upgrade or remove Directory Analyzer. It is intended for network administrators, consultants, analysts, and any other IT professionals responsible for installing and maintaining the product. This chapter defines the system requirements for Directory Analyzer, provides an overview of the installation steps, and describes a sample Directory Analyzer installation. Before you begin It is recommended that you perform the following steps before you begin the installation procedure: Review the System Requirements section Review the complete installation process Read the Release Notes for updated information Ensure you have a valid license file to enable the Directory Analyzer software. NOTE: Directory Analyzer will prompt you for a valid license during the Enterprise Agent Installation. Pre-4.14 Directory Analyzer licenses will NOT work with the 4.14 version. NOTE: Directory Analyzer requires the previous release to be installed before upgrading to the next release. So if you are upgrading to Directory Analyzer 4.14, you must have Directory Analyzer 4.12 currently installed. 5

6 System requirements The Directory Analyzer components execute on the following operating systems: Client Windows Server 2003, Windows Server 2003 R2, Windows Server 2008, Windows Server 2008 R2 or Windows Server 2012 Microsoft Data Access Components (MDAC) version 2.6 or higher is required for generating reports. DC Agent Servers Windows Server 2003, Windows Server 2003 R2, Windows Server 2008, Windows Server 2008 R2 or Windows Server 2012 domain controller Site Agent Servers Windows Server 2003, Windows Server 2003 R2, Windows Server 2008, Windows Server 2008 R2, or Windows Server 2012 domain controller Enterprise Agent Server Windows Server 2003, Windows Server 2003 R2, Windows Server 2008, Windows Server 2008 R2, or Windows Server 2012 Member Server (it is required that you place the Enterprise Agent on a member server, not a domain controller). Microsoft SQL Server Desktop Engine (MSDE) (minimum), SQL Server 2005, SQL Server 2005 Express, SQL Server 2008 or SQL Server NOTE: If you intend to use the Directory Analyzer MOM integration components, it is strongly recommended that the Enterprise Agent NOT be installed onto a MOM Management Server. Web Portal NOTE: MDAC has been included in Windows installations starting with Windows 2003 (Windows 2008 and higher refer to MDAC as Windows DAC). For more information or to download the latest version of MDAC refer to Microsoft s web site at WMI must be installed and running if a consolidator connection is desired Pentium III 450 MHz or better 256 MB RAM or better Windows Server 2003, Windows Server 2003 R2, Windows Server 2008, Windows Server 2008 R2, or Windows Server 2012 Microsoft.NET Framework components V2.0 or newer Microsoft IIS To monitor Exchange through the Exchange View, Exchange 2000 SP2 or higher, Exchange 2003 or Exchange 2007 is required. For integration with MOM, MOM 2005 is required. At a minimum, Directory Analyzer requires one Site Agent and one Enterprise Agent to run (the DA client may optionally be installed on any server running a DA service agent). Directory Troubleshooter If you plan on launching Directory Troubleshooter or using the integrated features, the same version of Directory Troubleshooter must be installed on the Directory Analyzer Client machine. For example, if Directory Analyzer 4.14 is already installed, you would need to install Directory Troubleshooter

7 Communications protocol and ports Certain ports must be opened for inbound/outbound access. Failure to open the following port will impact the functionality of Directory Analyzer up to and including failure: TCP/IP Port 2650 (0xA5A) - as assigned by IANA 5/98 This port has been dedicated to Dell applications by its respective governing board and should not be used by any other company or application. Note that this port does not need to be externally accessible unless specifically requested by Dell Technical Support -- this only applies to wide area networks with internal filtering or firewalling. NOTE: If you install the Directory Analyzer Agent on a Windows 2008/2008 R2/2012 server, the Windows firewall may prevent inter-agent communication. That is, data and alerts from remote agents will not be viewable from the Directory Analyzer client. If you encounter this issue, please create a firewall exception for port TCP/IP 2650 on every DC Agent and Enterprise Agent installation. System overview Directory Analyzer is made up of four primary components: Client - the graphical user interface that manages all aspects of Directory Analyzer. The client allows administrators to view current alerts, set thresholds, display or print alert history and run interactive tools to assist in troubleshooting Active Directory. Enterprise Agent - a service that resides on a Windows 2003/2003 R2/2008/2008 R2/2012 member server in the enterprise. It is responsible for monitoring forest-wide conditions and collecting alert conditions and information from Site Agent(s) in order to generate notifications to administrators and display status to the client. Site Agent - a service that resides on a single domain controller within a site. In addition to performing all the actions of a standard DC Agent, it is responsible for monitoring site-level conditions and collecting alert conditions and information from all DC Agents in the same site to pass on to the Enterprise Agent. DC Agent - a service that resides on each domain controller in the enterprise, except the one hosting the Site Agent at each site. The DC Agent is charged with monitoring that domain controller for alert conditions and passing them on to the Site Agent. Installation overview You will first install the Directory Analyzer Enterprise Agent, followed by the Directory Analyzer Client and Deployment Wizard. You will then run the Deployment Wizard to deploy Directory Analyzer agents (Site Agents and DC Agents) to the network. Directory Analyzer uses Microsoft s Windows Installer technology to install the Directory Analyzer Enterprise Agent, client and deployment wizard. Running the Setup.exe file will launch the Directory Analyzer Setup Wizard, allowing you to install these components. The first page of the wizard contains links to perform the following installation steps: 1 SQL Server 2005 Express Download - Directory Analyzer requires access to an installation of Microsoft SQL Server Desktop Engine (MSDE), SQL Server 2005, SQL Server 2005 Express, SQL Server 2008 and SQL Server A typical installation requires a locally installed instance of SQL Server Express. You should select this option if SQL is not already installed or if you wish to create a new SQL Server Express instance for Directory Analyzer. Selecting this option, will launch your internal browser allowing you to download the SQL Server 2005 Express Edition from the Microsoft web site. After you have downloaded and installed the SQL Server Express Edition, you may proceed to the second step: Enterprise Agent Installation. 7

8 2 Enterprise Agent Installation - Select this option to install or upgrade the Directory Analyzer Enterprise Agent. This installation must be performed locally on a Windows 2003/2003 R2/2008/2008 R2/2012 member server. NOTE: It is strongly recommended that the Enterprise Agent not be installed on a MOM Management Server; the MOM connector may fail to automatically start during a reboot if the Enterprise Agent, MOM connector and MOM are installed on the same server. 3 Client and Deployment Wizard Installation - Select this option to install the Directory Analyzer Client and Deployment Wizard. The client provides the graphical interface to Directory Analyzer and the deployment wizard allows the administrator to deploy and configure Directory Analyzer agents. Administrators may wish to make only the Directory Analyzer Client available to the first line help desk administrators. The Deployment Wizard installation is part of the client installation process. If installed, it can be launched at any time after the installation. 4 Once these components are successfully installed, launch the Deployment Wizard to deploy Directory Analyzer Site and DC agents to the desired servers. NOTE: If no Directory Analyzer Site or DC agents are deployed, the Information tabs and Summary Graphs in the Directory Analyzer Client will not contain any information. MOM integration Directory Analyzer can be installed and configured for tight integration with Microsoft Operations Manager (MOM) 2005 by leveraging the MOM Connector Framework and the Directory Analyzer MOM Product Connector. This configuration does not require Directory Analyzer Site or DC agents to be deployed in the environment. However, both the Directory Analyzer Site and DC agents can coexist with the Directory Analyzer MOM Product Connector. Directory Analyzer MOM Product Connector - a service that connects Directory Analyzer to the MOM Connector Framework, enabling bidirectional alert forwarding and synchronization. This service allows for alerts generated by MOM ADMP to be sent to the Directory Analyzer Enterprise Agent and makes them available as MOM alerts in the client, then updates back to MOM when an alert s status or history changes. The MOM alerts in the Directory Analyzer health console are also mapped with smartlink integration to Directory Troubleshooter tests. Directory Analyzer MOM Management pack - allows for alerts generated by the Directory Analyzer agents to be forwarded to the MOM Operators console. The alerts processed through the management pack in the MOM operators console do not update in the Directory Analyzer console. The Directory Analyzer alerts will automatically drop from the health console if the condition is rectified in the environment since the alerts are self acknowledging. Sample installation scenario Following is a sample scenario of how the different Directory Analyzer components can be installed. Active Directory structure summary LOGICAL 15 Windows 2003 Domain Controllers in 3 Active Directory Domains domain1.com DC1; DC2; DC3; DC4; DC5 domain2.domain1.com DC6; DC7; DC8; DC9; DC10 8

9 domain3.domain1.com PHYSICAL DC11; DC12; DC13; DC14; DC15 3 Active Directory Sites ADSite1 ADSite2 ADSite3 DC1; DC2; DC4; DC6; DC14 DC7; DC8; DC9; DC11; DC13 DC3; DC5; DC10; DC12; DC15 The deployment of Directory Analyzer components is based on the physical design of Active Directory, namely the Active Directory sites that exist and the domain controllers that exist in each site. So the deployment of Directory Analyzer for this sample Active Directory environment could look like this: Figure 1. Sample Active Directory environment The DA Client is installed on a Windows 2003 Professional administrator s workstation called WKSTN1. The Enterprise Agent is deployed on a Windows 2003 member server called SERVER1. DA Client: WKSTN1.domain1.com Enterprise Agent: MEMBERSERVER1.domain1.com 9

10 Site Agents: DC1.domain1.com DC5.domain1.com DC9.domain2.domain1.com DC Agents: DC2.domain1.com DC3.domain1.com DC4.domain1.com DC6.domain2.domain1.com DC7.domain2.domain1.com DC8.domain2.domain1.com DC10.domain2.domain1.com DC11.domain3.domain1.com DC12.domain3.domain1.com DC13.domain3.domain1.com DC14.domain3.domain1.com DC15.domain3.domain1.com 10

11 Installing the Enterprise Agent 2 Overview Installing the Enterprise Agent Enterprise Agent Installation Wizard Overview The Directory Analyzer Enterprise Agent is responsible for monitoring forest-wide conditions and collecting alert conditions and information from Site Agent(s) in order to generate notifications to administrators and display status to the client. This service must be installed locally on a Windows 2003/2003 R2/2008/2008 R2/2012 member server in the enterprise. A single Enterprise Agent is required for the entire enterprise (forest). You can, however, define a primary and alternate Enterprise Agent for fault tolerance. Installing the Enterprise Agent Prerequisite to installing the Enterprise Analyzer: Directory Analyzer requires access to an installation of Microsoft SQL Server Desktop Engine (MSDE), SQL Server 2005, SQL Server 2005 Express, SQL Server 2008 or SQL Server A typical installation requires a locally installed instance of SQL Server Express. 1 If SQL is not already installed or if you wish to create a new MSDE instance for Directory Analyzer, run the Setup.exe file to launch the Directory Analyzer Setup Program. 2 On the first page of the wizard, click SQL Server/MSDE Installation. Clicking this option, will launch your internal browser allowing you to download the SQL Server 2005 Express Edition from the Microsoft web site. 3 After you have downloaded and installed the SQL Server Express Edition, proceed to the second step: Enterprise Agent Installation To install the Directory Analyzer Enterprise Agent: NOTE: The Enterprise Agent needs to be able to contact a global catalog server during the installation. 1 From the desired member server, run the Setup.exe file to launch the Directory Analyzer Setup program. 2 On the first page of the wizard, click Enterprise Agent Installation to launch the Enterprise Agent Installation wizard. 3 Follow the instructions provided in the installation wizard. Here are some points to keep in mind during this installation process: If the Microsoft SNMP service is installed, select the Yes, Enable SNMP Integration option if you want to use the SNMP service to send SNMP traps as alerts. At least one Enterprise Agent is required for the entire enterprise (forest). You can however, define a primary and an alternate Enterprise Agent to provide fault tolerance. 11

12 Directory Analyzer s security mechanism enables an organization to delegate monitoring responsibility as appropriate. It is recommended to use the Yes, create the DA Admins security group option. Specify the SQL instance to be used and the authentication method to be used to access this database. When prompted for the license file, click the Licenses button. Clicking this button will display the License Status dialog. On this dialog, click the Browse License button to locate the license file you previously copied to your local hard drive and then click the Close button to return to the Product Licensing screen. 4 After entering all of the requested information, click the Finish button on the final wizard screen to return to the Directory Analyzer Installation Options screen. Enterprise Agent Installation Wizard Selecting the Enterprise Agent Installation option from the Directory Analyzer Installation Options screen will launch the Enterprise Agent Installation wizard which will walk you through the installation process. This installation must be performed locally on a member server running Windows Server 2003, Windows Server 2003 R2, Windows Server 2008, Windows Server 2008 R2 or Windows Server The following table provides a detailed description of each of the wizard pages and the required input. Table 1. Enterprise Agent Installation Wizard screens Select Database Name Once you select the Enterprise Agent Installation option, the Select Database Name window will display. You ll be prompted to enter or select from the drop-down menu a database name. Welcome After the installation program finishes loading, the Directory Analyzer Enterprise Agent Welcome screen will be displayed. Software License Agreement On the Software License Agreement screen, select the I Accept the terms of the license agreement option to acknowledge that you have read and agree to all of the terms of the agreement. If you do not accept the terms of the agreement, the installation program will not continue. Product Licensing You should have received a new license file from Dell to enable the Directory Analyzer software; it will not run without a new license. If you do not have a valid license file or need an updated license file, contact Dell to get your license file and copy it to your local hard drive. 12

13 Table 1. Enterprise Agent Installation Wizard screens Licenses The License Status dialog is displayed when the Licenses button is clicked on the Product Licensing screen of the Enterprise Agent Installation wizard. From this dialog, you can locate and apply a new license or update an existing license. Once you have applied the license file, click the Close button to return to the Product Licensing screen. Feature - This column displays the product or feature that requires a valid license. License Status - This column displays the status of the feature s license: Installed, Not Installed or Trial. If the License Status column indicates that the Directory Analyzer product is Not Installed, click the Browse license button to locate the Directory Analyzer product license file. License Expires - This column displays the date the license expires (if applicable to the selected feature). Maintenance Expires - This column displays the date the maintenance contract expires (if applicable to the selected feature). Browse license - Click the Browse license button to locate the license file you previously copied to your local hard drive. Customer Information After accepting the terms of the license agreement, the setup wizard proceeds to the Customer Information screen. This screen will display information about the user currently logged in. User Name This field displays the name of the user currently logged in. Organization This field displays the name of this user s company/organization. SNMP Configuration If the Microsoft SNMP service is installed, Directory Analyzer allows you to use the SNMP service to send SNMP traps as alerts. NOTE: The options on this screen will be disabled if SNMP is not installed on the installation machine. Select the appropriate option: Yes, Enable SNMP Integration No, Do NOT enable SNMP Integration Enterprise Agent Configuration At least one Enterprise Agent is required for the entire enterprise (forest). You can, however, define a primary and an alternate Enterprise Agent to provide fault tolerance. NOTE: If there is only one Enterprise Agent implemented in an environment and that Enterprise Agent fails for any reason, the environment will be unable to detect directory problems that might be happening. To avoid this situation, Directory Analyzer allows for an alternate Enterprise Agent to operate simultaneously. With this type of implementation, even if one Enterprise Agent fails, the other will continue to receive alert information and will notify administrators. Enterprise Agent redundancy is fully meshed, meaning that all Site Agents communicate with both Enterprise Agents. That way there is no opportunity for alert information to slip through the cracks. It is recommended that the Enterprise Agent(s) be installed on a Windows Server 2003, Windows Server 2003 R2, Windows Server 2008, Windows Server 2008 R2 or Windows Server 2012 member server that resides in the same physical location as the Active Directory administrator(s). The Enterprise Agent Configuration screen allows you to define whether you are installing a single Enterprise Agent and/or an alternate Enterprise Agent on your network. This will be the Primary This specifies that this server will be the primary Enterprise Agent. Enterprise Agent on this network. 13

14 Table 1. Enterprise Agent Installation Wizard screens This server will be the Alternate Enterprise Agent. If the second option is selected, a text box will be displayed allowing you to specify the Primary Enterprise Agent. In this text box, enter the fully qualified name of the member server to be used as your Primary Enterprise Agent. Or you can click the browse button to the right of this text box to search for available member servers. When this browse button is clicked, the Select Primary Enterprise Agent screen will be displayed. Discover - Click the Discover button, on the Select Primary Enterprise Agent screen, to search your system for available member servers. Then from the list displayed, select the member server to be used as your Primary Enterprise Agent. Access Control and Security Group Configuration Directory Analyzer s security mechanism enables an organization to delegate monitoring responsibility as appropriate by: controlling access to Directory Analyzer facilities, specifically agent distribution, alert history reporting and object configuration restricting the scope of what Directory Analyzer presents based on the user s administrative responsibility In order to ease Directory Analyzer security administration, this screen allows you to create a dedicated security group, as well as automatically add access control entries to each domain in the forest. Yes, create the DA Admins security group and add appropriate access control entries. (Recommended) No, I will set Directory Analyzer access control manually. Tell Me More Select this option to create a security group named DA Admins and set access control entries allowing members of the DA Admins group to monitor the forest. If you select this option, Directory Analyzer will not function until you add the appropriate access control entries manually. Click the Tell Me More button to view additional details on Directory Analyzer security group creation. Refer to the Dell Directory Analyzer Security Administrator s Guide for a detailed explanation of Directory Analyzer s security feature. SQL Server Desktop Engine A SQL Server instance is required. This screen displays the results of the search for SQL servers and instances. NOTE: If you choose a Remote SQL server and you will be using Windows Integrated security, please ensure that the domain user is granted access to the SQL server. This account must be assigned the System Administrator role to create the Enterprise Agent database. Click the browse button to the right of the Installing to Selected SQL Server\Instance field to select the SQL instance to be used. When you click the browse button, the Select SQL Server screen will be displayed. Click the Discover button at the bottom of Select SQL Server screen to search your system for instances of SQL. Then from the list displayed, select the instance to be used for Directory Analyzer. After selecting the SQL instance to be used, click the OK button to close this screen and return to the SQL Server Desktop Engine screen. Database Authentication The Database Authentication screen allows you to select the type of credentials to be used to access the database. Choose one of the following options: Dell Directory Analyzer Enterprise Agent will use SQL Authentication Dell Directory Analyzer Enterprise Agent will use Windows Authentication NOTE: In order to use Windows credentials you must be a system administrator. For more information on database access, please refer to Directory Analyzer Database Access and Event Log. Once you have selected an option, you will be presented with a screen allowing you to enter your credentials (the screen will depend upon the type of credentials you selected to use). 14

15 Table 1. Enterprise Agent Installation Wizard screens SQL Authentication Screen On this screen, enter the appropriate SQL credentials: Username for SQL Account - Enter the username of the user account to be used to access the designated SQL server/instance. Password / Confirm Password - Enter the password associated with the SQL account entered above. Windows Integrated On this screen, enter the appropriate Windows credentials: Authentication Screen Domain/Username for Windows Account - Enter the domain/username for the Windows account to be used to access the SQL server/instance. Password / Confirm Password - Enter the password associated with the user account entered above. Ready to Install the Program The Ready to Install the Program screen will then be displayed. It displays a summary of what is being installed: Enable/disable SNMP support Primary/Alternate EA information Enable/disable Directory Analyzer Security Destination SQL server name Database Authentication information If you want to review or change the installation settings, click the Back button to return to the appropriate screen(s). Click the Install button to begin the Enterprise Agent installation. The Installing Dell Directory Analyzer Enterprise Agent screen will display the progress of the files being copied. InstallShield Wizard Complete Once the installation program has successfully copied all the necessary files and built the database, the InstallShield Wizard Complete screen will be displayed. Click the Finish button. This will return you to the Directory Analyzer Installation Options screen, where you can select to install the Client and Deployment Wizard or exit the setup wizard. The Directory Analyzer Enterprise Agent is now installed. However, in order to use Directory Analyzer, the Client must be installed and Site and DC Agents must be deployed to machines in your enterprise. Install the Client and launch the Deployment Wizard to install and distribute the Site and DC Agents to their host machines. See Installing the Client and Deployment Wizard and Deploying Site and DC Agents for more information on installing the Client and on deploying the necessary agents. 15

16 Installing the Client and Deployment Wizard 3 Overview Installing the client and deployment wizard Directory Analyzer Client Setup Wizard Overview The Directory Analyzer Client provides you with an interface for monitoring and troubleshooting Active Directory. The client can be installed on Windows Server 2003, Windows Server 2003 R2, Windows Server 2008, Windows Server 2008 R2 or Windows Server The Directory Analyzer Deployment Wizard provides you with an interface to install and distribute the Directory Analyzer agents on your network, modify your Directory Analyzer installation or remove Directory Analyzer agents from your network. This wizard is installed on the same machine as the Directory Analyzer Client by default. Installing the client and deployment wizard To install the client and deployment wizard: 1 On the desired server, run the Setup.exe file to launch the Directory Analyzer Setup wizard. 2 On the Installation Options page of the wizard, select the Client and Deployment Wizard Installation option, which will then launch the Directory Analyzer Client Setup wizard. 3 Enter the requested information on the client setup wizard as described in the following sections. Directory Analyzer Client Setup Wizard Selecting the Client and Deployment Wizard Installation option will launch the Directory Analyzer Client Setup wizard which will step you through the installation process for the Directory Analyzer Client and Deployment Wizard. The following table provides a detailed description of each of the wizard screens and the required input. Table 2. Directory Analyzer Client Setup Wizard screens Welcome After selecting the Client and Deployment Wizard Installation option and the installation program finishes loading, the Directory Analyzer Client Setup Wizard Welcome screen will be displayed. 16

17 Table 2. Directory Analyzer Client Setup Wizard screens Software License Agreement On the Software License Agreement screen, select the I Accept the terms of the license agreement option to acknowledge that you have read and agree to all of the terms of the agreement. If you do not accept the terms of the agreement, the installation program will not continue. Customer Information After accepting the terms of the license agreement, the setup wizard proceeds to the Customer Information screen. This screen will display information about the user currently logged in (which can be changed). User Name This field displays the name of the user currently logged in. Organization This field displays the name of this user s company/organization. Install this application for From this screen, you can also specify who can run Directory Analyzer. Select the appropriate option: Anyone who uses this computer (all users) - This option is selected by default. Only for me (<user_name>) Setup Type The Setup Type screen will be displayed allowing you to specify the type of setup. Complete By default this option is selected. The Complete setup will install both the Directory Analyzer Client and Deployment Wizard. It will install these programs in the following folder: C:\Program Files\Dell\DirectoryAnalyzer\Client\. Custom Select this option if you would like to change the installation options of a component or specify a different installation folder. Selecting this option will display the Custom Setup screen, allowing you to customize your installation. By default, the Directory Analyzer Client and Directory Analyzer Deployment Wizard will be installed. To change the installation option for either of these components, click on the icon to the left of the component and select a different option from the drop-down list. Valid options are: This feature will be installed on local hard drive - This option is selected by default. This feature, and all subfeatures, will be installed on local hard drive - For Directory Analyzer, this option has the same effect as the first option. This feature will not be available - That is, the selected component will not be installed. In the Install to field, click the Change button to locate a new installation folder. Locate the folder and click OK to close the Change Current Destination Folder screen and return to the Custom Setup screen. NOTE: To review the available disk space on each of the drives to which you are currently connected, click the Space button at the bottom of the Custom Setup screen. Ready to Install the Program The Ready to Install the Program screen will then be displayed. If you want to review or change the installation settings, click the Back button to return to the appropriate wizard screen(s). When you are ready to install, click the Install button to begin the installation. The Installing Directory Analyzer screen will display the progress of the files being copied. 17

18 Table 2. Directory Analyzer Client Setup Wizard screens Completing the Directory Analyzer Setup Wizard Once the installation program has successfully copied all the necessary files, the Completing the Directory Analyzer Client Setup Wizard screen will be displayed. In order to use Directory Analyzer, agents must first be installed on machines in your enterprise. Use the Deployment Wizard to install and distribute the Site and DC Agents to their host machine. The installed components (Directory Analyzer Client and/or Deployment Wizard) can now be started. To launch the Deployment Wizard, you can either select the Start the Deployment Wizard option on this screen or use the shortcuts on the Start Menu. Click the Finish button to return to the Directory Analyzer Installation Option dialog. From this dialog, click Close to exit the Setup Wizard. 18

19 Deploying Site and DC Agents 4 Overview Deploying agents Agent Deployment Wizard Overview The Directory Analyzer Deployment Wizard allows you to deploy and configure the following Directory Analyzer agents from a single location: DC Agent(s) - one DC Agent is required for each domain controller that you want to monitor using Directory Analyzer. Site Agent(s) - one Site Agent is required for each Active Directory site to be monitored. Select one domain controller at each site to host the Site Agent. In addition to monitoring the site for which it is responsible, the Site Agent also monitors the local domain controller it resides on. Therefore, a DC Agent will not be installed on the domain controller where you are installing a Site Agent. TIP: We recommend that a maximum of 150 agents (combination of DC and Site Agents) be under the control of a single Enterprise Agent. Deploying agents To deploy Directory Analyzer agents: 1 Select Start All Programs Dell Directory Analyzer Directory Analyzer Deployment Wizard to launch the Agent Deployment wizard. 2 On the Select an LDAP Server screen, select the server to be used for LDAP queries. 3 On the Specify the Enterprise Agent screen, enter the fully qualified DNS name of the member server currently hosting your Enterprise Agent. 4 Once the wizard has obtained the necessary configuration information and established your default configuration, the Agent Configuration screen will be displayed. From this screen, expand each domain structure and select the desired action for each domain controller within the domain. The following actions are available depending on the node selected: Install/Upgrade Agents Demote to a DC Agent (available for Site Agents) Promote to a Site Agent (available for DC Agents) Remove Agents No Action After making your selections, click Next to continue. 5 Confirm your selections on the Deployment Action Summary screen and click the Execute button to start the distribution process. 19

20 6 Once the distribution process is completed, click OK to close the status pop-up that is displayed. 7 Back on the Deployment Action Summary screen, click Finish to continue. 8 On the Deployment Wizard Completed screen, click the View Logs button to view the agent deployment logs or the OK button to exit the deployment wizard. Agent Deployment Wizard The Agent Deployment Wizard can be launched at any time after the installation (if it was installed) by selecting Start Programs Dell Directory Analyzer Directory Analyzer Deployment Wizard. The following sections provide a description of the Deployment Wizard screens and the information that is to be provided. Table 3. Agent Deployment Wizard screens Welcome to the Directory Analyzer Deployment Wizard The first screen displayed is the Welcome screen for the Deployment Wizard. Select an LDAP Server On the Select an LDAP Server screen specify a Windows Server 2003/2003 R2/2008/2008 R2/2012 server to be used to determine the site layout of your network. This screen also allows you to specify alternate LDAP credentials to be used for read and write access to Active Directory. The Deployment Wizard will use the current user s credentials to check the Agent Topology facility for permission to continue. Please see the Dell Directory Analyzer Security Administrator s Guide for details. Once the site layout has been determined with the specified rights, the remaining steps of the wizard will use the credentials of the logged in user. The currently logged in user must have sufficient rights to: Copy files to the servers. Create, remove, stop and start services. Read and write the registry on the remote machines (including HKLM\SOFTWARE and HKLM\SYSTEM\CurrentControlSet). Domain Controller Name Enter the fully qualified DNS name of a Windows Server 2003, Windows Server 2003 R2, Windows Server 2008, Windows Server 2008 R2 or Windows Server 2012 domain controller. Use Windows credentials as LDAP credentials Domain Name User ID Password Tell Me More Select this check box to use the current Windows credentials as the LDAP credentials. Clear this check box to specify alternate credentials Enter the name of the domain to be used by the Deployment Wizard to access Active Directory. Enter the name of the user to be used to access Active Directory. Enter the password associated with the user ID entered above. Click the Tell Me More button for further explanation concerning credentials. Specify the Enterprise Agent The wizard will then display the name of the member server currently hosting your Enterprise Agent. If the name of your Enterprise Agent is not being displayed, use the arrow and select it from the drop-down list or enter the name of the member server that is hosting your Enterprise Agent. Determine Configuration The wizard will then ask you to wait while it queries the Enterprise Agent to obtain the necessary configuration information needed to proceed. Once the wizard has obtained the necessary configuration information and established your default configuration, click Next. 20

21 Table 3. Agent Deployment Wizard screens Agent Configuration The Agent Configuration screen allows you to define the domain controllers that will host DC Agents or the Site Agent for an Active Directory Site. The DC Agent is responsible for monitoring a single domain controller for alert conditions and passing them on to the Site Agent. One DC Agent is required for each domain controller that you want to monitor using Directory Analyzer. It is highly recommended that a DC Agent be installed on every domain controller in your enterprise, except on the domain controller(s) hosting a Site Agent. The Site Agent is responsible for monitoring site-level conditions and collecting alert conditions and information from the DC Agents at that site. It then passes this information on to the Enterprise Agent. One Site Agent is required for each Active Directory site to be monitored. Select one domain controller at each site, onto which you want to install a Site Agent. In addition to monitoring the site for which it is responsible, the Site Agent also monitors the local domain controller on which it resides. Therefore, a DC Agent will not be installed on the domain controller where you are installing a Site Agent. NOTE: We recommend that a maximum of 150 agents (combination of DC and Site Agents) be under the control of a single Enterprise Agent. From this screen you can perform the following tasks: install or upgrade agents demote a Site Agent to a DC Agent promote a DC Agent to a Site Agent remove DC and Site Agents take no action Version To Deploy This is a read-only field that displays the current version of Directory Analyzer that is being deployed. Directory This column displays all of the sites and domain controllers found on your network. This graphic display uses the following icons to represent the different types of objects: Enterprise Site Domain Controller Site agent To expand a site to view the resident domain controllers, click the + sign to the left of the site s name or right-click on an object and select the appropriate menu command: Expand, Expand All, Collapse, or Collapse All. 21

22 Table 3. Agent Deployment Wizard screens Action This column displays the actions to be taken against each of the domain controllers listed. Click the action and use the drop-down arrow to select the action to be taken against the selected site or domain controller. The following actions are available for the Enterprise or a Site: Install/Upgrade Agents Remove All Agents Take No Action To install/upgrade all of the agents in the enterprise 1 Select the enterprise node. 2 Click on the Action and select Install/Upgrade All Agents. The following actions are available for Site Agents: Install/Upgrade Site Agent Demote to a DC Agent Remove Site Agent Take No Action NOTE: By default, the first server listed in a site will be selected to host a Site Agent. To install/upgrade all of the agents in a site 1 Select the site(s) where agents are to be installed/upgraded. 2 Click on the Action and select Install/Upgrade All Agents. The following actions are available for domain controllers hosting DC Agents: Install/Upgrade Agent Promote to a Site Agent Remove DC Agent Take No Action To install/upgrade agents to individual domains controllers 1 Select the domain controller(s) where agents are to be installed/upgraded. 2 Click on the Action and select the appropriate action: Install/Upgrade Agent, Demote to a DC Agent, or Promote to a Site Agent. Version This column displays the current version already installed on each of the domain controllers, if applicable. This column will be blank for the initial installation. Deployment Action Summary A screen similar to the Agent Configuration screen will be displayed that summarizes the configuration changes you are about to apply to your enterprise. Review your selections to ensure they are correct and click Execute to start the distribution process. After clicking the Execute button, the Status column will detail the status of the deployment process. If errors were encountered, a red X will mark the objects (Directory column) that generated the error(s). In addition, if you click on a server, real-time status will be displayed in the text box at the bottom of the screen. To view a text file that contains a detailed log of the steps taken during the deployment process and any errors that occurred, click the View Log button. Once the distribution process is completed, a pop-up will be displayed that states that the installation was successful or warning you that errors were encountered. Click OK to close this pop-up. Deployment Wizard Complete The Deployment Wizard Complete screen will then be displayed. This screen displays whether there were any errors encountered during the deployment process as well as Dell contact information. To view the errors or logs for the deployment process, click the View Log button. 22

23 Directory Analyzer Web Portal 5 Overview Installing the Web Portal Removing the Web Portal Overview The Directory Analyzer Web Portal (DAWeb) allows administrators and operations personnel to connect to an alerting console using Internet Explorer 5.01 or higher. DAWeb is a technology that was first released with Directory Analyzer 3.1. In version 3.5, Directory Analyzer introduced a new significant function: multi-forest view. DAWeb internals The Web Portal communicates with a consolidator via TCP port This port is used by the Remoting classes of the.net framework. The consolidator uses the credentials for each forest to connect to the Dell Directory Analyzer WMI provider running on the Directory Analyzer Enterprise Agent. A forest s credentials can either be a domain account within the forest or a local machine account on the Enterprise Agent. These credentials must have permission to access the Enterprise Agent machine s WMI provider. With these credentials, the consolidator is able to access each Enterprise Agent to retrieve topology information, current alerts, alert details and event details. The DAWebAdmins group is optionally created by the installer as a local group account on the IIS server running the web portal. If you do not allow the installer to create this group, it MUST be created by an administrator if you want anyone to have administrative access to the web portal/consolidator. The web portal may not be run on a domain controller. To grant users access to the administrative functions of the web portal, local/domain users or groups must be members of this group. Users accessing the portal who are not members of this group will not see the Admin tab in the web portal. Requirements It is strongly recommended that you remove a previously installed 3.1 DA web portal before installing the 4.x version. Prior to installing the Directory Analyzer Web Portal, you must first have the following applications installed: Directory Analyzer version 4.12 or higher Directory Analyzer WMI Provider (installed as part of the 4.12 Enterprise Agent) Microsoft IIS must be configured to run ASP.NET applications. NOTE: If problems exist running ASP.NET applications, see the Microsoft Knowledge Base Article for a possible solution. Secure Sockets Layer (SSL) is required to use the Admin tab (See SSL encryption for more details) 23

24 SSL encryption Secure Sockets Layer (SSL) must be enabled on the DA Web Portal server to ensure that forest credentials are encrypted between the client web browser and the web server itself. To enable SSL on the IIS server, you must obtain a server certificate from a certificate authority (CA). Upon receipt and installation of the server certificate, the administration portions of the web portal (Admin tab) will become available. NOTE: If a server certificate has not been previously registered with the IIS server, it may be necessary to restart IIS once the certificate has been installed before any secure pages can be viewed via an SSL connection. For information on how to obtain and install a server certificate and SSL on an IIS server, please refer to the following sources: IIS 6.0 Administration Guide -> Certificates: Installing Server Certificates: IIS FAQs: Once SSL is enabled, the IIS administrator can chose to encrypt the entire web portal folder. If the administrator chooses to force SSL for the entire DA Web portal, then access to the portal can only be accomplished by specifying in the address (e.g., NOTE: If enabling SSL is NOT an option in your environment, a consolidator configuration tool is provided as part of the web portal/consolidator installation which can be used to duplicate the contents of the Admin page as a workaround to getting the Admin page running on the DA Web Portal.This tool is located in the Consolidator folder where the web portal was installed (e.g., c:\inetpub\wwwroot\daportal\consolidator\configmanager). Installing the Web Portal To ensure a successful installation of the DAWebPortal, please use the following procedure: To install the Web Portal: 1 Download (or copy from the distribution media) the Directory Analyzer Web Portal Installation msi file to a secure location on your network. 2 Double-click the Dell Directory Analyzer Web Portal.msi file to install and configure the Directory Analyzer Web Portal. This will launch the DAWebPortal Installation Wizard. 3 On the Welcome screen, click Next to proceed with the installation. 4 You will then be asked to read and agree to the terms in the license agreement. Select the I accept the terms of the license agreement option and click Next to continue. 5 The DAWebPortal and Consolidator Setup page will appear if the proper versions of Microsoft IIS,.NET Framework and ASP.NET are not installed on the machine. NOTE: If multiple versions of.net Framework are detected, or if an incompatible version is found, a warning will display stating any installation issues and how to address them. Refer to System requirements to see system requirements for installation. Since these applications must be installed BEFORE the DAWebPortal can be installed, click the Cancel button to exit the installation wizard. Install the required applications and then restart the DAWebPortal Installation Wizard. 6 On the Customer Information page, enter your user name and organization. Click Next to continue. 24

25 7 The Select Installation Folder will then prompt you to select the installation folder for the web portal. A virtual directory created in IIS will point to this folder. The default directory is located at C:\Inetpub\wwwroot\DAPortal, which will create the DAPortal directory under the wwwroot folder. You can select another directory by navigating to it using the drop down box in the Look in field. You can also create a new folder at any location, by clicking on the Create new folder button. Once you have selected the installation folder to be used, click Next. 8 The Set Consolidator Default Port and Name page will then be displayed, prompting you to enter your consolidator port (8085) and name. The port is required to allow communication between the web clients. Once you have entered the port number and consolidator name, click the Next button. 9 The DAWebPortal Group Creation page will be displayed allowing you to create the DAWebAdmins group, which is used by the web portal and multi-forest consolidator to allow administrative access. Users must be a member of this group to access the Administrator functions of the web portal. On this page, select one of the following options: Yes, please create the necessary group for me (default) No, I ll create the necessary group myself 10 On the Ready to Install the Program page, click the Install button to begin the installation. 11 After the installation is complete, click the Finish button to close the DAWebPortal Installation Wizard. Removing the Web Portal When removing Directory Analyzer, use Add/Remove Programs to remove the following applications in the designated order: Directory Analyzer Web Portal, Directory Analyzer WMI Provider, and Directory Analyzer Enterprise Agent. 25

26 6 MOM Integration Overview Installing the MOM Connector Framework and Product Connector Installing the Directory Analyzer MOM Product Connector and Configuration tool Configuring and registering the Directory Analyzer MOM Product Connector Using the MOM/Directory Analyzer Product Connector Service Unregistering the Dell MOM Product Connector Uninstalling the MOM Product Connector Uninstalling the Directory Analyzer MOM Product Connector Overview The MOM Connector Framework provides a service that connects MOM to the Dell Directory Analyzer MOM Product Connector service, enabling bidirectional alert forwarding and synchronization. Alerts generated by MOM are sent to the Directory Analyzer Enterprise Agent and made available as MOM alerts in the client, then update back to MOM when an alert s status or history changes. This version of Directory Analyzer utilizes the MOM Connector Framework to provide more integrated capability with MOM 2005, and can be installed on a computer in the network with a MOM Administrator Console. MOM 2005 is required to run the framework and connector and must be installed from the MOM 2005 installation CD. It is strongly recommended that MOM be installed on a separate machine from where the Directory Analyzer components are installed. In addition, you must have the Microsoft Active Directory Management Pack to monitor the performance and availability of Active Directory. To install the framework and connector, you will run SETUP.EXE from the MOM product CD. This chapter explains how to install, configure, use, unregister and uninstall the MOM Product Connector. Installing the MOM Connector Framework and Product Connector To begin installing the MOM Connector Framework and Product Connector, you must be logged on to a computer with a MOM Administrator Console. To install the framework and connector: 1 Once logged on to a local computer with a MOM Administrator Console, double-click SETUP.EXE on the MOM product CD. 2 In the Microsoft Operations Manager 2005 Setup Resources dialog box, select Install Microsoft Operations Manager 2005 to start the MOM 2005 Setup Wizard. 3 On the Program Maintenance page, verify that Modify is selected, then click Next. 4 On the Custom Setup page, expand MOM 2005 Server Components. 26

27 5 Click the down arrow next to Connector Framework, then select This component will be installed on local hard disk. 6 Click the down arrow next to MOM Product Connector, then select This component will be installed on local hard disk, and click Next. 7 The Prerequisite Check page indicates whether you have met the requirements for installing the MOM Database components. To see details, click the View Log button. 8 On the Data Access Server Account page, enter the Data Access Server (DAS) account that you used to install MOM. Setup uses this account to communicate with the database only during installation. NOTE: You must use the same DAS account that you used for the MOM Database setup. 9 On the Ready to Modify the Program page, click the Install button to begin installation. Verify that the Disable Execution check box is de-selected (unchecked). If checked, de-select (uncheck) the box then click Apply, then OK, and close the dialog. Next you will assign an alert to Directory Analyzer. Validating MOM Connector Service Availability and Credentials: You will need to validate the credentials that you intend to use to connect to the MOM server and ensure that the MOM Connector Service is running. 1 Open an Internet Explorer window and enter the following address in the browser: where: <yourmomserver> will be the FQDN 2 When prompted for credentials, use an account that is listed in the MOM Administrators group. The recommended account is the one used as the Management Action Account. 3 The following screen should appear. Figure 2. ConnectorServiceV2 Web Service screen 27

28 Installing the Directory Analyzer MOM Product Connector and Configuration tool To install the Directory Analyzer MOM Product Connector and Configuration tool: 1 The MOM Connector Service used by Directory Analyzer should now be installed onto the Enterprise Agent server. 2 Next, locate the Dell Directory Analyzer Product Connector.msi file in the MOM2005 folder to install the Directory Analyzer Product Connector and Dell MOM Product Connector Configuration tool. 3 Double-click this file to launch the Directory Analyzer MOM Product Connector InstallShield wizard. 4 Enter the requested information on the wizard screens as described below. NOTE: If you are installing the Directory Analyzer MOM Product Connector on a running Enterprise Agent, you will need to disconnect then reconnect the Enterprise Agent to display MOM-applicable controls within the Directory Analyzer client. Directory Analyzer MOM Product Connector InstallShield Wizard Double-clicking the Dell Directory Analyzer Product Connector.msi file will launch the Directory Analyzer MOM Product Connector InstallShield wizard. The following table provides a description of the wizard screens and the information that is to be provided. Table 4. Directory Analyzer MOM Product Connector InstallShield Wizard screens Welcome Double-click the file to launch the Welcome screen of the Directory Analyzer MOM Product Connector InstallShield Wizard. License Agreement Select the I accept the terms in the license agreement option to acknowledge that you have read and agree to the terms of the agreement. If you do not accept the terms of the agreement, the installation program will not continue. Customer Information After licensing the product, the setup wizard will prompt you for user information on the Customer Information screen. User Name Enter the name of the user currently logged in. Organization Enter the name of this user s company/organization. Install this application for Select one of the two options to specify whether the application is to be added to a user profile for all users or a specific user: Anyone who uses this computer (all users) (default) Only for me (current user) Setup Type The Setup Type screen allows you to choose which setup type you prefer. Complete Select this option to install all product features. Custom Select this option to choose which features to install and the location where you want to install them. Recommended for advanced users. Ready to Install the Program The wizard is now ready to install the program. Click the Install button to begin installing the Dell MOM Product Connector Configuration tool. 28

29 Table 4. Directory Analyzer MOM Product Connector InstallShield Wizard screens InstallShield Wizard Complete The final screen will display when the installation has completed. The Directory Analyzer Product Connector is now installed. By default, the Launch the Configuration Tool box is selected. Clear this box if you wish to configure the Directory Analyzer MOM Product Connector at a later time, otherwise click the Finish button to launch the configuration tool immediately. Configuring and registering the Directory Analyzer MOM Product Connector The Configuration Tool registers the Directory Analyzer MOM Product Connector with MOM and starts the connector service. It launches immediately once the Directory Analyzer Product Connector wizard completes installation of the connector and tool (if the Launch the Configuration Tool box was selected). Otherwise, you can launch the Configuration tool by running the ConfigurationTool.exe file that was previously installed by the.msi. You can locate the file at Start Dell Directory Analyzer Dell MOM Product Connector Configuration, or C:\Program Files\Dell\DirectoryAnalyzer\MOMConnector. The Directory Analyzer to MOM Product Connector Configuration Wizard will launch. NOTE: You are able to click Finish at any time from the following screens, as most of the fields in the Configuration tool will already contain information previously entered when the Enterprise Agent was installed. See Installing the Enterprise Agent for more details. Directory Analyzer to MOM Product Connector Configuration wizard The following table provides a description of the wizard screens and the information that is to be provided. Table 5. Directory Analyzer to MOM Product Connector Configuration wizard screens Select Operation At startup, verify that the Register Directory Analyzer Product Connector radio button is selected. Configure the Connector On the Enterprise Agent Configuration screen, verify that the Enterprise Agent server and the database instance name are correct. Enterprise Agent DNS Name Specifies the server where the Enterprise Agent is located. Enterprise Agent Database Specifies the name of the Enterprise Agent database. Instance Credentials for the EA Server s SQL Database Verify the settings to use to connect the Enterprise Agent to the database. Use Windows Integrated Authentication (default) Use LocalSystem to Access EA Database Specifies that Integrated Windows Authentication will be used to authenticate the following credentials. Select this option if you want to use the LocalSystem to access the EA database. 29

30 Table 5. Directory Analyzer to MOM Product Connector Configuration wizard screens Supply Windows Credentials (default) Select this option if you want to supply Windows credentials, then enter the appropriate information into the following fields: Account Domain - Specifies the domain for the Windows account to be used to access the SQL server/instance. Username for Windows Account - Specifies the username for the Windows account to be used to access the SQL server/instance. Password / Confirm Password - Specifies the password associated with the user account entered above. Configuration for Connection to the MOM Server This screen prompts you to configure the MOM service connection. MOM Server URI Type the URI you used to validate MOM service. Product Connector Resolution State Name Product Connector Resolution ID Specifies the name of the product connector as you want it to appear in the MOM system. Specifies the resolution state value that MOM will use when an alert status is assigned to Directory Analyzer. Assigned to Directory Analyzer Specifies the value that was assigned from the MOM Administrator console. Resolution ID This value should be one more than the Product Connector Resolution ID specified above. Update Interval (in seconds) Specifies the frequency that the Dell MOM connector service polls the MOM Management server for New/Updated Alerts. Default: 20 seconds. Maintenance Interval (in seconds) Specifies the frequency with which the Dell MOM Connector service will clean resolved alerts from the Enterprise Agent database. Default: 3600 seconds. Credentials Required to Access MOM Connector Service This screen prompts you to enter credentials to access MOM Connector Service. NOTE: This account must be a local admin to the machine from which the MOM Connector Service is run. NOTE: It is recommended that you use the same credentials used in prior steps to verify access to the connector service. Use LocalSystem credentials for MOM Access (not recommended) Supply Windows Credentials (default) Select this option if you want to use LocalSystem credentials to access MOM Connector Service. Select this option if you want to supply Windows credentials, then enter the appropriate information into the following fields: Account Domain - Specifies the domain for the Windows account to be used to access the SQL server/instance. Windows Username - Specifies the username for the Windows account to be used to access the SQL server/instance. Password - Specifies the password associated with the user account entered above. Register the Product Connector with MOM The registration page displays a summary of the configurations up to this point. Click the Register button to add the product connector to MOM. NOTE: If this is the first time creating the connector, or if the service has not yet been registered, the Next button will be disabled. Only after the register process has completed is the button enabled, then you MUST click the Next button to continue to the following screen. 30

31 Table 5. Directory Analyzer to MOM Product Connector Configuration wizard screens Configuration Wizard Complete When registration is complete, click the Start Service button which starts/restarts the connector service. Upon successful startup of the service, a message will display notifying you that the service has or has not been started. Click OK, then click the Finish button on the wizard screen to exit. Once the Enterprise Agent communicates to the Directory Analyzer Client that a MOM Connector is available and running, the client will display a message indicating that the MOM connector is now available, and will enable the appropriate tabs, pages and controls. NOTE: When the DA Client is informed that the MOM Connector is not available, the client will display a message indicating the loss of the connector, then disable MOM tabs and hide/remove related pages and controls. The control switches to the Current Alerts tab when the MOM tab becomes disabled. A message displays to inform you once the connector becomes available again, and the MOM tabs and pages are reenabled. Using the MOM/Directory Analyzer Product Connector Service This section explains how to use the Directory Analyzer MOM Product Connector Service to perform the following tasks: Assign alerts from MOM to Directory Analyzer Respond to assigned alerts within the Directory Analyzer console Use Directory Troubleshooter integration Assign alerts from MOM to Directory Analyzer Once the product connector service is running, you will need to assign an alert to Directory Analyzer from MOM. To assign alerts: 1 Open the MOM Operations Console on your MOM server and go to the Alert View. 2 Set the resolution state of the alert to Directory Analyzer Product Connector. 3 When the alert returns as Assigned to Directory Analyzer, the Enterprise Agent has received the alert information from MOM and has placed the information into the agent s SQL store and acknowledged receipt to MOM. Respond to assigned alerts within the Directory Analyzer console From the Directory Analyzer console you can: change the alert resolution state view alert product knowledge (via the More Info button) view and add alert history. 31

32 To respond to alerts: 1 Launch the Directory Analyzer Console and connect to the Enterprise Agent that is also running the Directory Analyzer/MOM Product Connector Service. 2 To view MOM alerts, select the Windows menu and MOM Alerts. Use Directory Troubleshooter integration You can use Directory Troubleshooter integration in the same way as with Enterprise Agent generated alerts. Within the MOM console, you can assign alerts from the Microsoft Active Directory Management Pack to the Directory Analyzer Product connector. To use Directory Troubleshooter integration: 1 In the Directory Analyzer console, select the MOM alert from the MOM Alerts tab grid. 2 Select the Directory Troubleshooter tab from the lower pane. Pre-selected facilities related to the selected MOM alert will display. Unregistering the Dell MOM Product Connector To uninstall the connector service, you must unregister the Directory Analyzer Product Connector with MOM using the Dell MOM Product Connector Configuration Wizard. TIP: It is recommended that you first manually stop the MOM Connector Service using Services from Administrative Tools in the Start menu. To unregister the MOM Product Connector: 1 Run the ConfigurationTool.exe file that was installed by the Directory Analyzer Product Connector.MSI file. The file can be found at: Start Programs Dell Directory Analyzer Dell MOM Product Connector Configuration or C:\Program Files\Dell\DirectoryAnalyzer\MOMConnector. 2 Once the configuration tool launches, select Unregister DirectoryAnalyzer Product Connector, then click the Next button. 3 The connector location will show in the display window. Click the Unregister button to begin unregistering the product connector. The following screen will display its progress. 4 When the screen states that the connector is unregistered, you will continue to the last screen. The Configuration Wizard has completed the unregistration, and you can now uninstall the MOM Product Connector and the Directory Analyzer Connector. Uninstalling the MOM Product Connector To uninstall the MOM Product Connector: 1 From the Control Panel, open Add/Remove Programs on the computer with MOM locally installed. 2 Select Microsoft Operations Manager, then click the Change button. The MOM Setup Wizard will launch. Click Next. 3 By default, the Modify button is selected. Click Next. 4 On the Custom Setup page, expand MOM 2005 Management Server. 32

33 5 Click the down arrow next to the MOM Connector Framework, then select This component will not be available. 6 Click the down arrow next to the MOM Product Connector, then select This component will not be available. Click Next. The Setup Wizard will complete the uninstallation or provide you with details of a failed uninstall. Uninstalling the Directory Analyzer MOM Product Connector NOTE: If you uninstall the connector while it is running, it may not uninstall completely. Ensure that you have unregistered the connector using the Dell MOM Product Configuration tool. To uninstall the product connector: 1 From the Control Panel, open Add/Remove Programs on the computer where the Directory Analyzer Product Connector is installed. 2 Click Remove. A dialog will display prompting you to verify whether you want to remove the product connector. Click Yes to confirm the uninstall operation. 33

34 7 Removing Directory Analyzer Overview Removing Site and DC Agents Removing the Directory Analyzer Client Removing the Enterprise Agent Overview This chapter explains how to remove Directory Analyzer from your Active Directory network. Directory Analyzer components should be removed in the following order: Site and DC Agents (using the Deployment Wizard) Client (using Add/Remove Programs) Enterprise Agent (using Add/Remove Programs) Removing Site and DC Agents You will use the Deployment Wizard to remove Site and DC Agents. To remove Site and DC Agents: 1 Select Start Programs Dell Directory Analyzer Directory Analyzer Deployment Wizard to launch the Deployment Wizard. The Deployment Wizard screens are the same as the initial installation screens, except that you now have additional actions that can be taken against a domain controller. 2 On the Agent Configuration screen, select/highlight the Site or Enterprise. Click on the action and select Remove All Agents. 3 On the Deployment Action Summary screen, review your selections to ensure they are correct and click Execute to start the removal process. 34

35 Agent Deployment Wizard The following table walks through the Deployment Wizard screens and provides information that applies to removing Site and DC Agents. Table 6. Agent Deployment Wizard screens Welcome to the Directory Analyzer Deployment Wizard The first screen displayed is the Welcome screen for the Deployment Wizard. Select an LDAP Server The Select an LDAP Server screen allows you to specify a Windows Server 2003/2003 R2/2008/2008 R2/2012 server to be used to determine the site layout of your network. This screen also allows you to specify alternate LDAP credentials to be used for read and write access to Active Directory. Once the site layout has been determined with the specified rights, the remaining steps of the wizard will use the credentials of the logged in user. The currently logged in user must have sufficient rights to copy files to the servers; create, remove, stop and start services; and read and write the registry on the remote machines (including HKLM\SOFTWARE and HKLM\SYSTEM\CurrentControlSet). NOTE: If you have Directory Analyzer version 1.6 or greater installed, then the Deployment Wizard uses the credentials of the user it is running as to check the Agent Topology facility for permission to continue. It does not use the LDAP credentials. Please see the Dell Directory Analyzer Security Administrator's Guide for details. For access to Active Directory, the Deployment Wizard can use the credentials of the user it is running as, or you can provide different credentials by unchecking the Use Windows credentials as LDAP credentials check box. The credentials from this screen are used for all reads and writes to Active Directory. The Deployment Wizard writes to Active Directory for the following: Installation of Directory Analyzer base security. Extended rights are added to the Extended- Rights container of the Configuration NC, and a container called Dell is added to the Services container in the Configuration NC. This is required and is not optional, but is only done once. If base security has not been installed, then the credentials provided here will need permission to do this, which typically means Enterprise Admin level access. Optional installation of a security group and DACL attribution. This feature is explained in detail later in the deployment process. If you choose to install this optional feature, then the credentials provided here will need permissions equivalent to Enterprise Admin and Schema Admin level access. Domain Controller Enter the fully qualified DNS name of a Windows Server 2003/2003 R2/2008/2008 R2/2012 domain controller. Use Windows credentials as LDAP credentials Domain Name User ID Password Tell Me More Select this check box to use the current Windows credentials as the LDAP credentials. Uncheck this check box to specify alternate credentials. Enter the name of the domain to be used by the Deployment Wizard to access Active Directory. Enter the name of the user to be used to access Active Directory. Enter the password associated with the user ID entered above. Click the Tell Me More button for a thorough explanation of the credentials the wizard uses. Specify Enterprise Agent The wizard will then display the name of the member server (or domain controller) currently hosting your Enterprise Agent. If the name of your Enterprise Agent is not being displayed, use the arrow and select it from the drop-down list or enter the name of the member server (or domain controller) that is hosting your Enterprise Agent. Click Next to continue. Determine Configuration The wizard will then ask you to wait while it queries the Enterprise Agent to obtain the necessary configuration information needed to proceed. Click Next to continue. 35

36 Table 6. Agent Deployment Wizard screens Agent Configuration The Agent Configuration screen will allow you to remove individual agents or all Directory Analyzer agents from a site or from the entire enterprise. To remove individual agents 1 Select/highlight the domain controller(s) that contain an agent that is to be removed. 2 Click on the action and select the appropriate action: Remove Site Agent or Remove DC Agent. To remove all agents from a Site 1 Select/highlight the Site or Enterprise. or the entire Enterprise 2 Click on the action and select Remove All Agents. Deployment Action Summary A screen similar to the Agent Configuration screen will be displayed that summarizes the configuration changes you are about to apply to your enterprise. Review your selections to ensure they are correct and click Execute to start the removal process. After clicking the Execute button, the Status column will detail the status of the removal process. If errors were encountered, a red X will mark the objects (Directory column) that generated the error(s). In addition, if you click on a server, real-time status will be displayed in the text box at the bottom of the screen. The View Log button will become available, which you can click if you want to view the text file containing a detailed log of the steps taken during the process and any errors that occurred. Once the removal process is completed, a pop-up will display stating that the process was successful or warning you that errors were encountered. Deployment Wizard Complete The Deployment Wizard Complete screen will then be displayed. This screen displays whether there were any errors encountered during the removal process as well as Dell contact information. To view the errors or logs for the removal process, click the View Log button. Click OK to close the wizard. Removing the Directory Analyzer Client Once you have removed the Site and DC agents, you can then remove the Directory Analyzer Client. To remove the Directory Analyzer Client, use the Windows Add/Remove Programs facility, as described below. To remove the Directory Analyzer Client: 1 From the Start menu, select Settings Control Panel Add/Remove Programs. 2 Select/highlight Dell Directory Analyzer Client and click the Remove button. Removing the Enterprise Agent Once you have removed the DC and Site agents and the Client, you can then remove the Enterprise Agent. To remove the Directory Analyzer Enterprise Agent, use the Windows Add/Remove Programs facility, as described below. To remove the Directory Analyzer Enterprise Agent: 1 From the Start menu, select Settings Control Panel Add/Remove Programs. 2 Select/highlight Dell Directory Analyzer Enterprise Agent and click the Change button. 3 The Enterprise Agent Wizard will run. Select Remove from the options presented. 36

37 A Directory Analyzer and SNMP Directory Analyzer uses the Windows 2000 SNMP service to send alert messages via SNMP traps. To generate SNMP traps, the Windows 2000 SNMP service must be installed and properly configured on the machine(s) that hosts a Directory Analyzer Enterprise Agent. The Enterprise Agent can then communicate the alert information to the Windows 2000 SNMP service. NOTE: SNMP is not supported if running Directory Analyzer on Windows Server NOTE: In the SNMP Trap message, the first variable of each trap refers to the following severity levels: 0 = Disabled 1 = Clear 2 = Warning 3 = Critical To enable SNMP alert capability in Directory Analyzer: 1 Install the SNMP service (if it is not already installed) on the machine that will host the Directory Analyzer Enterprise Agent: Select Start Settings Control Panel Add/Remove Programs. Select Add/Remove Windows Components. Select Management and Monitoring Tools and click on Details. Check the box for Simple Network Management Protocol and click OK. Click Next and follow the instructions until the installation process is complete. 2 Configure the SNMP service: Select Start Settings Control Panel Administrative Tools. Select Services. Scroll down and find SNMP Service. Right-click on SNMP Service and select Properties. Select the Traps tab and add a Community name of Public and Trap destinations that contain the IP addresses of the machines that will receive the SNMP traps, then click OK. 3 Stop and restart the SNMP Service. 4 Compile the Directory Analyzer MIB into the SNMP management console(s) on the machine specified to receive SNMP traps in Step 2. Copy the Directory Analyzer MIB (C:\Program Files\Dell\DirectoryAnalyzer\Enterprise Agent\DA.MIB) to the appropriate computer(s). Use the compile or load utility that is associated with the management console you are using. (Consult your management console documentation for detailed instructions.) 5 Install Directory Analyzer, making sure to specify, Yes, I have the Windows SNMP service installed, configure DA to use it on the SNMP Configuration screen when running the Enterprise Agent MSI package. 37

38 6 Confirm that the Directory Analyzer Client has SNMP Alerts enabled. Launch the Directory Analyzer Client (Start Programs Dell Directory Analyzer Directory Analyzer Client). Select Options and verify that SNMP Alerts has a check mark next to it. 38

39 Importing and Configuring the Directory Analyzer MOM Management Pack B Directory Analyzer alert information can be accessed via the Directory Analyzer MOM Management Pack. This appendix explains the requirements and procedures for installing the Directory Analyzer MOM Management Pack, which is located in the \Install\MOM2005 directory on the Directory Analyzer Product DVD. Microsoft Operations Manager (MOM) integration Directory Analyzer extends its Active Directory monitoring and alerting coverage to one of the leading network management consoles: Microsoft Operations Manager (MOM). The Microsoft Operations Manager console interface can be configured to receive all Directory Analyzer alerts and view the Directory Analyzer knowledge base entries for alerts (vendor information placed into MOM as Product/Company Knowledge ). Directory Analyzer utilizes MOM s Management Pack technology for the integration path between the two products enabling administrators who use the Microsoft Operations Manager console to obtain the most detailed view and analysis of Active Directory issues. Requirements MOM must be installed before the Directory Analyzer MOM Management Pack can be used. For more information about MOM, go to the Microsoft Operations Manager Web site ( A MOM agent must reside on the Directory Analyzer Enterprise Agent in order to enable the Directory Analyzer MOM Management Pack. For more information about installing MOM, see Microsoft Operations Manager Help. Directory Analyzer must be installed, as described earlier in this document. Importing/updating the Directory Analyzer Management Pack To monitor an Active Directory Enterprise, the Directory Analyzer Management Pack must be imported into Microsoft Operations Manager (MOM). This can be done by performing the following actions: To import the Directory Analyzer Management Pack into MOM: 1 On the Start menu, point to Programs > Microsoft Operations Manager, and then click MOM Administrator Console. 2 In the left pane, highlight Microsoft Operations Manager (default), then from the right pane, select option 2, Import Management Pack. The Management Pack Import/Export Wizard launches. 3 Click Next to display the following screen, select the Import Management Packs and/or reports option (default), then click Next again. 39

40 4 The screen will prompt you to select a folder where the management pack is located. Click the Browse button to search for the Directory Analyzer Product DVD. Locate the MOM2005 directory. In the Type of Import box, Import Management Packs only is selected by default. Click Next. 5 The Select Management Packs screen will display a list of packs located in the MOM 2005 folder. Highlight Directory Analyzer Management Pack.akm 6 You can select from further import options to update (default) or replace an existing pack. Select the Backup existing Management Pack (default) check box to save a backup of a current pack and click the Browse button to locate the specific pack. Once your option preferences have been selected, click Next to continue. 7 The final wizard screen allows you to review your selections. Click Finish to close the wizard and begin importing the Directory Analyzer Management Pack. A dialog will display the status of the import operation. 8 After importing, the following should be present and displayed within the MOM Administrator Console: A Dell Directory Analyzer rule group. Under that will be rule groups for DC Alerts, NC Alerts, and Site Alerts. Dell Directory Analyzer Alerts view under "All: Alert Views" Dell Directory Analyzer TopLevelComponent Computer Attribute (determines what servers are Directory Analyzer Enterprise Agents) Dell Directory Analyzer Enterprise Agent Computer Group Next, you will need to verify that the MOM server is configured properly. Configuring the MOM server After importing the management pack into MOM, you will need to make sure that the MOM server is configured in order to verify that the changes to the configuration will be committed. NOTE: If the changes aren t committed, the rules are not sent until the Agent Request configuration interval completes. NOTE: If the imported management pack appears to function incorrectly, verify that the MOM Agent Action Account has enough privileges. To configure the MOM server: 1 From the MOM 2005 Administrator Console, select Global Settings in the Administration folder from the explorer. 2 Double-click Security from the settings which display in the right pane. The Security tab will display. 3 Verify that the Disable Execution check box is de-selected (unchecked). If checked, de-select the box then click Apply, then OK, and close the dialog. 40

41 Directory Analyzer Database Access and Event Log C Database access Database credentials Requisite privileges Event Log Database access Directory Analyzer supports both SQL Server authentication modes: Windows SQL Server Refer to the Microsoft SQL Server documentation for a detailed description of supported authentication modes. Windows (Integrated) This is the recommended authentication mode. SQL Server (Mixed Mode) In order to utilize SQL Server authentication, the server instance must be configured to support both SQL Server and Windows authentication. In SQL Server Enterprise Manager, this appears on the Security property page of the database instance. 41

42 Figure 3. SQL Server Properties (Configure) When attempting to connect to a database instance using SQL Server credentials, the following error message generally indicates that the database instance has not been configured to support SQL Server authentication: Login failed for user user-name. Reason: Not associated with a trusted SQL Server connection. Database credentials Server requirements With the typical Directory Analyzer installation, the Enterprise Agent service does not require dedicated database credentials to access the database. In a typical installation, SQL Server 2005 Express Edition is installed on the Enterprise Agent host. Consequently, the Enterprise Agent service utilizes the authority of the Local System Account to access the database. No additional intervention is required. If, however, you wish to use a pre-existing SQL Server instance, you must select a SQL Server authentication mode and supply the appropriate credentials during the installation process. The credentials are encrypted and submitted to the Local System Authority of the Enterprise Agent host for safe keeping. After installation, the DAConfigureDatabase utility can be used to modify the credentials used to access the database. The path to this executable is found at: C:\Program Files\Dell\ DirectoryAnalyzer\Enterprise Agent\ To modify existing credentials: 1 Prior to running the DAConfigureDatabase command, stop the Enterprise Agent service. 2 Enter DAConfigureDatabase at the command prompt. The Database Properties screen will be displayed. IMPORTANT: Directory Analyzer does not cache credentials. The credentials are managed by the LSA (Local System Authority) of the host computer. Consequently, the installer package and the database configuration utility (DAConfigureDatabase) must be executed on the host computer. 42

43 3 Enter the appropriate database credentials. NOTE: SQL Server authentication mode can also be specified by simply deselecting (unchecking) the Windows Authentication check box at the bottom of this dialog. 4 Click OK to save this information and close the dialog. 5 Once you have set the credentials, re-start the Enterprise Agent. If the Enterprise Agent service does not start after the credentials have been modified, review the System Event Log on the host computer for error entries of the form: The Directory Analyzer Enterprise Agent was unable to access database-instancename. Directory Analyzer cannot run without access to the database. This error generally indicates that the credentials are not recognized by the database instance. DAConfigureDatabase can also be used to remove the credentials entirely. This has the effect of reverting to the Local System credentials. To remove the database credentials, enter the following command at the command prompt: DAConfigureDatabase /remove Client requirements Both Windows and SQL Server authentication modes are supported. Client applications are prompted for credentials at each access request. Currently the only client application that requires database access is the Alert History application. Requisite privileges Server requirements In order to execute the database creation scripts, the account used by the Directory Analyzer Agent requires the privileges of the dbcreator server role on database Master. The privileges required are: Add Member to dbcreator ALTER DATABASE CREATE DATABASE DROP DATABASE Extend Database In addition, the account must be granted EXECUTE privileges on the following stored procedures in the Master database: sp_msget_setup_paths You may elect to execute the SQL scripts manually in order to avoid assigning the dbcreator role to the account used by the agent. Scripts must be executed in ascending order: Dell-DirectoryAnalyzer-3-0.sql Dell-DirectoryAnalyzer-3-1.sql Once the database has been created, all server roles for the account can be removed. The following database roles for the DirAnalyzer database are required (and should be assigned by default) to the account: public, db_owner. Note that the agent executes the database schema creation scripts if the schema version number does not match the version expected by the agent. If the schema version is up-to-date, the agent DOES NOT execute the scripts. 43

44 Client requirements (reports) No server roles are required. The account must be assigned the following database roles for the DirAnalyzer database: public, db_datareader. In addition, EXECUTE permission must be granted on the following stored procedures used in generating reports: AlertCurrent AlertHistoryByDate AlertHistoryByNC AlertHistoryByServer AlertHistoryBySite AlertHistoryByStateDate AlertHistoryBySubjectType Event Log The following System Event Log entry is classified as an error: The Directory Analyzer Enterprise Agent was unable to initialize its identity from LDAP. Directory Analyzer cannot run without this information. 44

45 About Dell Dell listens to customers and delivers worldwide innovative technology, business solutions and services they trust and value. For more information, visit Contacting Dell Technical Support: Online Support Product Questions and Sales: (800) Technical Support Resources Technical support is available to customers who have purchased Dell software with a valid maintenance contract and to customers who have trial versions. To access the Support Portal, go to The Support Portal provides self-help tools you can use to solve problems quickly and independently, 24 hours a day, 365 days a year. In addition, the portal provides direct access to product support engineers through an online Service Request system. The site enables you to: Create, update, and manage Service Requests (cases) View Knowledge Base articles Obtain product notifications Download software. For trial software, go to Trial Downloads. View how-to videos Engage in community discussions Chat with a support engineer 45

46 Index A Agent Configuration screen, 21, 36 Agents Removing, 34 Responsiblity, 21 Alerts Assigning from MOM to Directory Analyzer, 31 Alternate Enterprise Agent, 13 Assigning alerts from MOM to Directory Analyzer, 31 C Client Installation overview, 7 Installing, 16 Removing, 36 Requirements, 6 Client requirements Requisite database privileges, 44 Communications protocol and ports, 7 Configuring Alternate Enterprise Agent, 13 D DA Web internals, 23 DAConfigureDatabase utility, 42 Database access, 41 Database credentials Client requirements, 43 Server requirements, 42 DC Agent Installation overview, 7 Removing, 34 Requirements, 6 Responsibility, 21 Deployment Action Summary screen, 22 Deployment Wizard Installing, 16 Launching, 20 Log file, 22 Screens, 20, 35 Directory Analyzer Configuration tool, 28 Installing MOM Product Connector, 28 Installing MOM Product Connector Service, 31 Directory Troubleshooter Requirements, 6 E Enterprise Agent Configuration screen, 13 Configuring alternate, 13 Installation overview, 7 Removing, 36 Requirements, 6 I Importing Directory Analyzer Management Pack, 39 Installation Overview, 7 Sample scenario, 8 SQL Server Express, 7 Installing Client and Deployment Wizard, 16 Enterprise Agent, 11 L LDAP credentials, 20, 35 Licensing product, 12 Log file, 22 M Microsoft Operations Manager (MOM) Configure MOM Server, 40 Configuring Connector Service, 27 Configuring Server, 27 Connector Service Installation, 29 Importing/Updating Directory Analyzer Management Pack, 39 Integration, 39 Requirements, 39 Server Connection Configuration, 29 Validating Service Availability and Credentials, 27 P Product Licensing screen, 12 46

47 R Removing Client, 36 Enterprise Agent, 36 Web Portal, 25 Requirements Client, 6 DA Web Portal, 23 DC Agent Servers, 6 Directory Troubleshooter, 6 Enterprise Agent Server, 6 Site Agent Servers, 6 Web Portal, 6 Requisite privileges Client requirements, 44 Server requirements, 43 Resolution State Assigning alerts, 31 S Select an LDAP Server screen, 20, 35 Server requirements Database credentials, 42 Requisite database privileges, 43 Site Agent Installation overview, 7 Requirements, 6 Responsibility, 21 SNMP Configuration screen, 13 SQL Server Desktop Engine screen, 14 SSL Encryption, 24 System requirements, 6 U Updating Directory Analyzer Management Pack, 39 W Web Portal DAWeb Internals, 23 Removing, 25 Requirements, 6, 23 SSL Encryption, 24 47