| Measurement |
Description |
Measurement
Unit |
Interpretation |
| Schema_cache_hit_ratio
|
This measure
shows the percentage of object name lookups available in the Schema
Cache. This cache is present in the Domain Controller. All changes
made to the Active Directory are first validated against this schema
cache. |
Percent
|
A low value of
this measure indicates that the Directory Service needs high disk
read/write activity to perform its job. This results in poor response
time of the components available in the Active Directory.
|
| Notify_qsize
|
When any change
in the Active Directory occurs, the originating domain controller
sends an update notification requests to the other domain controllers.
This measure shows the number of pending update notification requests
that have been queued and not transmitted. |
Number
|
A high value of
this measure indicates that the Active Directory is changing
frequently but the update notification requests have not been
transmitted to the other domain controllers. This results in a loss of
data integrity in the directory store. This problem can be corrected
by forcing the replication process.
|
| Curr_threads
|
This measure
shows the number of threads that are currently servicing the API calls
by the users. |
Number
|
A fluctuating
value for this measure indicates a change in the load.
|
| Directory_writes
|
This measure
shows the number of successful write operations made by the directory
service per second. |
Writes/Sec
|
A high value for
this measure indicates that the directory service has made write
operations in the Active Directory. This results in the fragmentation
of the Active Directory. This problem can be corrected by forcing the
replication process.
|
| Kerberos_auth_requests
|
This measure
shows the number of times per second that the user uses the user
credentials to authenticate himself or herself with the domain
controller that is being monitored. |
Reqs/Sec
|
A high value for
this measure indicates that the user requested some network resource,
which requires authentication.
Installing one or more Active Directory in the target environment
can solve this problem
|
| Ntlm_auth_requests
|
This measure
shows the number of times per second that the user uses the user
credentials to authenticate himself or herself with the domain
controller, which is having the PDC emulator operation role. |
Reqs/Sec
|
A high value for
this measure indicates that the user requested some network resource,
which basically belongs to the Windows NT network. Accessing this kind
of resource needs authentication, which is serviced by the domain
controller, who is having the PDC emulator operation role.
Installing one or more domain controllers with PDC emulator
operation role in the target environment can solve this problem.
|
| Ticket_requests
|
This measure
indicates the number of requests made by the Ticket Granting Service
per second. |
Reqs/Sec
|
A high value for
this measure indicates that the user requested some network resources,
which needs authentication.
Installing one or more domain controllers in the target environment
can solve this problem.
|
| Auth_srv_requests
|
This measure
indicates the number of requests made by the Authentication Server (to
obtain the TGT) per second. |
Reqs/Sec
|
A high value for
this measure indicates that the user requested some network resources,
which needs authentication.
Installing one or more domain controllers in the target environment
can solve this problem.
|
| Ldap_sessions
|
This measure
indicates the number of Ldap clients currently connected to the Active
Directory. |
Number
|
This measure is
just an indicator of the number of Ldap clients connected to the
Active Directory. A high or low value for this measure does not always
denote an error situation.
|