knowledge base
Monitoring Microsoft servers Domain Controller
The Monitorpack team regularly provides useful metrics to easily monitor your applications, devices and systems. These are basic measurements, if you want to go further Monitorpack software Guard is able to check all performance counters, services, processes, ports, event IDs, existing printers and shares in your IT environment.
The freemium version is sufficient to monitor your Windows server(s), just install it locally!
(You can install it on each server if necessary.)
Monitor Windows Performance counters
How to create a Perfmormance counter alert| Item | Performance | Instance | Rule | Value |
| 1 | Processor | Processor(_Total)\% Processor Time | > | 85 |
| 2 | Processor | Processor(_Total)\% User Time | < | 85 |
| 3 | Memory | Memory\Available Mbytes | < | 10% RAM |
| 4 | Network Interface | Network Interface(*)\Packets Outbound Errors | > | 0 |
| 5 | Logical Disk | \LogicalDisk(C:)\Avg. Disk sec/Write | > | 25 |
| 6 | Logical Disk | \LogicalDisk(C:)\Avg. Disk sec/Read | > | 25 |
| 7 | NTDS | \ATQ Request Latency | > | 100 |
| 8 | NTDS | \LDAP Client Sessions | < | 1 |
| - | - | - | - | - |
Monitor Windows processes
How to create a Windows Process alert| Item | Process | Process name | When | Status |
| 1 | DFS Service | dfssvc.exe | Stopped | True |
| 2 | DFS Replication Service | dfsrs.exe | Stopped | True |
| 3 | ADWS Service Monitor | Microsoft.ActiveDirectory.WebServices | Stopped | True |
| - | - | - | - | - |
Monitor Windows services
How to create a Windows Service alert| Item | Service | Service name | When | Status |
| 1 | Active Directory Web Service | ADWS | Stopped | True |
| 2 | Active Directory Domain Service | NTDS | Stopped | True |
| 3 | DFS Replication | DFSR | Stopped | True |
| 4 | Kerberos Key Distribution Center | Kdc | Stopped | True |
| - | - | - | - | - |
Monitor a TCP Port
How to create a Port or Ping alert| Item | TCP port | Socket name | Port | Value |
| 1 | Protocol TCP | LDAP | 389 | False |
| 2 | Protocol TCP | Kerberos | 88 | False |
| 3 | Protocol TCP | File Replication | 445 | False |
| 4 | Protocol TCP | Global Catalog | 3268 | False |
| 5 | Protocol TCP | DNS | 53 | Flase |
| - | - | - | - | - |
Monitor a Windows Share
How to create a Share alert| Item | Share | Share name | When | Value |
| 1 | SYSVOL | SYSVOL | Stopped | True |
| - | - | - | - | - |
Monitor Windows Event Viewer
How to create a Printer alert| Item | Printer | Printer name | Port | Status |
| - | - | - | - | - |
Monitor Windows Event Viewer
How to create a Event Viewer alert| Item | Event | Log Name | Level | Source | Number |
| 1 | DNS | DNS Server | Warning | Microsoft-Windows-DNS-Server-Service | 4013 |
| 2 | DFS Replication | DFS Replication | Warning | DFSR | 2212 |
| 3 | Directory Service | Directory Service | Warning | Microsoft-Windows-ActiveDirectory_DomainService | 1220 |
| 4 | Backup Partition | Directory Service | Warning | Microsoft-Windows-ActiveDirectory_DomainService | 2089 |
| 5 | ADWS | Active Directory Web Services | Error | ADWS | 1202 |
| - | - | - | - | - | - |