[hobbit] Monitoring AD

Thu Aug 7 08:52:12 CEST 2008

DCDiags and NetDiags are the basic tests to run. I run them both every
morning using the VBscript below. I have hard coded in the ignore of
some error messages that may not suit your application. I run the script
as a scheduled task and it saves the flag(log) file to the path
specified in the registry by BBWin (the big brother log path). 

You need to make sure that BBWin (or the Big Brother client) is looking
in the same directory. The original code at the being that gets this has
been commented out and replace by the GetBigBrotherPath function. I
would clean up the code but wouldn't be game to post it with out testing
it first.

Hope this is the sort of thing you are after.

Regards
Graeme

'-----------------------------------Start
Code-------------------------------------
Option Explicit
'***********************************************************************
*******************************
' Run DcDiag and NetDiag. Report result of tests to Big Brother.
' save copy of output to current folder to help diagnose any errors.
' 17/08/06 Graeme Shea
' Added ignor of dc link test. 05/09/06 Graeme Shea
' Fixed capialisation problem with ignore of dc link test. 07/09/06
Graeme Shea
' V1.3 Added ignore of concerrent error msg with error of dc link test.
14/09/06 Graeme Shea
' V1.4 Added ignore of WAN test. 1/10/06 Graeme Shea
' V1.4.1 Added ignore of FRS events from previous 24hrs. 3/12/06 Graeme
Shea
' V1.4.2 Added ignore of a syslog event from previous 24hrs. 20/02
Graeme Shea
' V1.5.0 BBWin compatable. 20/02 Graeme Shea
'***********************************************************************
********************************

Dim oShell,oFile,FSO,ExtPath, szResult, szOutPut, szDelay
Const Version = "1.4.2"

Set FSO= CreateObject("Scripting.FileSystemObject")

szDelay = "+27h" 'Sets the PURPLEDELAY for this service check - change
to match frequency of defrag

szOutput = ""

' Retrieve path to big brother log files
ExtPath = GetBigBrotherPath
Set oShell = WScript.CreateObject("WScript.Shell")
    'On Error Resume Next
	'ExtPath = oShell.RegRead("HKLM\SOFTWARE\Quest
Software\BigBrother\bbnt\ExternalPath\")
	'IF 64 bit system then reg file has moved and will raise an
error.
	'If Err then
	 '  ExtPath = oShell.RegRead("HKLM\SOFTWARE\Wow6432node\Quest
Software\BigBrother\bbnt\ExternalPath\")
	 '  err.clear
      '  End if
on Error GoTo 0

szResult = runoutput("cmd /C dcdiag.exe",1, "DcDiag.txt")
szResult = lCase(szResult)

if instr(szResult, "failed test frsevent")>0 Then
	'If the FRS is not working now will still raise error. I'm not
very concerned
	' if there was an error of some sort in the last 24hrs.
	szResult = Replace (szResult, "failed test frsevent", " ")
	szResult = Replace (szResult, "failing sysvol replication", " ")
	szOutPut = szOutPut & vbcrlf &  "&yellow FRS Event Ignored. "
	'MsgBox "in fail system log"

end If

if instr(szResult, "failed test systemlog")>0 Then
	'If there are errors in the system log you have allready been
advised
	' no need to have a red dot for the whole day.
	szResult = Replace (szResult, "failed test systemlog", " ")
	szOutPut = szOutPut & vbcrlf &  "&yellow System Log Error
Ignored. "
	'MsgBox "in fail system log"
	if instr(szResult, "browser service has failed to retrieve
the")>0 Then
		'MsgBox "The browser service has failed to retrieve the"
   		szResult = replace (szResult, " failed to retrieve the",
" ")
		szOutPut = szOutPut & vbcrlf &  "&yellow Browser Error
Ignored. "
	end If
	if instr(szResult, "service failed to see a directory server")>0
Then
		'MsgBox "The browser service has failed to retrieve the"
   		szResult = replace (szResult, "service failed to see a
directory server", " ")
   		szResult = replace (szResult, "service failed to see a
directory server", " ") 'Error often in pairs
		szOutPut = szOutPut & vbcrlf &  "&yellow Syslog reported
a service couldnt see the directory server. "
	end If

end If

' msgbox "szOutput = " & szOutPut
if instr(szResult, "fail") > 0 Then
   szOutPut = szOutPut  & VbCrLf & "&red DcDiag test failed. " & VbCrLf
& VbCrLf
   else szOutPut = szOutPut  & VbCrLf & "&green DcDiag test passed. " &
VbCrLf & VbCrLf
end If

szResult = runoutput("cmd /C netdiag.exe",1, "NetDiag.txt")
szResult = lCase(szResult)

if instr(szResult, "default gateway test . . . : failed")>0 then
   'VicSmart Routers allways seem to fail gateway test so ignore
   szResult = replace (szResult, "default gateway test . . . : failed",
" ")
   szResult = replace (szResult, "default gateway test . . . . . . . :
failed", " ")
   szOutPut = szOutPut & vbcrlf &  "&yellow NetDiag Default Gateway Test
Failure Ignored. " & VbCrLf
end If

if instr(szResult, "domain membership test . . . . . . : failed")>0 Then
   'When the Big Brother client is running under the system account it
cannot access
   ' the network to check domain membership.  If you run under another
account you
   ' can comment this section out (I think)
   szResult = replace (szResult, "domain membership test . . . . . . :
failed", " ")
   szOutPut = szOutPut & vbcrlf &  "&yellow NetDiag Domain Membership
Test Failure Ignored. " & vbcrlf
end If

if instr(szResult, "dc list test . . . . . . . . . . . : failed")>0 Then
   'When the Big Brother client is running under the system account it
cannot access
   ' the network to check domain membership.  If you run under another
account you
   ' can comment this section out (I think)
   szResult = replace (szResult, "dc list test . . . . . . . . . . . :
failed", " ")
   ' This is an error message that occurs concurrntly and causes false
detection of error
   szResult = replace (szResult, "failed to enumerate dcs by using the
browser.", " ")
   szOutPut = szOutPut & VbCrLf &  "&yellow NetDiag DC list test Test
Failure Ignored. " & VbCrLf

end If

if instr(szResult, "wan configuration test . . . . . . : failed")>0 Then
   szResult = replace (szResult, "wan configuration test . . . . . . :
failed", " ")
   szOutPut = szOutPut & VbCrLf &  "&yellow NetDiag WAN configuration
Test Failure Ignored. " & VbCrLf

end If

if instr(szResult, "fail")> 0 Then
   szOutPut = szOutPut & "&red NetDiag test failed. " & VbCrLf
   else szOutPut = szOutPut & "&green NetDiag test passed. " & vbcrlf
end If

if instr(szOutPut, "fail")>0 then
   szOutPut = "red" & szDelay & "   " & now & vbcrlf & vbcrlf & szOutPut
   else szOutPut = "green" & szDelay & "   " &Now & vbcrlf & vbcrlf &
szOutPut
end if

Set oFile = FSO.OpenTextFile(ExtPath &"\dcdiags", 2, True)
oFile.write(szOutput)
oFile.WriteBlankLines(2)
oFile.WriteLine "DCDiags Check, BBDCDiags.vbs Version " & Version
oFile.close

Function RunOutput( cProgram, nWindowType, szTempFileName )
' Run a program and save results to szTempFileName
' Got this routing of the net somewhere.
   Dim oFS
   Set oFS = CreateObject("Scripting.FileSystemObject")
   Dim oShell
   Set oShell = CreateObject( "WScript.Shell" )
   oShell.Run cProgram & " > " & szTempFileName, nWindowType, True
   Dim oFile
   Set oFile = oFS.OpenTextFile(szTempFileName, 1, True)
   RunOutput = oFile.ReadAll()
   oFile.Close
   Set oShell = Nothing
 End Function

function Convert2Text(sTemp)
	' Converts non printable characters to " " , so that Textfile is
working
	dim loopcount, tempwert, inttest
	tempwert=""
	for loopcount = 1 to len(sTemp)   ' replace all unprintable
characters  maybe easier and faster with RegEx
		 inttest = ascw(mid(sTemp,loopcount,1))
		'if ((inttest>=32) and (inttest<127)) or (inttest=10) or
(inttest=13) or (inttest=9) then
		if ((inttest>=32) and (inttest<127)) then
			 tempwert = tempwert & chr(inttest)  ' printable
Character or CR LF TAB
		 else
			 tempwert = tempwert & " "
		 end if
		'tempwert = tempwert & chr(ascb(mid(sTemp,loopcount,1)))
	next
	Convert2Text = tempwert
end function

' Get path to external log files (for BB 1.08d)
Function GetBigBrotherPath()
Dim ExtPath
On Error Resume Next
ExtPath = wshShell.RegRead("HKLM\SOFTWARE\Quest
Software\BigBrother\bbnt\ExternalPath\")
If IsEmpty(ExtPath) Then
	ExtPath = wshShell.RegRead("HKLM\SOFTWARE\BBWin\tmppath")
End If
If Not IsEmpty (ExtPath) Then  'If not empty then we have 32bit machine
	b64Bit = False
End If
If IsEmpty(ExtPath) Then
	ExtPath = wshShell.RegRead("HKLM\SOFTWARE\Wow6432node\Quest
Software\BigBrother\bbnt\ExternalPath\")
End If
If IsEmpty(ExtPath) Then
	ExtPath =
wshShell.RegRead("HKLM\SOFTWARE\Wow6432node\BBWin\tmppath")
End If

If Not IsEmpty(ExtPath) And isEmpty(b64Bit) Then 
	b64Bit = True
	err.clear
End If

If IsEmpty(ExtPath) Then
	'Put exit stuff here
End If
on Error GoTo 0
GetBigBrotherPath = ExtPath
End Function

'-----------------------------------------End
Code---------------------------------------------------------------

-----Original Message-----
From: Everett, Vernon [mailto:Vernon.Everett at woodside.com.au] 
Sent: Thursday, 7 August 2008 3:20 PM
To: hobbit at hswn.dk
Subject: [hobbit] Monitoring AD

Hi all

Anybody got anything that keeps an eye on AD?

While I am asking, what about M$-Exchange?

Cheers
    Vernon

P.S. Guess who just a bunch of Windoze servers added to Hobbit. :-(

NOTICE: This email and any attachments are confidential. 
They may contain legally privileged information or 
copyright material. You must not read, copy, use or 
disclose them without authorisation. If you are not an 
intended recipient, please contact us at once by return 
email and then delete both messages and all attachments.

To unsubscribe from the hobbit list, send an e-mail to
hobbit-unsubscribe at hswn.dk

Important - This email and any attachments may be confidential. If received in error, please contact us and delete all copies. Before opening or using attachments check them for viruses and defects. Regardless of any loss, damage or consequence, whether caused by the negligence of the sender or not, resulting directly or indirectly from the use of any attached files our liability is limited to resupplying any affected attachments. Any representations or opinions expressed are those of the individual sender, and not necessarily those of the Department of Education and Early Childhood Development.