Actice Directory Issues and Troubleshooting

Event Open	Alert Desc/Product Knowledge	Impacted OS	Requested Action(s)
AD Web Services Monitor Failed	The Active Directory Web Service is not running. It may be stopped, starting, or shutting down.	Windows 2008 Only	"1. Validate the state of the service
2. Service in stopped or stopping state:
a. If the service is in stopped state, please attempt to restart the service.
b. If the service is in a hung state (stopping in service manager or services view) end the process via task manager once the executable is determined and then attempt to restart the service.
3. If the service restarts without incident, please close the associated event and/or incident.
4. If the service does not restart, please note the error message displayed and any events captured in Event Viewer and escalate the ticket to the Directory Services team.
"
Monitors the health of Windows Service: NTDS	The NTDS Service is not running.	Windows 2008 Only	"1. Validate the state of the service
2. Service in stopped or stopping state:
a. If the service is in stopped state, please attempt to restart the service.
b. If the service is in a hung state (stopping in service manager or services view) end the process via task manager once the executable is determined and then attempt to restart the service.
3. If the service restarts without incident, please close the associated event and/or incident.
4. If the service does not restart, please note the error message displayed and any events captured in Event Viewer and escalate the ticket to the Directory Services team.
"
The DFSR Service is currently in an unhealthy state	Monitors the health of the Windows Service: DFSR. Essential service for replication	Windows 2003 and Windows 2008	"1. Validate the state of the service
2. Service in stopped or stopping state:
a. If the service is in stopped state, please attempt to restart the service.
b. If the service is in a hung state (stopping in service manager or services view) end the process via task manager once the executable is determined and then attempt to restart the service.
3. If the service restarts without incident, please close the associated event and/or incident.
4. If the service does not restart, please note the error message displayed and any events captured in Event Viewer and escalate the ticket to the Directory Services team.
"
Monitors the health of the Windows Service: KDC	The KDC Service is currently in an unhealthy state	Windows 2003 and Windows 2008	"1. Validate the state of the service
2. Service in stopped or stopping state:
a. If the service is in stopped state, please attempt to restart the service.
b. If the service is in a hung state (stopping in service manager or services view) end the process via task manager once the executable is determined and then attempt to restart the service.
3. If the service restarts without incident, please close the associated event and/or incident.
4. If the service does not restart, please note the error message displayed and any events captured in Event Viewer and escalate the ticket to the Directory Services team.
"
Monitors the health of DCLocator	The domain controller is not advertising - Clients will not be able to locate this domain controller	Windows 2003 and Windows 2008	"1. Validate the state of the service
2. Service in stopped or stopping state:
a. If the service is in stopped state, please attempt to restart the service.
b. If the service is in a hung state (stopping in service manager or services view) end the process via task manager once the executable is determined and then attempt to restart the service.
3. If the service restarts without incident, please close the associated event and/or incident.
4. If the service does not restart, please note the error message displayed and any events captured in Event Viewer and escalate the ticket to the Directory Services team.
"
Monitors the health of the Windows Service: NetLogon	The NetLogon Service is currently in an unhealthy state	Windows 2003 and Windows 2008	"1. Validate the state of the service
2. Service in stopped or stopping state:
a. If the service is in stopped state, please attempt to restart the service.
b. If the service is in a hung state (stopping in service manager or services view) end the process via task manager once the executable is determined and then attempt to restart the service.
3. If the service restarts without incident, please close the associated event and/or incident.
4. If the service does not restart, please note the error message displayed and any events captured in Event Viewer and escalate the ticket to the Directory Services team.
"
Monitors the health of the Windows Service: NTFRS	The NTFRS Service is currently in an unhealthy state	Windows 2003 and Windows 2008	"1. Validate the state of the service
2. Service in stopped or stopping state:
a. If the service is in stopped state, please attempt to restart the service.
b. If the service is in a hung state (stopping in service manager or services view) end the process via task manager once the executable is determined and then attempt to restart the service.
3. If the service restarts without incident, please close the associated event and/or incident.
4. If the service does not restart, please note the error message displayed and any events captured in Event Viewer and escalate the ticket to the Directory Services team.
"
Monitors the health of Windows Service: DFS	The DFS Service is currently in an unhealthy state	Windows 2003 and Windows 2008	"1. Validate the state of the service
2. Service in stopped or stopping state:
a. If the service is in stopped state, please attempt to restart the service.
b. If the service is in a hung state (stopping in service manager or services view) end the process via task manager once the executable is determined and then attempt to restart the service.
3. If the service restarts without incident, please close the associated event and/or incident.
4. If the service does not restart, please note the error message displayed and any events captured in Event Viewer and escalate the ticket to the Directory Services team.
"
ISM Service Health	Monitors the health of the Windows Service: Intersite Messaging Service	Windows 2003 and Windows 2008	"1. Validate the state of the service
2. Service in stopped or stopping state:
a. If the service is in stopped state, please attempt to restart the service.
b. If the service is in a hung state (stopping in service manager or services view) end the process via task manager once the executable is determined and then attempt to restart the service.
3. If the service restarts without incident, please close the associated event and/or incident.
4. If the service does not restart, please note the error message displayed and any events captured in Event Viewer and escalate the ticket to the Directory Services team.
"
Monitors the health of the SysVol Share	The Domain Controller's SYSVOL share is not available or accessible	Windows 2003 and Windows 2008	"1. Validate the state of the service
2. Service in stopped or stopping state:
a. If the service is in stopped state, please attempt to restart the service.
b. If the service is in a hung state (stopping in service manager or services view) end the process via task manager once the executable is determined and then attempt to restart the service.
3. If the service restarts without incident, please close the associated event and/or incident.
4. If the service does not restart, please note the error message displayed and any events captured in Event Viewer and escalate the ticket to the Directory Services team.
"
Monitors the health of the Windows Service: Windows Time Service	The Windows Time Service is currently in an unhealthy state	Windows 2003 and Windows 2008	"1. Validate the state of the service
2. Service in stopped or stopping state:
a. If the service is in stopped state, please attempt to restart the service.
b. If the service is in a hung state (stopping in service manager or services view) end the process via task manager once the executable is determined and then attempt to restart the service.
3. If the service restarts without incident, please close the associated event and/or incident.
4. If the service does not restart, please note the error message displayed and any events captured in Event Viewer and escalate the ticket to the Directory Services team.
"
The Domain Controller has been stopped	The Domain Controller has been stopped	Windows 2003 and Windows 2008	"1. Validate the server is offline based on hardware type (bare metal versus virtual)
2. If the server is virtual the VMM services may not be started and could require restart. If restarting the VMM associated service restores availability consider the event or incident closed.
3. Try and power on the server based on hardware type (bare metal versus virtual)
4. If the server boots and loads the Operating system without incident, please close the incident/event.
5. If the server does not boot, fails to load the operating system, or has an on screen error once the operating system is loaded, please escalate to the Directory Services team.
"
The Domain Controller has shutdown unexpectedly	The Domain Controller has shutdown unexpectedly	Windows 2003 and Windows 2008	"1. Validate the server is offline based on hardware type (bare metal versus virtual)
2. If the server is virtual the VMM services may not be started and could require restart. If restarting the VMM associated service restores availability consider the event or incident closed.
3. Try and power on the server based on hardware type (bare metal versus virtual)
4. If the server boots and loads the Operating system without incident, please close the incident/event.
5. If the server does not boot, fails to load the operating system, or has an on screen error once the operating system is loaded, please escalate to the Directory Services team.
"