{"id":19722,"date":"2023-08-16T16:46:34","date_gmt":"2023-08-16T20:46:34","guid":{"rendered":"https:\/\/kevinjustin.com\/blog\/?p=19722"},"modified":"2023-08-17T15:39:43","modified_gmt":"2023-08-17T19:39:43","slug":"ad-application-monitoring","status":"publish","type":"post","link":"https:\/\/kevinjustin.com\/blog\/2023\/08\/16\/ad-application-monitoring\/","title":{"rendered":"AD Application monitoring"},"content":{"rendered":"
\"Data<\/a>
Data from StarTrek the next generation – Mr. Tricorder makes me laugh!<\/figcaption><\/figure>\n

‘AD Application monitoring’ > web synthetics, artificial users > android what image comes to mind?\u00a0 Is it a person, or a thing from a Sci-Fi movie? Perhaps Bishop from Aliens, Data from Star Trek.\u00a0 What does ‘AD Application monitoring’ consist of?\u00a0 Currently that means a CRL validity check, and ADFS web synthetic (proving that ADFS is responding).\u00a0 My thanks to Jason Windisch CSA<\/a>, for the supplied PowerShell!<\/p>\n

 <\/p>\n

Quick Download https:\/\/github.com\/theKevinJustin\/ADApplications\/<\/a><\/h4>\n

<\/h2>\n

Tailoring the pack to your environment<\/h2>\n

The purpose of the pack is to add scheduled workflow that acts like the user, identifies if the CRL’s are about to expire.\u00a0 Most times, monitoring stops at ICMP ping.\u00a0 Most times, there’s still an outage, as the network, and servers are responding.\u00a0 The next layer is IIS, Apache, etc.\u00a0 Sometimes the network team gets involved, checking a base IIS URL is configured.\u00a0 Most outages aren’t network, nor IIS wasn’t running.\u00a0 This is why we focus on the web application responding.\u00a0 Does the multi-prong tactical attack make sense?<\/p>\n

This pack delivers on-demand tasks, daily reports, and rules\/monitors to reflect health.\u00a0 Customize the watcher node, some URL’s, save, and import into SCOM!\u00a0 The purpose<\/p>\n

 <\/p>\n

Assign watcher node(s)<\/strong><\/p>\n

Assign a watcher node by creating a registry key.<\/p>\n

What does that mean?\u00a0 \u00a0Watcher nodes are needed to provide user perspective.<\/p>\n

 <\/p>\n

Multiple site example<\/strong><\/p>\n

Issue:\u00a0 Users from sites 1,2,3 are having problems accessing web pages.\u00a0 To understand a user in site 2, leverage a server in site 2 to initiate the web request (invoke-webRequest<\/span> in PowerShell).<\/p>\n

Why:\u00a0 Differentiate user experience (per site).\u00a0 Answer the ‘did you know’ – is the application responding from this site\/perspective.<\/p>\n

Unfortunately, the watcher node concept eludes most administrators.\u00a0 Mastering ‘user perspective’ makes for an invaluable aid moving from reactive ‘fire fighting’ to proactively being told before users.\u00a0 \u00a0Hopefully this explains the power where monitoring imitates user interactions for key web applications.<\/p>\n

How:\u00a0<\/strong> Create registry key on whatever servers you want to initiate web monitor<\/p>\n

From PowerShell (as Admin), or Command Prompt (as admin)<\/span><\/p>\n

reg add “HKLM\\SOFTWARE\\ADApplications\\WatcherNode”<\/span><\/p>\n

 <\/p>\n

 <\/p>\n

\"AD<\/a>
AD Applications regedit registry key validation<\/figcaption><\/figure>\n

 <\/p>\n

Example of XML snippet from AD Applications management pack<\/p>\n

\"AD<\/a>
AD Applications Watcher Node – create specific registry key<\/figcaption><\/figure>\n

 <\/p>\n

 <\/p>\n

Set up CRL Validity check and ADFS synthetic<\/h2>\n

Next, configure the URL’s for the customer environment for the ‘AD Application monitoring’ management pack.<\/p>\n

\"Update<\/a><\/p>\n

Update AD Applications module types for monitor\/rules for CRL and ADFS synthetics<\/p>\n

Configure the CRL validity check array<\/strong><\/p>\n

From your favorite XML editor (notepad++ pictured)<\/p>\n

Find\/Replace ##FQDN##, ##CRLstring##, numbers to customer environment<\/p>\n

\"CRL<\/a>
CRL Validity check, create your array length as needed for customer environment<\/figcaption><\/figure>\n

 <\/p>\n

Configure the ADFS synthetic request(s)<\/strong><\/p>\n

From your favorite XML editor (notepad++ pictured)<\/p>\n

Find\/Replace $server, ##FederationFQDN##, if necessary, update ADFS URL string if different (the \/adfs\/ls\/idpiniatedsignon.aspx portion) to customer environment<\/p>\n

\"Update<\/a>
Update ADFS URL for invoke-webRequest, ADFS default URL in specified example<\/figcaption><\/figure>\n

Save pack<\/p>\n

Import and enjoy!<\/p>\n

 <\/p>\n

Documentation<\/h4>\n

URLGenie<\/a> for advanced website monitoring<\/p>\n

PowerShell invoke-webRequest<\/a><\/p>\n

Addendum logic blog<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

‘AD Application monitoring’ > web synthetics, artificial users > android what image comes to mind?\u00a0 Is it a person, or a thing from a Sci-Fi movie? Perhaps Bishop from Aliens, Data from Star Trek.\u00a0 What does ‘AD Application monitoring’ consist of?\u00a0 Currently that means a CRL validity check, and ADFS web synthetic (proving that ADFS … Continue reading “AD Application monitoring”<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[637,2,567,5,7,545,530],"tags":[21,25,26,717,719,51,716,342,718],"class_list":["post-19722","post","type-post","status-publish","format-standard","hentry","category-active-directory","category-administration","category-authoring","category-best-practice","category-mp-management-pack","category-powershell","category-scom","tag-ad","tag-addendum","tag-adds","tag-adfs","tag-alert","tag-authentication","tag-crl","tag-scom","tag-web-synthetic"],"yoast_head":"\nAD Application monitoring - Kevin Justin's Blog<\/title>\n<meta name=\"description\" content=\"Update the AD Application monitoring pack to configure CRL validity checks, and ADFS URL checks adding additional monitoring layers.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/kevinjustin.com\/blog\/2023\/08\/16\/ad-application-monitoring\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"AD Application monitoring - Kevin Justin's Blog\" \/>\n<meta property=\"og:description\" content=\"Update the AD Application monitoring pack to configure CRL validity checks, and ADFS URL checks adding additional monitoring layers.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/kevinjustin.com\/blog\/2023\/08\/16\/ad-application-monitoring\/\" \/>\n<meta property=\"og:site_name\" content=\"Kevin Justin's Blog\" \/>\n<meta property=\"article:published_time\" content=\"2023-08-16T20:46:34+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-08-17T19:39:43+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/08\/Data-MrTricorder.jpg\" \/>\n<meta name=\"author\" content=\"WordPress Administrator\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"WordPress Administrator\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/08\\\/16\\\/ad-application-monitoring\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/08\\\/16\\\/ad-application-monitoring\\\/\"},\"author\":{\"name\":\"WordPress Administrator\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/#\\\/schema\\\/person\\\/3d7a90f4430bef43134eaa0a7e2cd508\"},\"headline\":\"AD Application monitoring\",\"datePublished\":\"2023-08-16T20:46:34+00:00\",\"dateModified\":\"2023-08-17T19:39:43+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/08\\\/16\\\/ad-application-monitoring\\\/\"},\"wordCount\":560,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/08\\\/16\\\/ad-application-monitoring\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/08\\\/Data-MrTricorder.jpg\",\"keywords\":[\"AD\",\"addendum\",\"ADDS\",\"ADFS\",\"alert\",\"authentication\",\"CRL\",\"SCOM\",\"web synthetic\"],\"articleSection\":[\"Active Directory\",\"Administration\",\"Authoring\",\"Best Practice\",\"MP Management Pack\",\"PowerShell\",\"SCOM\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/08\\\/16\\\/ad-application-monitoring\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/08\\\/16\\\/ad-application-monitoring\\\/\",\"url\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/08\\\/16\\\/ad-application-monitoring\\\/\",\"name\":\"AD Application monitoring - Kevin Justin's Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/08\\\/16\\\/ad-application-monitoring\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/08\\\/16\\\/ad-application-monitoring\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/08\\\/Data-MrTricorder.jpg\",\"datePublished\":\"2023-08-16T20:46:34+00:00\",\"dateModified\":\"2023-08-17T19:39:43+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/#\\\/schema\\\/person\\\/3d7a90f4430bef43134eaa0a7e2cd508\"},\"description\":\"Update the AD Application monitoring pack to configure CRL validity checks, and ADFS URL checks adding additional monitoring layers.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/08\\\/16\\\/ad-application-monitoring\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/08\\\/16\\\/ad-application-monitoring\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/08\\\/16\\\/ad-application-monitoring\\\/#primaryimage\",\"url\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/08\\\/Data-MrTricorder.jpg\",\"contentUrl\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/08\\\/Data-MrTricorder.jpg\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/08\\\/16\\\/ad-application-monitoring\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"AD Application monitoring\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/\",\"name\":\"Kevin Justin's Blog\",\"description\":\"Operational monitoring tools including System Center, Azure Monitor\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/#\\\/schema\\\/person\\\/3d7a90f4430bef43134eaa0a7e2cd508\",\"name\":\"WordPress Administrator\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fca865cc5df90a25ae9533b1d9dea567a78c7469dc3202a376c8d117a0eaea11?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fca865cc5df90a25ae9533b1d9dea567a78c7469dc3202a376c8d117a0eaea11?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fca865cc5df90a25ae9533b1d9dea567a78c7469dc3202a376c8d117a0eaea11?s=96&d=mm&r=g\",\"caption\":\"WordPress Administrator\"},\"sameAs\":[\"https:\\\/\\\/kevinjustin.com\"],\"url\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/author\\\/wordpress_admin\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"AD Application monitoring - Kevin Justin's Blog","description":"Update the AD Application monitoring pack to configure CRL validity checks, and ADFS URL checks adding additional monitoring layers.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/kevinjustin.com\/blog\/2023\/08\/16\/ad-application-monitoring\/","og_locale":"en_US","og_type":"article","og_title":"AD Application monitoring - Kevin Justin's Blog","og_description":"Update the AD Application monitoring pack to configure CRL validity checks, and ADFS URL checks adding additional monitoring layers.","og_url":"https:\/\/kevinjustin.com\/blog\/2023\/08\/16\/ad-application-monitoring\/","og_site_name":"Kevin Justin's Blog","article_published_time":"2023-08-16T20:46:34+00:00","article_modified_time":"2023-08-17T19:39:43+00:00","og_image":[{"url":"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/08\/Data-MrTricorder.jpg","type":"","width":"","height":""}],"author":"WordPress Administrator","twitter_card":"summary_large_image","twitter_misc":{"Written by":"WordPress Administrator","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/kevinjustin.com\/blog\/2023\/08\/16\/ad-application-monitoring\/#article","isPartOf":{"@id":"https:\/\/kevinjustin.com\/blog\/2023\/08\/16\/ad-application-monitoring\/"},"author":{"name":"WordPress Administrator","@id":"https:\/\/kevinjustin.com\/blog\/#\/schema\/person\/3d7a90f4430bef43134eaa0a7e2cd508"},"headline":"AD Application monitoring","datePublished":"2023-08-16T20:46:34+00:00","dateModified":"2023-08-17T19:39:43+00:00","mainEntityOfPage":{"@id":"https:\/\/kevinjustin.com\/blog\/2023\/08\/16\/ad-application-monitoring\/"},"wordCount":560,"commentCount":0,"image":{"@id":"https:\/\/kevinjustin.com\/blog\/2023\/08\/16\/ad-application-monitoring\/#primaryimage"},"thumbnailUrl":"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/08\/Data-MrTricorder.jpg","keywords":["AD","addendum","ADDS","ADFS","alert","authentication","CRL","SCOM","web synthetic"],"articleSection":["Active Directory","Administration","Authoring","Best Practice","MP Management Pack","PowerShell","SCOM"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/kevinjustin.com\/blog\/2023\/08\/16\/ad-application-monitoring\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/kevinjustin.com\/blog\/2023\/08\/16\/ad-application-monitoring\/","url":"https:\/\/kevinjustin.com\/blog\/2023\/08\/16\/ad-application-monitoring\/","name":"AD Application monitoring - Kevin Justin's Blog","isPartOf":{"@id":"https:\/\/kevinjustin.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/kevinjustin.com\/blog\/2023\/08\/16\/ad-application-monitoring\/#primaryimage"},"image":{"@id":"https:\/\/kevinjustin.com\/blog\/2023\/08\/16\/ad-application-monitoring\/#primaryimage"},"thumbnailUrl":"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/08\/Data-MrTricorder.jpg","datePublished":"2023-08-16T20:46:34+00:00","dateModified":"2023-08-17T19:39:43+00:00","author":{"@id":"https:\/\/kevinjustin.com\/blog\/#\/schema\/person\/3d7a90f4430bef43134eaa0a7e2cd508"},"description":"Update the AD Application monitoring pack to configure CRL validity checks, and ADFS URL checks adding additional monitoring layers.","breadcrumb":{"@id":"https:\/\/kevinjustin.com\/blog\/2023\/08\/16\/ad-application-monitoring\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/kevinjustin.com\/blog\/2023\/08\/16\/ad-application-monitoring\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/kevinjustin.com\/blog\/2023\/08\/16\/ad-application-monitoring\/#primaryimage","url":"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/08\/Data-MrTricorder.jpg","contentUrl":"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/08\/Data-MrTricorder.jpg"},{"@type":"BreadcrumbList","@id":"https:\/\/kevinjustin.com\/blog\/2023\/08\/16\/ad-application-monitoring\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/kevinjustin.com\/blog\/"},{"@type":"ListItem","position":2,"name":"AD Application monitoring"}]},{"@type":"WebSite","@id":"https:\/\/kevinjustin.com\/blog\/#website","url":"https:\/\/kevinjustin.com\/blog\/","name":"Kevin Justin's Blog","description":"Operational monitoring tools including System Center, Azure Monitor","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/kevinjustin.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/kevinjustin.com\/blog\/#\/schema\/person\/3d7a90f4430bef43134eaa0a7e2cd508","name":"WordPress Administrator","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/fca865cc5df90a25ae9533b1d9dea567a78c7469dc3202a376c8d117a0eaea11?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/fca865cc5df90a25ae9533b1d9dea567a78c7469dc3202a376c8d117a0eaea11?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/fca865cc5df90a25ae9533b1d9dea567a78c7469dc3202a376c8d117a0eaea11?s=96&d=mm&r=g","caption":"WordPress Administrator"},"sameAs":["https:\/\/kevinjustin.com"],"url":"https:\/\/kevinjustin.com\/blog\/author\/wordpress_admin\/"}]}},"_links":{"self":[{"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/posts\/19722","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/comments?post=19722"}],"version-history":[{"count":11,"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/posts\/19722\/revisions"}],"predecessor-version":[{"id":19747,"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/posts\/19722\/revisions\/19747"}],"wp:attachment":[{"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/media?parent=19722"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/categories?post=19722"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/tags?post=19722"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}