{"id":19758,"date":"2023-08-18T10:47:59","date_gmt":"2023-08-18T14:47:59","guid":{"rendered":"https:\/\/kevinjustin.com\/blog\/?p=19758"},"modified":"2023-08-18T11:13:44","modified_gmt":"2023-08-18T15:13:44","slug":"adds-addendum-pack","status":"publish","type":"post","link":"https:\/\/kevinjustin.com\/blog\/2023\/08\/18\/adds-addendum-pack\/","title":{"rendered":"ADDS addendum pack"},"content":{"rendered":"
\"Active<\/a>
Active Directory monitoring – definitely needs an addendum!<\/figcaption><\/figure>\n

To begin, the ‘ADDS addendum pack’ needs acknowledgement of the contributors who dealt with my many questions to better alert on AD issues!\u00a0 My thanks to Bob Williams<\/a>, Vance Cozier<\/a>, Jason Windisch<\/a> for their help and expertise with Active Directory (AD\/ADDS).\u00a0 If you need more background, check the why addendum pack post<\/a>.<\/p>\n

<\/h4>\n

Quick Download(s)<\/h4>\n

2012 HTTPS:\/\/GITHUB.COM\/THEKEVINJUSTIN\/ADDS2012ADDENDUM\/<\/a><\/h4>\n

2012R2 HTTPS:\/\/GITHUB.COM\/THEKEVINJUSTIN\/ADDS2012R2ADDENDUM\/<\/a><\/h4>\n

2016+ https:\/\/github.com\/theKevinJustin\/ADDSAddendumAgnostic<\/a><\/h4>\n

<\/h2>\n

 <\/p>\n

Overview of capabilities<\/h2>\n

The Active Directory ADDS Addendum pack(s) change how Tier0 health, and Domain Admins consume alerts.\u00a0 Then, AD product team re-wrote the packs back in 2016 to PowerShell workflows.\u00a0 Many workflows measuring replication, health of your forest(s), at the cost of less alert noise than the 2008 packs.\u00a0 Third, the addendums for 2012, 2012R2, and 2016+ version agnostic should help reduce alert ‘burden’.\u00a0 Lastly, most environments should be 2016+, as the EOL\/EOSL<\/a> is quickly approaching in October!<\/p>\n

 <\/p>\n

Workflows<\/h3>\n

First, the DataSources (DS) and WriteActions (WA) clean up AD pack alerts, create daily reports, team, and AD pack summary alerts, where the WA are the on-demand tasks versions.<\/p>\n

\"DataSources<\/a>
DataSources (DS) and WriteActions (WA) clean up AD pack alerts, create daily reports, team, and AD pack summary alerts, and the WA are the on-demand tasks versions of the DS<\/figcaption><\/figure>\n

Data source (DS) scheduled workflows run weekdays between 0600-0700 local SCOM management server local time.\u00a0 The summary and team reports (run during this time) summarize key insights.\u00a0 NOTE: the Monday report gathers the last 72 hours, so administrators get a ‘what happened over the weekend’ view.\u00a0 Tuesday-Friday reports are past 24 hours.\u00a0 Lastly, the group policy report summarizing unique GPUpdate error output.<\/p>\n

 <\/p>\n

Monitoring<\/h3>\n
\"ADDS<\/a>
ADDS monitoring snapshot showing rules, tasks, recoveries with added capabilities<\/figcaption><\/figure>\n

Addendum pack rules schedule data source execution, adding on-demand task alerts, including new group policy rule alerts.\u00a0 \u00a0The Recovery tasks add service recovery automation to bring us to the ‘manual intervention required’ alerting.\u00a0 There are a few monitor\/rule overrides to match the health model.\u00a0 NOTE: The 2012R2 pack is missing the component alert, as there’s less than 2 months until the platform support ends.<\/span><\/p>\n

The component alert is a new workflow that’s helped Tier0 admins.<\/p>\n

Basically, this is a PowerShell workflow that checks SCOM alerts for multiple DC alerts to determine DC health.\u00a0 I don’t change the AD critical service monitors, but simply summarize the alerts to tell you when intervention is required.<\/p>\n

 <\/p>\n

 <\/p>\n

 <\/p>\n

Tailoring the pack(s) to your environment<\/h2>\n

First, the Active Directory Domain Services management packs MUST be installed for the ‘ADDS Addendum pack'(s) to load.\u00a0 The three versions currently supported have addendums, hopefully 2012,2012R2 are planned to be decommissioned in the short term.<\/p>\n

 <\/p>\n

Update the AD summary and team reports<\/strong><\/h3>\n

The AD summary and team reports for specific Tier0 servers owned by Domain Administrators, AD Team (or any other aliases the SME’s may go by) group regular expressions.<\/p>\n

In your favorite XML editor (mine is Notepad++), open the addendum pack(s), and find\/replace for the following strings:<\/p>\n

Look for the $ADDSServerAlerts<\/p>\n

$ADDSServerAlerts = $ADDSReportAlerts | ? { ( $_.NetBiosComputerName -like “*A1*” ) `<\/p>\n

 <\/p>\n

Save pack<\/p>\n

Import and enjoy!<\/p>\n

 <\/p>\n

Documentation<\/h4>\n

ADDS 2012+ management pack download<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

To begin, the ‘ADDS addendum pack’ needs acknowledgement of the contributors who dealt with my many questions to better alert on AD issues!\u00a0 My thanks to Bob Williams, Vance Cozier, Jason Windisch for their help and expertise with Active Directory (AD\/ADDS).\u00a0 If you need more background, check the why addendum pack post. Quick Download(s) 2012 … Continue reading “ADDS addendum pack”<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[637,2,567,7,545,530],"tags":[20,734,21,26,91,737,739,738,331,735,736],"class_list":["post-19758","post","type-post","status-publish","format-standard","hentry","category-active-directory","category-administration","category-authoring","category-mp-management-pack","category-powershell","category-scom","tag-active-directory","tag-active-directory-domain-services","tag-ad","tag-adds","tag-cleanup","tag-component","tag-gpo","tag-group-policy","tag-report","tag-summary","tag-team"],"yoast_head":"\nADDS addendum pack - Kevin Justin's Blog<\/title>\n<meta name=\"description\" content=\"Tired of AD alerts killing you, try the ADDS addendum pack! Version agnostic 2016+ adds a component alert to simplify alert notifications.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/kevinjustin.com\/blog\/2023\/08\/18\/adds-addendum-pack\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"ADDS addendum pack - Kevin Justin's Blog\" \/>\n<meta property=\"og:description\" content=\"Tired of AD alerts killing you, try the ADDS addendum pack! Version agnostic 2016+ adds a component alert to simplify alert notifications.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/kevinjustin.com\/blog\/2023\/08\/18\/adds-addendum-pack\/\" \/>\n<meta property=\"og:site_name\" content=\"Kevin Justin's Blog\" \/>\n<meta property=\"article:published_time\" content=\"2023-08-18T14:47:59+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-08-18T15:13:44+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/08\/MicrosoftActiveDirectory.jpg\" \/>\n<meta name=\"author\" content=\"WordPress Administrator\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"WordPress Administrator\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/08\\\/18\\\/adds-addendum-pack\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/08\\\/18\\\/adds-addendum-pack\\\/\"},\"author\":{\"name\":\"WordPress Administrator\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/#\\\/schema\\\/person\\\/3d7a90f4430bef43134eaa0a7e2cd508\"},\"headline\":\"ADDS addendum pack\",\"datePublished\":\"2023-08-18T14:47:59+00:00\",\"dateModified\":\"2023-08-18T15:13:44+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/08\\\/18\\\/adds-addendum-pack\\\/\"},\"wordCount\":559,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/08\\\/18\\\/adds-addendum-pack\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/08\\\/MicrosoftActiveDirectory.jpg\",\"keywords\":[\"Active Directory\",\"Active Directory Domain Services\",\"AD\",\"ADDS\",\"cleanup\",\"component\",\"GPO\",\"group policy\",\"report\",\"summary\",\"team\"],\"articleSection\":[\"Active Directory\",\"Administration\",\"Authoring\",\"MP Management Pack\",\"PowerShell\",\"SCOM\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/08\\\/18\\\/adds-addendum-pack\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/08\\\/18\\\/adds-addendum-pack\\\/\",\"url\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/08\\\/18\\\/adds-addendum-pack\\\/\",\"name\":\"ADDS addendum pack - Kevin Justin's Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/08\\\/18\\\/adds-addendum-pack\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/08\\\/18\\\/adds-addendum-pack\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/08\\\/MicrosoftActiveDirectory.jpg\",\"datePublished\":\"2023-08-18T14:47:59+00:00\",\"dateModified\":\"2023-08-18T15:13:44+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/#\\\/schema\\\/person\\\/3d7a90f4430bef43134eaa0a7e2cd508\"},\"description\":\"Tired of AD alerts killing you, try the ADDS addendum pack! Version agnostic 2016+ adds a component alert to simplify alert notifications.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/08\\\/18\\\/adds-addendum-pack\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/08\\\/18\\\/adds-addendum-pack\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/08\\\/18\\\/adds-addendum-pack\\\/#primaryimage\",\"url\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/08\\\/MicrosoftActiveDirectory.jpg\",\"contentUrl\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/wp-content\\\/uploads\\\/2023\\\/08\\\/MicrosoftActiveDirectory.jpg\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/2023\\\/08\\\/18\\\/adds-addendum-pack\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"ADDS addendum pack\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/\",\"name\":\"Kevin Justin's Blog\",\"description\":\"Operational monitoring tools including System Center, Azure Monitor\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/#\\\/schema\\\/person\\\/3d7a90f4430bef43134eaa0a7e2cd508\",\"name\":\"WordPress Administrator\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fca865cc5df90a25ae9533b1d9dea567a78c7469dc3202a376c8d117a0eaea11?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fca865cc5df90a25ae9533b1d9dea567a78c7469dc3202a376c8d117a0eaea11?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/fca865cc5df90a25ae9533b1d9dea567a78c7469dc3202a376c8d117a0eaea11?s=96&d=mm&r=g\",\"caption\":\"WordPress Administrator\"},\"sameAs\":[\"https:\\\/\\\/kevinjustin.com\"],\"url\":\"https:\\\/\\\/kevinjustin.com\\\/blog\\\/author\\\/wordpress_admin\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"ADDS addendum pack - Kevin Justin's Blog","description":"Tired of AD alerts killing you, try the ADDS addendum pack! Version agnostic 2016+ adds a component alert to simplify alert notifications.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/kevinjustin.com\/blog\/2023\/08\/18\/adds-addendum-pack\/","og_locale":"en_US","og_type":"article","og_title":"ADDS addendum pack - Kevin Justin's Blog","og_description":"Tired of AD alerts killing you, try the ADDS addendum pack! Version agnostic 2016+ adds a component alert to simplify alert notifications.","og_url":"https:\/\/kevinjustin.com\/blog\/2023\/08\/18\/adds-addendum-pack\/","og_site_name":"Kevin Justin's Blog","article_published_time":"2023-08-18T14:47:59+00:00","article_modified_time":"2023-08-18T15:13:44+00:00","og_image":[{"url":"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/08\/MicrosoftActiveDirectory.jpg","type":"","width":"","height":""}],"author":"WordPress Administrator","twitter_card":"summary_large_image","twitter_misc":{"Written by":"WordPress Administrator","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/kevinjustin.com\/blog\/2023\/08\/18\/adds-addendum-pack\/#article","isPartOf":{"@id":"https:\/\/kevinjustin.com\/blog\/2023\/08\/18\/adds-addendum-pack\/"},"author":{"name":"WordPress Administrator","@id":"https:\/\/kevinjustin.com\/blog\/#\/schema\/person\/3d7a90f4430bef43134eaa0a7e2cd508"},"headline":"ADDS addendum pack","datePublished":"2023-08-18T14:47:59+00:00","dateModified":"2023-08-18T15:13:44+00:00","mainEntityOfPage":{"@id":"https:\/\/kevinjustin.com\/blog\/2023\/08\/18\/adds-addendum-pack\/"},"wordCount":559,"commentCount":0,"image":{"@id":"https:\/\/kevinjustin.com\/blog\/2023\/08\/18\/adds-addendum-pack\/#primaryimage"},"thumbnailUrl":"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/08\/MicrosoftActiveDirectory.jpg","keywords":["Active Directory","Active Directory Domain Services","AD","ADDS","cleanup","component","GPO","group policy","report","summary","team"],"articleSection":["Active Directory","Administration","Authoring","MP Management Pack","PowerShell","SCOM"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/kevinjustin.com\/blog\/2023\/08\/18\/adds-addendum-pack\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/kevinjustin.com\/blog\/2023\/08\/18\/adds-addendum-pack\/","url":"https:\/\/kevinjustin.com\/blog\/2023\/08\/18\/adds-addendum-pack\/","name":"ADDS addendum pack - Kevin Justin's Blog","isPartOf":{"@id":"https:\/\/kevinjustin.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/kevinjustin.com\/blog\/2023\/08\/18\/adds-addendum-pack\/#primaryimage"},"image":{"@id":"https:\/\/kevinjustin.com\/blog\/2023\/08\/18\/adds-addendum-pack\/#primaryimage"},"thumbnailUrl":"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/08\/MicrosoftActiveDirectory.jpg","datePublished":"2023-08-18T14:47:59+00:00","dateModified":"2023-08-18T15:13:44+00:00","author":{"@id":"https:\/\/kevinjustin.com\/blog\/#\/schema\/person\/3d7a90f4430bef43134eaa0a7e2cd508"},"description":"Tired of AD alerts killing you, try the ADDS addendum pack! Version agnostic 2016+ adds a component alert to simplify alert notifications.","breadcrumb":{"@id":"https:\/\/kevinjustin.com\/blog\/2023\/08\/18\/adds-addendum-pack\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/kevinjustin.com\/blog\/2023\/08\/18\/adds-addendum-pack\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/kevinjustin.com\/blog\/2023\/08\/18\/adds-addendum-pack\/#primaryimage","url":"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/08\/MicrosoftActiveDirectory.jpg","contentUrl":"https:\/\/kevinjustin.com\/blog\/wp-content\/uploads\/2023\/08\/MicrosoftActiveDirectory.jpg"},{"@type":"BreadcrumbList","@id":"https:\/\/kevinjustin.com\/blog\/2023\/08\/18\/adds-addendum-pack\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/kevinjustin.com\/blog\/"},{"@type":"ListItem","position":2,"name":"ADDS addendum pack"}]},{"@type":"WebSite","@id":"https:\/\/kevinjustin.com\/blog\/#website","url":"https:\/\/kevinjustin.com\/blog\/","name":"Kevin Justin's Blog","description":"Operational monitoring tools including System Center, Azure Monitor","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/kevinjustin.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/kevinjustin.com\/blog\/#\/schema\/person\/3d7a90f4430bef43134eaa0a7e2cd508","name":"WordPress Administrator","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/fca865cc5df90a25ae9533b1d9dea567a78c7469dc3202a376c8d117a0eaea11?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/fca865cc5df90a25ae9533b1d9dea567a78c7469dc3202a376c8d117a0eaea11?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/fca865cc5df90a25ae9533b1d9dea567a78c7469dc3202a376c8d117a0eaea11?s=96&d=mm&r=g","caption":"WordPress Administrator"},"sameAs":["https:\/\/kevinjustin.com"],"url":"https:\/\/kevinjustin.com\/blog\/author\/wordpress_admin\/"}]}},"_links":{"self":[{"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/posts\/19758","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/comments?post=19758"}],"version-history":[{"count":11,"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/posts\/19758\/revisions"}],"predecessor-version":[{"id":19774,"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/posts\/19758\/revisions\/19774"}],"wp:attachment":[{"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/media?parent=19758"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/categories?post=19758"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kevinjustin.com\/blog\/wp-json\/wp\/v2\/tags?post=19758"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}