4.1 Domain Health and Performance Checks

You should periodically monitor the DSfW domain controller for the following:

  • sysvolsync

  • Gposync

  • Time synchronization

  • eDirectory health

  • Syslog for critical errors from all DSfW services

  • KDC log

  • Samba and winbind logs

Perform xadcntrl validate to ensure that all DSfW services are healthy. Any unexpected errors can lead to domain controller malfunctioning or unnecessary load on domain controllers if not attended to. For more information, see Logging. For information on eDirectory performance tuning, see TID 3178089.