Active Directory sensor

The Active Directory sensor discovers Microsoft Active Directory servers.

Sensor name that is used in the GUI and logs

ActiveDirectorySensor

Security issues

The sensor uses the command ntdsutil.exe during the discovery and this command requires elevated security privileges. To verify that the discovery account has adequate privileges, enter the following command on one line:

On Windows 2000 and Windows Server 2003:

ntdsutil "domain management" connections "connect to server localhost" 
q "list" q q

On Windows Sever 2008:

ntdsutil "partition management" connections "connect to server localhost"
 q "list" q q