Monitors RID issuances Events on Windows 2012 based on this article https://blogs.technet.microsoft.com/askds/2012/08/10/managing-rid-issuance-in-windows-server-2012/
| DisplayName | ID | Target | Category | Enabled | Alert Generate | |
|---|---|---|---|---|---|---|
 | RID Issuance: Global maximum has increased (EventID 16555) | Community.AD.2012.RID.Monitoring.Rule.GlobalMaximumHasIncreased | Microsoft.Windows.Server.2012.AD.DomainControllerRole | Alert | True | True |
| RID Issuance: Periodic update on remaining RID in pool (EventID 16558) | Community.AD.2012.RID.Monitoring.Rule.PeriodicUpdateEvent | Microsoft.Windows.Server.2012.AD.DomainControllerRole | Alert | True | True |
| RID Issuance: Configured pool size is greate than supported maximum (EventID 16553) | Community.AD.2012.RID.Monitoring.Rule.PoolExceedsMaximum | Microsoft.Windows.Server.2012.AD.DomainControllerRole | Alert | True | True |
| RID Issuance: Pool has been invalidated (EventID 16554) | Community.AD.2012.RID.Monitoring.Rule.PoolInvalidated | Microsoft.Windows.Server.2012.AD.DomainControllerRole | Alert | True | True |
| RID Issuance: Pool threshold has been reached - Critical level (EventID 16557) | Community.AD.2012.RID.Monitoring.Rule.PoolThresholdReachedCritical | Microsoft.Windows.Server.2012.AD.DomainControllerRole | Alert | True | True |
| RID Issuance: Pool threshold has been reached - Warning level (EventID 16556) | Community.AD.2012.RID.Monitoring.Rule.PoolThresholdReachedWarning | Microsoft.Windows.Server.2012.AD.DomainControllerRole | Alert | True | True |
Home
Show Management Pack References