| DisplayName | ID | Target | Category | Enabled | Alert Generate |
![Accounts_with_the_same_SID_have_been_detected___one_has_been_deleted_5_Rule](/images/Rule.png) | Er zijn accounts gedetecteerd met dezelfde SID; er is één account verwijderd | Accounts_with_the_same_SID_have_been_detected___one_has_been_deleted_5_Rule | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | EventCollection | True | False |
![Account_Changes_Report_Creation_Only_Rule](/images/Rule.png) | Rapport met accountwijzigingen maken | Account_Changes_Report_Creation_Only_Rule | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | EventCollection | False | False |
![Account_creation_will_fail_on_this_domain_controller_until_the_account_identifier_pool_is_obtained_5_Rule](/images/Rule.png) | Accounts maken op deze domeincontroller lukt pas als de account-id-groep is verkregen | Account_creation_will_fail_on_this_domain_controller_until_the_account_identifier_pool_is_obtained_5_Rule | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | EventCollection | True | False |
![Account_Name_Not_Unique_5_Rule](/images/Rule.png) | Accountnaam niet uniek | Account_Name_Not_Unique_5_Rule | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | EventCollection | False | False |
![AD_MOM_Agent_Proxy_is_not_enabled](/images/Rule.png) | Agentproxy niet ingeschakeld | AD_MOM_Agent_Proxy_is_not_enabled | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | EventCollection | True | True |
![An_account_cannot_be_added_to_the_group_5_Rule](/images/Rule.png) | Er kan geen account worden toegevoegd aan de groep | An_account_cannot_be_added_to_the_group_5_Rule | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | EventCollection | True | False |
![An_account_name_collision_occurred___this_may_result_in_authentication_failures_5_Rule](/images/Rule.png) | Er is een probleem opgetreden met dubbele accountnamen. Dit kan leiden tot mislukte verificaties | An_account_name_collision_occurred___this_may_result_in_authentication_failures_5_Rule | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | EventCollection | True | False |
![An_attempt_to_check_whether_group_caching_is_enabled_has_failed_5_Rule](/images/Rule.png) | De poging om te controleren of het in de groepscache plaatsen is ingeschakeld, is mislukt | An_attempt_to_check_whether_group_caching_is_enabled_has_failed_5_Rule | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | EventCollection | True | False |
![An_attempt_to_set_the_time_was_aborted_due_to_the_offset_being_too_large_5_Rule](/images/Rule.png) | Een poging om de tijd in te stellen is afgebroken omdat de marge te groot is | An_attempt_to_set_the_time_was_aborted_due_to_the_offset_being_too_large_5_Rule | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | EventCollection | True | False |
![An_attempt_to_update_user_credentials_failed_5_Rule](/images/Rule.png) | Een poging om de gebruikersreferenties bij te werken is mislukt | An_attempt_to_update_user_credentials_failed_5_Rule | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | EventCollection | True | False |
![A_dll_cannot_be_loaded_because_the_software_was_incorrectly_installed_5_Rule](/images/Rule.png) | Een DLL-bestand kan niet worden geladen omdat de software niet goed is geïnstalleerd | A_dll_cannot_be_loaded_because_the_software_was_incorrectly_installed_5_Rule | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | EventCollection | True | False |
![A_DNS_server_used_by_this_server_for_name_resolution_did_not_respond_1_Rule](/images/Rule.png) | Een DNS-server die door deze server wordt gebruikt voor naamomzetting, heeft niet gereageerd binnen de time-outinterval | A_DNS_server_used_by_this_server_for_name_resolution_did_not_respond_1_Rule | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | EventCollection | True | False |
![A_resource_record_for_the_computer_name_of_the_DC_is_not_registered_1_Rule](/images/Rule.png) | Een bronrecord voor de computernaam van de DC is niet geregistreerd in de DNS-database | A_resource_record_for_the_computer_name_of_the_DC_is_not_registered_1_Rule | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | EventCollection | True | False |
![A_RSoP__Resultant_Set_of_Policies__error_occurred_5_Rule](/images/Rule.png) | Er is een RSoP-fout (Resultant Set of Policies) opgetreden | A_RSoP__Resultant_Set_of_Policies__error_occurred_5_Rule | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | EventCollection | True | False |
![A_user_from_a_different_forest_logged_onto_this_machine._Group_policy_processing_has_been_effected._5_Rule](/images/Rule.png) | Er is een gebruiker van een ander forest aangemeld bij deze computer. De verwerking van groepsbeleid is nog niet voltooid. | A_user_from_a_different_forest_logged_onto_this_machine._Group_policy_processing_has_been_effected._5_Rule | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | EventCollection | True | False |
![A_well_known_account_has_been_recreated_because_it_did_not_exist_5_Rule](/images/Rule.png) | Er is een bekend account opnieuw gemaakt omdat dit niet bestond | A_well_known_account_has_been_recreated_because_it_did_not_exist_5_Rule | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | EventCollection | True | False |
![A_well_known_group_has_been_recreated_because_it_did_not_exist_5_Rule](/images/Rule.png) | Er is een bekende groep opnieuw gemaakt omdat deze niet bestond | A_well_known_group_has_been_recreated_because_it_did_not_exist_5_Rule | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | EventCollection | True | False |
![Change_Password_on_KRBTGT_Account_Failed_5_Rule](/images/Rule.png) | Het wijzigen van het wachtwoord voor het KRBTGT-account is mislukt | Change_Password_on_KRBTGT_Account_Failed_5_Rule | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | EventCollection | True | False |
![Collection_Rule_for_No_DC_GC_in_Site_events_5_Rule](/images/Rule.png) | Verzamelingsregel voor Geen DC/GC in sitegebeurtenissen | Collection_Rule_for_No_DC_GC_in_Site_events_5_Rule | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | EventCollection | True | False |
![Corrupt_Credentials_5_Rule](/images/Rule.png) | Referenties zijn beschadigd | Corrupt_Credentials_5_Rule | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | EventCollection | True | False |
![Domain_Operation_Mode_has_been_changed_to_Native_Mode_5_Rule](/images/Rule.png) | De domeinmodus is gewijzigd in de native modus | Domain_Operation_Mode_has_been_changed_to_Native_Mode_5_Rule | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | EventCollection | True | False |
![Duplicate_account_names_were_detected___one_account_has_been_renamed_5_Rule](/images/Rule.png) | Er zijn dubbele accountnamen gedetecteerd; één account heeft een andere naam gekregen | Duplicate_account_names_were_detected___one_account_has_been_renamed_5_Rule | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | EventCollection | True | False |
![Duplicate_User_Principal_Names_have_been_detected_5_Rule](/images/Rule.png) | Er zijn dubbele UPN's gedetecteerd | Duplicate_User_Principal_Names_have_been_detected_5_Rule | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | EventCollection | True | False |
![Group_policy_processing_aborted___cannot_determine_site_5_Rule](/images/Rule.png) | Verwerking van groepsbeleid afgebroken, want de site kan niet worden bepaald | Group_policy_processing_aborted___cannot_determine_site_5_Rule | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | EventCollection | True | False |
![Invalid_Forwarded_AS_Request_5_Rule](/images/Rule.png) | Ongeldige doorgestuurde AS-aanvraag | Invalid_Forwarded_AS_Request_5_Rule | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | EventCollection | True | False |
![Invalid_Policy_Data_5_Rule](/images/Rule.png) | Ongeldige beleidsgegevens | Invalid_Policy_Data_5_Rule | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | EventCollection | True | False |
![Machine_account_policy_failure___Active_Directory_GPO_lookup_failure_5_Rule](/images/Rule.png) | Fout in het computeraccountbeleid - fout tijdens een Active Directory GPO-zoekactie | Machine_account_policy_failure___Active_Directory_GPO_lookup_failure_5_Rule | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | EventCollection | True | False |
![Machine_account_policy_failure___Security_Configuration_Engine_error_occurred_5_Rule](/images/Rule.png) | Fout in het computeraccountbeleid - er is een SCE-fout (Security Configuration Engine) opgetreden | Machine_account_policy_failure___Security_Configuration_Engine_error_occurred_5_Rule | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | EventCollection | True | False |
![Memory_Allocation_Error___the_system_may_be_overloaded_5_Rule](/images/Rule.png) | Geheugentoewijzingsfout - het systeem is mogelijk overbelast | Memory_Allocation_Error___the_system_may_be_overloaded_5_Rule | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | EventCollection | True | False |
![No_input_provider_to_sync_time_5_Rule](/images/Rule.png) | Geen provider van invoer voor de tijdsynchronisatie | No_input_provider_to_sync_time_5_Rule | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | EventCollection | True | False |
![One_or_more_of_the_DC_Locator_DNS_records_are_not_registered_1_Rule](/images/Rule.png) | Een of meer van de DNS-records voor de DC-Locator zijn niet geregistreerd in de DNS-database omdat de primaire DNS-server geen ondersteuning biedt voor het dynamisch bijwerken van de DNS-records | One_or_more_of_the_DC_Locator_DNS_records_are_not_registered_1_Rule | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | EventCollection | True | False |
![PAC_Verification_Failure_5_Rule](/images/Rule.png) | PAC-verificatiefout | PAC_Verification_Failure_5_Rule | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | EventCollection | True | False |
![Policy_Update_Failure_5_Rule](/images/Rule.png) | Fout bij beleidsupdate | Policy_Update_Failure_5_Rule | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | EventCollection | True | False |
![Report_Collection___Machine_Account_Authentication_Failures_5_Rule](/images/Rule.png) | Rapportverzameling - verificatiefouten computeraccount | Report_Collection___Machine_Account_Authentication_Failures_5_Rule | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | EventCollection | False | False |
![Setting_the_administrators_password_failed.__It_has_been_reset_to_blank._5_Rule](/images/Rule.png) | Het instellen van het beheerderswachtwoord is mislukt. Deze is opnieuw ingesteld op leeg. | Setting_the_administrators_password_failed.__It_has_been_reset_to_blank._5_Rule | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | EventCollection | True | False |
![The_account_identifier_pool_for_this_domain_controller_cannot_be_updated_5_Rule](/images/Rule.png) | De account-id-groep voor deze domeincontroller kan niet worden bijgewerkt | The_account_identifier_pool_for_this_domain_controller_cannot_be_updated_5_Rule | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | EventCollection | True | False |
![The_computer_didnt_have_sufficient_rights_to_perform_the_secure_dynamic_update_1_Rule](/images/Rule.png) | De computer beschikt niet over voldoende rechten om de beveiligde dynamische update uit te voeren | The_computer_didnt_have_sufficient_rights_to_perform_the_secure_dynamic_update_1_Rule | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | EventCollection | True | False |
![The_computer_name_cannot_be_mapped_to_an_object_in_Active_Directory___this_may_result_in_authentication_failures_5_Rule](/images/Rule.png) | De naam van de computer kan niet worden toegewezen aan een object in Active Directory - dit kan leiden tot verificatiefouten | The_computer_name_cannot_be_mapped_to_an_object_in_Active_Directory___this_may_result_in_authentication_failures_5_Rule | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | EventCollection | True | False |
![The_DC_was_unable_to_obtain_the_next_account_identifier_5_Rule](/images/Rule.png) | De DC kan de volgende account-id niet ophalen | The_DC_was_unable_to_obtain_the_next_account_identifier_5_Rule | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | EventCollection | True | False |
![The_DNS_server_with_which_this_DC_will_register_does_not_support_1_Rule](/images/Rule.png) | De DNS-server waarbij deze domeincontroller wordt geregistreerd, ondersteunt het protocol voor dynamische updates niet of de zone die als autoriteit optreedt, staat dynamische updates niet toe | The_DNS_server_with_which_this_DC_will_register_does_not_support_1_Rule | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | EventCollection | True | False |
![The_Domain_Changes_report_Create_Only_Rule](/images/Rule.png) | Rapport met domeinwijzigingen maken | The_Domain_Changes_report_Create_Only_Rule | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | EventCollection | False | False |
![The_domain_controller_failed_to_obtain_a_new_account_identifier_pool_5_Rule](/images/Rule.png) | De domeincontroller kan geen nieuwe account-id-groep ophalen | The_domain_controller_failed_to_obtain_a_new_account_identifier_pool_5_Rule | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | EventCollection | True | False |
![The_group_caching_option_has_now_been_properly_updated_5_Rule](/images/Rule.png) | De optie In groepscache plaatsen is nu correct bijgewerkt | The_group_caching_option_has_now_been_properly_updated_5_Rule | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | EventCollection | True | False |
![The_machine_account_cannot_be_found_5_Rule](/images/Rule.png) | Kan het computeraccount niet vinden | The_machine_account_cannot_be_found_5_Rule | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | EventCollection | True | False |
![The_number_of_Group_Policies_has_exceeded_the_maximum_limit_5_Rule](/images/Rule.png) | Het aantal groepsbeleidsregels heeft de maximumlimiet overschreden | The_number_of_Group_Policies_has_exceeded_the_maximum_limit_5_Rule | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | EventCollection | True | False |
![The_registry_policy_file_could_not_be_accessed_during_application_of_machine_policy_5_Rule](/images/Rule.png) | Het registerbeleidsbestand kan niet worden geopend tijdens het toepassen van het computerbeleid | The_registry_policy_file_could_not_be_accessed_during_application_of_machine_policy_5_Rule | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | EventCollection | True | False |
![The_system_clock_has_not_been_synchronized_for_some_time_5_Rule](/images/Rule.png) | De systeemklok is al enige tijd niet gesynchroniseerd | The_system_clock_has_not_been_synchronized_for_some_time_5_Rule | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | EventCollection | True | False |
![This_domain_controller_will_not_start_up_because_its_machine_account_has_been_deleted_5_Rule](/images/Rule.png) | Deze domeincontroller kan niet opstarten omdat het computeraccount is verwijderd | This_domain_controller_will_not_start_up_because_its_machine_account_has_been_deleted_5_Rule | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | EventCollection | True | False |
![Trusted_Domain_List_Update_Failure_5_Rule](/images/Rule.png) | Fout bij het bijwerken van lijst met vertrouwde domeinen | Trusted_Domain_List_Update_Failure_5_Rule | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | EventCollection | True | False |
![Unexpected_SAM_Failure_5_Rule](/images/Rule.png) | Onverwachte SAM-fout | Unexpected_SAM_Failure_5_Rule | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | EventCollection | True | False |
![Windows_cannot_determine_the_role_of_this_computer._5_Rule](/images/Rule.png) | Windows kan de rol van deze computer niet bepalen. | Windows_cannot_determine_the_role_of_this_computer._5_Rule | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | EventCollection | True | False |
![Windows_cannot_determine_the_user_or_computer_name._5_Rule](/images/Rule.png) | Windows kan de gebruiker of computernaam niet bepalen. | Windows_cannot_determine_the_user_or_computer_name._5_Rule | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | EventCollection | True | False |
![Windows_cannot_obtain_the_domain_controller_name_for_your_computer_network._5_Rule](/images/Rule.png) | Windows kan de naam van de domeincontroller voor uw computernetwerk niet ophalen. | Windows_cannot_obtain_the_domain_controller_name_for_your_computer_network._5_Rule | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | EventCollection | True | False |
![Windows_is_setting_a_registry_value_5_Rule](/images/Rule.png) | Er wordt in Windows een registerwaarde ingesteld | Windows_is_setting_a_registry_value_5_Rule | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | EventCollection | True | False |
![Microsoft.Windows.Server.10.0.AD.ActiveDirectoryWebServices.Error.EventCollection](/images/Rule.png) | Microsoft.Windows.Server.10.0.AD.ActiveDirectoryWebServices.Error.EventCollection | Microsoft.Windows.Server.10.0.AD.ActiveDirectoryWebServices.Error.EventCollection | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | EventCollection | True | False |
![Microsoft.Windows.Server.10.0.AD.ActiveDirectoryWebServices.Information.EventCollection](/images/Rule.png) | Microsoft.Windows.Server.10.0.AD.ActiveDirectoryWebServices.Information.EventCollection | Microsoft.Windows.Server.10.0.AD.ActiveDirectoryWebServices.Information.EventCollection | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | EventCollection | False | False |
![Microsoft.Windows.Server.10.0.AD.ActiveDirectoryWebServices.Warning.EventCollection](/images/Rule.png) | Microsoft.Windows.Server.10.0.AD.ActiveDirectoryWebServices.Warning.EventCollection | Microsoft.Windows.Server.10.0.AD.ActiveDirectoryWebServices.Warning.EventCollection | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | EventCollection | True | False |
![Microsoft.Windows.Server.10.0.AD.Availability.DiskSpace.DIT.PerformanceCollection](/images/Rule.png) | Microsoft.Windows.Server.10.0.AD.Availability.DiskSpace.DIT.PerformanceCollection | Microsoft.Windows.Server.10.0.AD.Availability.DiskSpace.DIT.PerformanceCollection | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | PerformanceCollection | True | False |
![Microsoft.Windows.Server.10.0.AD.Availability.DiskSpace.Log.PerformanceCollection](/images/Rule.png) | Microsoft.Windows.Server.10.0.AD.Availability.DiskSpace.Log.PerformanceCollection | Microsoft.Windows.Server.10.0.AD.Availability.DiskSpace.Log.PerformanceCollection | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | PerformanceCollection | True | False |
![Microsoft.Windows.Server.10.0.AD.Availability.Size.DIT.PerformanceCollection](/images/Rule.png) | Microsoft.Windows.Server.10.0.AD.Availability.Size.DIT.PerformanceCollection | Microsoft.Windows.Server.10.0.AD.Availability.Size.DIT.PerformanceCollection | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | PerformanceCollection | True | False |
![Microsoft.Windows.Server.10.0.AD.DFSReplication.Error.EventCollection](/images/Rule.png) | Microsoft.Windows.Server.10.0.AD.DFSReplication.Error.EventCollection | Microsoft.Windows.Server.10.0.AD.DFSReplication.Error.EventCollection | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | EventCollection | True | False |
![Microsoft.Windows.Server.10.0.AD.DFSReplication.Information.EventCollection](/images/Rule.png) | Microsoft.Windows.Server.10.0.AD.DFSReplication.Information.EventCollection | Microsoft.Windows.Server.10.0.AD.DFSReplication.Information.EventCollection | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | EventCollection | False | False |
![Microsoft.Windows.Server.10.0.AD.DFSReplication.Warning.EventCollection](/images/Rule.png) | Microsoft.Windows.Server.10.0.AD.DFSReplication.Warning.EventCollection | Microsoft.Windows.Server.10.0.AD.DFSReplication.Warning.EventCollection | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | EventCollection | True | False |
![Microsoft.Windows.Server.10.0.AD.DirectoryService.Error.EventCollection](/images/Rule.png) | Microsoft.Windows.Server.10.0.AD.DirectoryService.Error.EventCollection | Microsoft.Windows.Server.10.0.AD.DirectoryService.Error.EventCollection | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | EventCollection | True | False |
![Microsoft.Windows.Server.10.0.AD.DirectoryService.Information.EventCollection](/images/Rule.png) | Microsoft.Windows.Server.10.0.AD.DirectoryService.Information.EventCollection | Microsoft.Windows.Server.10.0.AD.DirectoryService.Information.EventCollection | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | EventCollection | False | False |
![Microsoft.Windows.Server.10.0.AD.DirectoryService.Warning.EventCollection](/images/Rule.png) | Microsoft.Windows.Server.10.0.AD.DirectoryService.Warning.EventCollection | Microsoft.Windows.Server.10.0.AD.DirectoryService.Warning.EventCollection | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | EventCollection | True | False |
![Microsoft.Windows.Server.10.0.AD.DNSServer.Error.EventCollection](/images/Rule.png) | Microsoft.Windows.Server.10.0.AD.DNSServer.Error.EventCollection | Microsoft.Windows.Server.10.0.AD.DNSServer.Error.EventCollection | Microsoft.Windows.Server.10.0.AD.DomainController.DNS | EventCollection | True | False |
![Microsoft.Windows.Server.10.0.AD.DNSServer.Information.EventCollection](/images/Rule.png) | Microsoft.Windows.Server.10.0.AD.DNSServer.Information.EventCollection | Microsoft.Windows.Server.10.0.AD.DNSServer.Information.EventCollection | Microsoft.Windows.Server.10.0.AD.DomainController.DNS | EventCollection | False | False |
![Microsoft.Windows.Server.10.0.AD.DNSServer.Warning.EventCollection](/images/Rule.png) | Microsoft.Windows.Server.10.0.AD.DNSServer.Warning.EventCollection | Microsoft.Windows.Server.10.0.AD.DNSServer.Warning.EventCollection | Microsoft.Windows.Server.10.0.AD.DomainController.DNS | EventCollection | True | False |
![Microsoft.Windows.Server.10.0.AD.DomainController.AvailableBytes.Collection](/images/Rule.png) | Microsoft.Windows.Server.10.0.AD.DomainController.AvailableBytes.Collection | Microsoft.Windows.Server.10.0.AD.DomainController.AvailableBytes.Collection | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | PerformanceCollection | True | False |
![Microsoft.Windows.Server.10.0.AD.DomainController.CommittedBytes.Collection](/images/Rule.png) | Microsoft.Windows.Server.10.0.AD.DomainController.CommittedBytes.Collection | Microsoft.Windows.Server.10.0.AD.DomainController.CommittedBytes.Collection | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | PerformanceCollection | True | False |
![Microsoft.Windows.Server.10.0.AD.DomainController.DNSPrivateBytes.Collection](/images/Rule.png) | Microsoft.Windows.Server.10.0.AD.DomainController.DNSPrivateBytes.Collection | Microsoft.Windows.Server.10.0.AD.DomainController.DNSPrivateBytes.Collection | Microsoft.Windows.Server.10.0.AD.DomainController.DNS | PerformanceCollection | True | False |
![Microsoft.Windows.Server.10.0.AD.DomainController.DNSQueryReceived.Collection](/images/Rule.png) | Microsoft.Windows.Server.10.0.AD.DomainController.DNSQueryReceived.Collection | Microsoft.Windows.Server.10.0.AD.DomainController.DNSQueryReceived.Collection | Microsoft.Windows.Server.10.0.AD.DomainController.DNS | PerformanceCollection | True | False |
![Microsoft.Windows.Server.10.0.AD.DomainController.DNSTotalCPU.Collection](/images/Rule.png) | Microsoft.Windows.Server.10.0.AD.DomainController.DNSTotalCPU.Collection | Microsoft.Windows.Server.10.0.AD.DomainController.DNSTotalCPU.Collection | Microsoft.Windows.Server.10.0.AD.DomainController.DNS | PerformanceCollection | True | False |
![Microsoft.Windows.Server.10.0.AD.DomainController.DRAInboundBytes.Collection](/images/Rule.png) | Microsoft.Windows.Server.10.0.AD.DomainController.DRAInboundBytes.Collection | Microsoft.Windows.Server.10.0.AD.DomainController.DRAInboundBytes.Collection | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | PerformanceCollection | True | False |
![Microsoft.Windows.Server.10.0.AD.DomainController.DRAInboundBytesComp.Collection](/images/Rule.png) | Microsoft.Windows.Server.10.0.AD.DomainController.DRAInboundBytesComp.Collection | Microsoft.Windows.Server.10.0.AD.DomainController.DRAInboundBytesComp.Collection | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | PerformanceCollection | True | False |
![Microsoft.Windows.Server.10.0.AD.DomainController.DRAInboundBytesNotComp.Collection](/images/Rule.png) | Microsoft.Windows.Server.10.0.AD.DomainController.DRAInboundBytesNotComp.Collection | Microsoft.Windows.Server.10.0.AD.DomainController.DRAInboundBytesNotComp.Collection | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | PerformanceCollection | True | False |
![Microsoft.Windows.Server.10.0.AD.DomainController.DRAInboundBytesTotal.Collection](/images/Rule.png) | Microsoft.Windows.Server.10.0.AD.DomainController.DRAInboundBytesTotal.Collection | Microsoft.Windows.Server.10.0.AD.DomainController.DRAInboundBytesTotal.Collection | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | PerformanceCollection | True | False |
![Microsoft.Windows.Server.10.0.AD.DomainController.DRAIntersiteOutBytes.Collection](/images/Rule.png) | Microsoft.Windows.Server.10.0.AD.DomainController.DRAIntersiteOutBytes.Collection | Microsoft.Windows.Server.10.0.AD.DomainController.DRAIntersiteOutBytes.Collection | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | PerformanceCollection | True | False |
![Microsoft.Windows.Server.10.0.AD.DomainController.DRAOutboundBytesComp.Collection](/images/Rule.png) | Microsoft.Windows.Server.10.0.AD.DomainController.DRAOutboundBytesComp.Collection | Microsoft.Windows.Server.10.0.AD.DomainController.DRAOutboundBytesComp.Collection | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | PerformanceCollection | True | False |
![Microsoft.Windows.Server.10.0.AD.DomainController.DRAOutboundBytesNotComp.Collection](/images/Rule.png) | Microsoft.Windows.Server.10.0.AD.DomainController.DRAOutboundBytesNotComp.Collection | Microsoft.Windows.Server.10.0.AD.DomainController.DRAOutboundBytesNotComp.Collection | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | PerformanceCollection | True | False |
![Microsoft.Windows.Server.10.0.AD.DomainController.DRAOutboundBytesTotal.Collection](/images/Rule.png) | Microsoft.Windows.Server.10.0.AD.DomainController.DRAOutboundBytesTotal.Collection | Microsoft.Windows.Server.10.0.AD.DomainController.DRAOutboundBytesTotal.Collection | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | PerformanceCollection | True | False |
![Microsoft.Windows.Server.10.0.AD.DomainController.DSSubSearch.Collection](/images/Rule.png) | Microsoft.Windows.Server.10.0.AD.DomainController.DSSubSearch.Collection | Microsoft.Windows.Server.10.0.AD.DomainController.DSSubSearch.Collection | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | PerformanceCollection | True | False |
![Microsoft.Windows.Server.10.0.AD.DomainController.KDCASRequests.Collection](/images/Rule.png) | Microsoft.Windows.Server.10.0.AD.DomainController.KDCASRequests.Collection | Microsoft.Windows.Server.10.0.AD.DomainController.KDCASRequests.Collection | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | PerformanceCollection | True | False |
![Microsoft.Windows.Server.10.0.AD.DomainController.KDCTGRequests.Collection](/images/Rule.png) | Microsoft.Windows.Server.10.0.AD.DomainController.KDCTGRequests.Collection | Microsoft.Windows.Server.10.0.AD.DomainController.KDCTGRequests.Collection | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | PerformanceCollection | True | False |
![Microsoft.Windows.Server.10.0.AD.DomainController.KerberosAuth.Collection](/images/Rule.png) | Microsoft.Windows.Server.10.0.AD.DomainController.KerberosAuth.Collection | Microsoft.Windows.Server.10.0.AD.DomainController.KerberosAuth.Collection | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | PerformanceCollection | True | False |
![Microsoft.Windows.Server.10.0.AD.DomainController.LDAPClientSessions.Collection](/images/Rule.png) | Microsoft.Windows.Server.10.0.AD.DomainController.LDAPClientSessions.Collection | Microsoft.Windows.Server.10.0.AD.DomainController.LDAPClientSessions.Collection | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | PerformanceCollection | True | False |
![Microsoft.Windows.Server.10.0.AD.DomainController.LDAPSearches.Collection](/images/Rule.png) | Microsoft.Windows.Server.10.0.AD.DomainController.LDAPSearches.Collection | Microsoft.Windows.Server.10.0.AD.DomainController.LDAPSearches.Collection | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | PerformanceCollection | True | False |
![Microsoft.Windows.Server.10.0.AD.DomainController.LDAPUDPOperations.Collection](/images/Rule.png) | Microsoft.Windows.Server.10.0.AD.DomainController.LDAPUDPOperations.Collection | Microsoft.Windows.Server.10.0.AD.DomainController.LDAPUDPOperations.Collection | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | PerformanceCollection | True | False |
![Microsoft.Windows.Server.10.0.AD.DomainController.LDAPWrites.Collection](/images/Rule.png) | Microsoft.Windows.Server.10.0.AD.DomainController.LDAPWrites.Collection | Microsoft.Windows.Server.10.0.AD.DomainController.LDAPWrites.Collection | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | PerformanceCollection | True | False |
![Microsoft.Windows.Server.10.0.AD.DomainController.LSASSHandleCount.Collection](/images/Rule.png) | Microsoft.Windows.Server.10.0.AD.DomainController.LSASSHandleCount.Collection | Microsoft.Windows.Server.10.0.AD.DomainController.LSASSHandleCount.Collection | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | PerformanceCollection | True | False |
![Microsoft.Windows.Server.10.0.AD.DomainController.LSASSPrivateBytes.Collection](/images/Rule.png) | Microsoft.Windows.Server.10.0.AD.DomainController.LSASSPrivateBytes.Collection | Microsoft.Windows.Server.10.0.AD.DomainController.LSASSPrivateBytes.Collection | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | PerformanceCollection | True | False |
![Microsoft.Windows.Server.10.0.AD.DomainController.LSASSTotalCPU.Collection](/images/Rule.png) | Microsoft.Windows.Server.10.0.AD.DomainController.LSASSTotalCPU.Collection | Microsoft.Windows.Server.10.0.AD.DomainController.LSASSTotalCPU.Collection | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | PerformanceCollection | True | False |
![Microsoft.Windows.Server.10.0.AD.DomainController.NTLMAuthentications.Collection](/images/Rule.png) | Microsoft.Windows.Server.10.0.AD.DomainController.NTLMAuthentications.Collection | Microsoft.Windows.Server.10.0.AD.DomainController.NTLMAuthentications.Collection | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | PerformanceCollection | True | False |
![Microsoft.Windows.Server.10.0.AD.DomainController.Paging.Collection](/images/Rule.png) | Microsoft.Windows.Server.10.0.AD.DomainController.Paging.Collection | Microsoft.Windows.Server.10.0.AD.DomainController.Paging.Collection | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | PerformanceCollection | True | False |
![Microsoft.Windows.Server.10.0.AD.DomainController.ProcessorTime.Collection](/images/Rule.png) | Microsoft.Windows.Server.10.0.AD.DomainController.ProcessorTime.Collection | Microsoft.Windows.Server.10.0.AD.DomainController.ProcessorTime.Collection | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | PerformanceCollection | True | False |
![Microsoft.Windows.Server.10.0.AD.DomainController.ServerSessions.Collection](/images/Rule.png) | Microsoft.Windows.Server.10.0.AD.DomainController.ServerSessions.Collection | Microsoft.Windows.Server.10.0.AD.DomainController.ServerSessions.Collection | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | PerformanceCollection | True | False |
![Microsoft.Windows.Server.10.0.AD.DomainController.SystemUpTime.Collection](/images/Rule.png) | Microsoft.Windows.Server.10.0.AD.DomainController.SystemUpTime.Collection | Microsoft.Windows.Server.10.0.AD.DomainController.SystemUpTime.Collection | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | PerformanceCollection | True | False |
![Microsoft.Windows.Server.10.0.AD.DomainController.TCPv4Connections.Collection](/images/Rule.png) | Microsoft.Windows.Server.10.0.AD.DomainController.TCPv4Connections.Collection | Microsoft.Windows.Server.10.0.AD.DomainController.TCPv4Connections.Collection | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | PerformanceCollection | True | False |
![Microsoft.Windows.Server.10.0.AD.DomainController.TCPv6Connections.Collection](/images/Rule.png) | Microsoft.Windows.Server.10.0.AD.DomainController.TCPv6Connections.Collection | Microsoft.Windows.Server.10.0.AD.DomainController.TCPv6Connections.Collection | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | PerformanceCollection | True | False |
![Microsoft.Windows.Server.10.0.AD.Performance.BindTimes.PerformanceCollection](/images/Rule.png) | Microsoft.Windows.Server.10.0.AD.Performance.BindTimes.PerformanceCollection | Microsoft.Windows.Server.10.0.AD.Performance.BindTimes.PerformanceCollection | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | PerformanceCollection | True | False |
![Microsoft.Windows.Server.10.0.AD.Performance.FsmoResponse.Bind.Domain.PerformanceCollection](/images/Rule.png) | Microsoft.Windows.Server.10.0.AD.Performance.FsmoResponse.Bind.Domain.PerformanceCollection | Microsoft.Windows.Server.10.0.AD.Performance.FsmoResponse.Bind.Domain.PerformanceCollection | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | PerformanceCollection | True | False |
![Microsoft.Windows.Server.10.0.AD.Performance.FsmoResponse.Bind.Infra.PerformanceCollection](/images/Rule.png) | Microsoft.Windows.Server.10.0.AD.Performance.FsmoResponse.Bind.Infra.PerformanceCollection | Microsoft.Windows.Server.10.0.AD.Performance.FsmoResponse.Bind.Infra.PerformanceCollection | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | PerformanceCollection | True | False |
![Microsoft.Windows.Server.10.0.AD.Performance.FsmoResponse.Bind.PDC.PerformanceCollection](/images/Rule.png) | Microsoft.Windows.Server.10.0.AD.Performance.FsmoResponse.Bind.PDC.PerformanceCollection | Microsoft.Windows.Server.10.0.AD.Performance.FsmoResponse.Bind.PDC.PerformanceCollection | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | PerformanceCollection | True | False |
![Microsoft.Windows.Server.10.0.AD.Performance.FsmoResponse.Bind.RID.PerformanceCollection](/images/Rule.png) | Microsoft.Windows.Server.10.0.AD.Performance.FsmoResponse.Bind.RID.PerformanceCollection | Microsoft.Windows.Server.10.0.AD.Performance.FsmoResponse.Bind.RID.PerformanceCollection | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | PerformanceCollection | True | False |
![Microsoft.Windows.Server.10.0.AD.Performance.FsmoResponse.Bind.Schema.PerformanceCollection](/images/Rule.png) | Microsoft.Windows.Server.10.0.AD.Performance.FsmoResponse.Bind.Schema.PerformanceCollection | Microsoft.Windows.Server.10.0.AD.Performance.FsmoResponse.Bind.Schema.PerformanceCollection | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | PerformanceCollection | True | False |
![Microsoft.Windows.Server.10.0.AD.Performance.FsmoResponse.Ping.Domain.PerformanceCollection](/images/Rule.png) | Microsoft.Windows.Server.10.0.AD.Performance.FsmoResponse.Ping.Domain.PerformanceCollection | Microsoft.Windows.Server.10.0.AD.Performance.FsmoResponse.Ping.Domain.PerformanceCollection | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | PerformanceCollection | True | False |
![Microsoft.Windows.Server.10.0.AD.Performance.FsmoResponse.Ping.Infra.PerformanceCollection](/images/Rule.png) | Microsoft.Windows.Server.10.0.AD.Performance.FsmoResponse.Ping.Infra.PerformanceCollection | Microsoft.Windows.Server.10.0.AD.Performance.FsmoResponse.Ping.Infra.PerformanceCollection | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | PerformanceCollection | True | False |
![Microsoft.Windows.Server.10.0.AD.Performance.FsmoResponse.Ping.PDC.PerformanceCollection](/images/Rule.png) | Microsoft.Windows.Server.10.0.AD.Performance.FsmoResponse.Ping.PDC.PerformanceCollection | Microsoft.Windows.Server.10.0.AD.Performance.FsmoResponse.Ping.PDC.PerformanceCollection | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | PerformanceCollection | True | False |
![Microsoft.Windows.Server.10.0.AD.Performance.FsmoResponse.Ping.RID.PerformanceCollection](/images/Rule.png) | Microsoft.Windows.Server.10.0.AD.Performance.FsmoResponse.Ping.RID.PerformanceCollection | Microsoft.Windows.Server.10.0.AD.Performance.FsmoResponse.Ping.RID.PerformanceCollection | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | PerformanceCollection | True | False |
![Microsoft.Windows.Server.10.0.AD.Performance.FsmoResponse.Ping.Schema.PerformanceCollection](/images/Rule.png) | Microsoft.Windows.Server.10.0.AD.Performance.FsmoResponse.Ping.Schema.PerformanceCollection | Microsoft.Windows.Server.10.0.AD.Performance.FsmoResponse.Ping.Schema.PerformanceCollection | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | PerformanceCollection | True | False |
![Microsoft.Windows.Server.10.0.AD.Performance.GCResponse.PerformanceCollection](/images/Rule.png) | Microsoft.Windows.Server.10.0.AD.Performance.GCResponse.PerformanceCollection | Microsoft.Windows.Server.10.0.AD.Performance.GCResponse.PerformanceCollection | Microsoft.Windows.Server.10.0.AD.GlobalCatalogServerRole | PerformanceCollection | True | False |
![Microsoft.Windows.Server.10.0.AD.Replication.Queue.PerformanceCollection](/images/Rule.png) | Microsoft.Windows.Server.10.0.AD.Replication.Queue.PerformanceCollection | Microsoft.Windows.Server.10.0.AD.Replication.Queue.PerformanceCollection | Microsoft.Windows.Server.10.0.AD.DomainControllerRole | PerformanceCollection | True | False |