AD DC Performance Collection - Metric NTDS KDC AS Requests

Microsoft.Windows.Server.10.0.AD.DomainController.KDCASRequests.Collection (Rule)

Knowledge Base article:

Summary

This rule collects the number of Authentication Server (AS) requests serviced by the Kerberos Key Distribution Center (KDC) per second. AS requests are used by client to obtain a ticket-granting ticket.

This performance collection can help determine if there is an issue with load on a domain controller.

Element properties:

Target	Microsoft.Windows.Server.10.0.AD.DomainControllerRole
Category	PerformanceCollection
Enabled	True
Instance Name	Security System-Wide Statistics
Counter Name	KDC AS Requests
Frequency	900
Alert Generate	False
Remotable	False

Member Modules:

ID	Module Type	TypeId	RunAs
PerformanceDS	DataSource	System.Performance.OptimizedDataProvider	Default
WriteToDB	WriteAction	Microsoft.SystemCenter.CollectPerformanceData	Default
WriteToDW	WriteAction	Microsoft.SystemCenter.DataWarehouse.PublishPerformanceData	Default

Source Code:

<Rule ID="Microsoft.Windows.Server.10.0.AD.DomainController.KDCASRequests.Collection" Enabled="true" Target="AD2016Core!Microsoft.Windows.Server.10.0.AD.DomainControllerRole" ConfirmDelivery="false" Remotable="false" Priority="Normal" DiscardLevel="100">

  <Category>PerformanceCollection</Category>

  <DataSources>

    <DataSource ID="PerformanceDS" TypeID="SystemPerf!System.Performance.OptimizedDataProvider">

      <ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

      <CounterName>KDC AS Requests</CounterName>

      <ObjectName>Security System-Wide Statistics</ObjectName>

      <InstanceName/>

      <AllInstances>false</AllInstances>

      <Frequency>900</Frequency>

      <Tolerance>5</Tolerance>

      <ToleranceType>Percentage</ToleranceType>

      <MaximumSampleSeparation>4</MaximumSampleSeparation>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="WriteToDB" TypeID="SC!Microsoft.SystemCenter.CollectPerformanceData"/>

    <WriteAction ID="WriteToDW" TypeID="SCDW!Microsoft.SystemCenter.DataWarehouse.PublishPerformanceData"/>

  </WriteActions>

</Rule>