Risk and Health Assessment Program for Active Directory 8.
1
Microsoft Risk and Health Assessment Program for Active Directory
Gain critical insights into the
health of your directory ser-
vice and also maximize your
IT performance with the Risk
and Health Assessment Pro-
gram for Active Directory.
ADRAP Version 8.1
Newly Designed User Interface
Extended SYSVOL Test Case
Hyper-V Host Targets Test Case
Expanded DNS Records Test Case
Support for AD Recycle Bin
Remediation Planning Functionality
Over 80 New or Updated Issues and
Rules
Now includes the Risk Assessment
and Diagnostic Tool (RADT)
license for 18 months
Deliverables Include
Executive Summary Report
Technical Findings Report
Remediation Plan Report
Action Planning Worksheet
RADT License for 18 Months
Technical Reference Document
Supported Operating Systems
Windows Server 2003
Windows Server 2008
Windows Server 2008 R2
Released: January 2011
Microsoft Active Directory forms the critical backbone to support your enterprises information
structure. A poorly functioning Active Directory environment affects security boundaries, replica-
tion, and delegate administration, causing significant impact to your business. The Risk and Health
Assessment Program for Active Directory is designed to help proactively diagnose and trouble-
shoot potential issues, and also create a plan to address current issues and prevent future problems .
The Risk and Health Assessment Program for Active Directory provides an in-depth analysis of an
organizations Windows Server 2003, Windows Server 2008, or Windows Server 2008 R2 Active
Directory. Working with senior IT staff and engineers in charge of supporting your Active Directory
environment, highly experienced Microsoft engineers collect and analyze a series of data points to
identify areas for remediation. After the assessment is complete, a Remediation Planning session is
performed. This produces a detailed plan to remediate discovered issues and address known risks.
Maximize Your Microsoft Investment
The Risk and Health Assessment Program for Active Directory provides critical insight into the
health of your directory service. Experienced Microsoft engineers leverage Microsoft tools to take a
snapshot of your Active Directory environment and analyze the performance, configuration, and
event data to provide steps for maximizing your Active Directory investment. Your staff will gain
experience by diagnosing and troubleshooting issues identified by the Risk Assessment and Diag-
nostic Tool for Active Directory to ensure that the performance of your Active Directory environ-
ment is maintained after the engagement.
Reduce Support Costs
Expose vulnerabilities in your Active Directory infrastructure and operational processes before they
affect your business. Improve your environments uptime and also lower support costs. Proactive
diagnosis of the causes, not just the symptoms, will help optimize productivity.
Key Focus Areas
Data collection is the key component of a successful engagement. Designed to take advantage of
Windows Management Instrumentation (WMI), the Risk Assessment and Diagnostic Tool for Active
Directory integrates directly with the core Operating System Management interface.
Active Directory Replication WINS Record Analysis Operational Excellence
Replication Site Topology Monitoring, DR, and Backup
Domain Controller Health
Replication Status and Change, Configuration, and
DC Configuration
Convergence Release Management
Performance Statistics
Forest and Domain Information Service Level Management
Time Configuration
Subnet Information Environmental Dependencies
OS Information
SYSVOL / Group Policy Microsoft Online Services
Event Logs
SYSVOL Configuration and Content AD Integrated Services
Security Updates
Analysis Basic Exchange Active
Active Directory Database
FRS/DFSR Configuration and Directory Configuration
Database Information
Convergence Basic Certificate Services
AD Object Analysis
Group Policy Information Configuration
Account Information
Name Resolution Password/Lockout Policies
Virtualization
DNS Server and Zone Configuration Hyper-V Host, and Guest
Token Size Analysis
DNS Record Analysis Configuration and
User/Computer Account Info
IP Configuration Performance
Stale Accounts
Practical Recommendations Risk Assessment and Diagnostic Tool for
Solutions for each risk are identified and articulated in the Key Active Directory Stays With You
Findings report. By covering operations, configuration, and
As part of the engagement, our engineers will teach your staff to
architecture, effective remediation improves efficiency in your Active
use the Risk Assessment and Diagnostic Tool for Active Directory.
Directory system. In addition, a Microsoft Office PowerPoint
This tool can be used in your assessed forest for up to 18 months
presentation and a Microsoft Office Excel report are included to
following the engagement and enables you to easily read,
help communicate the findings and the steps for remediation.
understand, and filter the data relative to the analyzed component.

Engagement Sizing for Active Directory

The Risk and Health Assessment Program for Active Directory is sized
appropriately to the complexity of your environment using the fol-
lowing criteria:

Number of Domain Assessment Time Remediation Planning Time

Tier
Controllers Onsite Onsite

Tier 1 1 to 30 3 days 1 day

Tier 2 31 to 75 4 days 1 day

Tier 3 76 to 150 5 days 1 day

Tier 4 151+ Custom 1 or 2 days

Sizing can be automatically checked and validated using the ADRAP

The Risk and Health Assessment Program includes a detailed issues inventory with
reported history and resolution status related to your Active Directory compo-
nents. There is also a comprehensive dashboard with statistics from your environ-
ment and rankings against the average set of customers.
Assessment and Remediation Planning
Scoping Tool available at http://www.microsoft.com/downloads/en/
details.aspx?FamilyID=22205827-c164-4b62-9f8d-c3cd6077bd82.
Sizing for the Risk and Health Assessment Program for Active Directory is based on
only a single Active Directory forest. All domain controllers within the single forest
must be online and accessible during the assessment to ensure accurate results.

New with this release is an additional onsite day for Remediation

Planning. This results in a detailed remediation plan aligned to
Engagement Without Business Interference
business drivers and priorities. The planning session also includes The tools and processes in the Risk and Health Assessment Program
your key business decision makers, our technical resource, and for Active Directory are designed to minimize any impact on your
your Technical Account Manager (TAM), to review the results and ongoing business. To support an effective engagement, the
make recommendations to resolve issues and mitigate risks. following is required:
Enterprise administration access
High-end workstation or server-class computer
Windows Server 2003 or later, depending on the version of the
domain controllers in the forest
Microsoft Office Visio 2007 or later
Full RPC access to all forest domain controllers
English version of the operating system
English locale in the regional settings

For more information

Please visit the Premier Support Web
site at www.microsoft.com/premier
or contact your Microsoft Services
representative.
www.facebook.com/MicrosoftRAPs

This datasheet was last updated October 2011. To ensure you have the latest
The Risk Assessment and Diagnostic Tool for Active Directory provides valua- version of this datasheet , check here:
ble information about services Microsoft offers to assist in resolving complex http://download.microsoft.com/download/1/C/1/1C15BA51-840E-498D-
risks and issues found during the assessment phase of your engagement. 86C6-4BD35D33C79E/Datasheet_ADRAP.pdf

2011 Microsoft Corporation. All rights reserved. This data sheet is for informational purposes only. MICROSOFT MAKES NO WARRANTIES, EXPRESS OR IMPLIED, IN THIS SUMMARY.
Microsoft, Active Directory, Windows, PowerPoint, Excel, Visio, and Visual Studio are registered trademarks of the Microsoft group of companies.