Tài liệu Module 13: Monitoring Microsoft Exchange 2000 ppt

Identify resource bottlenecks by monitoring Exchange 2000 and Microsoft Windows 2000 performance objects and counters using Performance Logs and Alerts and System Monitor!. Identify reso

Contents

Overview 1

Tools for Monitoring Exchange 2000 2

Monitoring Exchange 2000 by Using the

Demonstration: Configuring an Alert 20

Monitoring Exchange 2000 by Using

Demonstration: Monitoring Hard Disk

Space 29

Logging and Viewing Diagnostic Data 31

Enabling Protocol Logging 36

Lab A: Monitoring Exchange 2000 37

Review 46

Module 13: Monitoring Microsoft Exchange 2000

to represent any real individual, company, product, or event, unless otherwise noted Complying with all applicable copyright laws is the responsibility of the user No part of this document may

be reproduced or transmitted in any form or by any means, electronic or mechanical, for any purpose, without the express written permission of Microsoft Corporation If, however, your only means of access is electronic, permission to print one copy is hereby granted

Microsoft may have patents, patent applications, trademarks, copyrights, or other intellectual property rights covering subject matter in this document Except as expressly provided in any written license agreement from Microsoft, the furnishing of this document does not give you any license to these patents, trademarks, copyrights, or other intellectual property

 2000 Microsoft Corporation All rights reserved

Microsoft, Active Directory, BackOffice, Jscript, NetMeeting, Outlook, Windows, Windows NT are either registered trademarks or trademarks of Microsoft Corporation in the U.S.A and/or other countries

Other product and company names mentioned herein may be the trademarks of their respective owners

Program Manager: Steve Thues

Product Manager: Megan Camp

Instructional Designers: Bill Higgins (Volt Technical), Jennifer Morrison, Priya Santhanam

(NIIT (USA) Inc), Samantha Smith, Alan Smithee

Instructional Software Design Engineers: Scott Serna

Subject Matter Experts: Krista Anders, Megan Camp, Chris Gould (Global Logic Ltd),

Janice Howd, Elizabeth Molony, Steve Schwartz (Implement.Com), Bill Wade (Wadeware LLC)

Technical Contributors: Karim Batthish, Paul Bowden, Kevin Kaufman, Barry Steinglass,

Jeff Wilkes

Graphic Artist: Kimberly Jackson (Independent Contractor)

Editing Manager: Lynette Skinner

Editor: Kelly Baker

Production Manager: Miracle Davis

Build Manager: Julie Challenger

Production Support: Marlene Lambert (Online Training Solutions, Inc)

Test Manager: Eric Myers

Courseware Testing: Robertson Lee (Volt)

Creative Director, Media/Sim Services: David Mahlmann

Web Development Lead: Lisa Pease

CD Build Specialist: Julie Challenger

Localization Manager: Rick Terek

Operations Coordinator: John Williams

Manufacturing Support: Laura King; Kathy Hershey

Lead Product Manager, Release Management: Bo Galford

Lead Product Manager, Messaging: Dave Phillips

Group Manager, Courseware Infrastructure: David Bramble

Group Product Manager, Content Development: Dean Murray

General Manager: Robert Stewart

BETA MATERIALS FOR MICROSOFT CERTIFIED TRAINER PREPARATION PURPOSES ONLY

Instructor Notes

This module provides students with the knowledge and skills to use various monitoring tools to ensure that Microsoft Exchange 2000 performs at an

optimum level

After completing this module, students will be able to:

! Describe the tools that you use to monitor the performance of a computer running Exchange 2000

! Identify resource bottlenecks by monitoring Exchange 2000 and Microsoft Windows 2000 performance objects and counters using Performance Logs and Alerts and System Monitor

! Monitor services and resources, create notifications, and view server and connector status by using the Monitoring and Status tool

! Assess system efficiency by configuring diagnostic logging on components and using Event Viewer to view the log files

Materials and Preparation

This section provides the materials and preparation tasks that you need to teach this module

Required Materials

To teach this module, you need the following materials:

! Microsoft® PowerPoint file 1572a_13.ppt

Preparation Tasks

To prepare for this module, you should:

! Read all of the materials for this module

! Complete the lab

! Practice the demonstrations

Presentation:

60 Minutes

Lab:

30 Minutes

Demonstration

This section provides demonstration procedures that will not fit in the margin notes or are not appropriate for the student notes

Configuring an Alert

! To prepare for the demonstration

• Practice the demonstration

• Familiarize yourself with Performance Logs and Alerts

• Verify that the computer that you are using for the demonstration has less then 50% free space on the C: drive If not, you will need to adjust Limit to

a value higher than 50%

Monitoring Hard Disk Space

! To prepare for the demonstration

• Practice the demonstration

• Familiarize yourself with the Monitoring and Status tool

• Make sure to use a threshold value for the warning state that is 250 MB greater than the total number of MBs of free disk space

• Make sure to use a threshold value for the critical state that is 200 MB greater than the total number of MBs of free disk space

BETA MATERIALS FOR MICROSOFT CERTIFIED TRAINER PREPARATION PURPOSES ONLY

Module Strategy

Use the following strategy to present this module:

! Tools for Monitoring Exchange 2000 This topic focuses on the tools used to monitor Microsoft Exchange 2000 First, explain why it is important to monitor and gather performance data for analysis and capacity planning Next, introduce several tools that are used to monitor Exchange 2000 Describe these tools along with any tool that is used in the lab and the demonstrations Briefly discuss the additional monitoring tools It is not necessary to provide in depth information on the additional tools, because they are not the focus of this module

! Monitoring Exchange 2000 by Using the Performance MMC This topic focuses on the Performance Microsoft Management Console (MMC) snap-in and the Microsoft Windows 2000 and Exchange 2000 counters that you can monitor First, introduce and define the terms:

performance objects and counters Explain that the Performance MMC consists of both the System Monitor and Performance Logs and Alerts, and then explain the function of each tool The remainder of this topic lists and explains the important performance objects and counters that you can use to monitor Exchange 2000 and Microsoft Windows 2000 resources It is not necessary to provide an in depth explanation of all counters, identify the most useful counters and have your students identify the counters that they frequently use to troubleshoot system resource issues

! Monitoring Exchange 2000 by Using Monitoring and Status This topic focuses on the Monitoring and Status tool and how you can create notifications that warn you when a service fails First, introduce the

Monitoring and Status tools and explain that the tool consists of two components: Status and Notification Then, explain the functionality of each component Next, stress that Exchange 2000 automatically monitors the default Exchange 2000 services and explain that you can add services to the default monitoring configuration or you can create new monitoring

configurations if you need different a configuration setting for monitoring a set of services Next, discuss how to monitor resources and the different monitoring configurations available When discussing Notifications, explain the different parameters and that the parameters include the type of

notification that you want to use: e-mail or script Lastly, demonstrate the Notifications component by configuring an e-mail notification

! Logging and Viewing Diagnostic Data This topic focuses on configuring logging and how to review the logged data First, explain that diagnostic logging provides detailed information

about services and related categories Show the Diagnostics Logging tab

and point out some of the services available for logging and related categories Next, discuss the different logging levels and the type of information that each level provides Show that you can view the diagnostic data by using the Event Viewer Review the different types of logs and the log structure Lastly, discuss how to enable protocol logging for Simple Mail Transfer Protocol (SMTP), Network News Transfer Protocol (NNTP), and Hyper Text Transport Protocol (HTTP) protocols

Customization Information

This section identifies the lab setup requirements for a module and the configuration changes that occur on student computers during the labs This information is provided to assist you in replicating or customizing Microsoft Official Curriculum (MOC) courseware

The lab in this module is also dependent on the classroom configuration that is specified in the Customization Information section at the

end of the Classroom Setup Guide for course 1572A, Installing and Managing Microsoft Exchange 2000

! Complete the labs for Module 2, “Installing Microsoft Exchange 2000,” in course 1572A, Implementing and Managing a Microsoft Exchange 2000 Organization

! Install Exchange 2000 at D:\Program Files\Exchsrvr on each server into an organization named Northwind Traders Components installed are Microsoft Exchange Messaging and Collaboration Services, Microsoft Exchange System Management Tools, and Microsoft Exchange Instant Messaging Service Have the students create a custom MMC in the C:\Documents and

Settings\All Users\Desktop that is saved as your_firstname Console The

MMC contains the Active Directory Users and Computers snap-in and the Exchange System snap-in

! Complete the labs for Module 3, “Administering Microsoft Exchange

2000,” in course 1572A, Implementing and Managing Microsoft Exchange

Important

BETA MATERIALS FOR MICROSOFT CERTIFIED TRAINER PREPARATION PURPOSES ONLY

Setup Requirement 3

The lab in this module requires an IMAP4 client be configured to log on to the local Exchange 2000 server To prepare student computers to meet this requirement, perform one of the following actions on each server in the organization:

! Complete the lab for Module 10, “Configuring Internet Protocols,” in course

1572A, Implementing and Managing a Microsoft Exchange 2000

! Configure Outlook Express to connect to each student’s your_username

mailbox on each student’s Exchange Server

Setup Requirement 4

The lab in this module requires that an instant messaging server be configured

To prepare student computers to meet this requirement, perform one of the following actions on each server in the organization:

! Complete the lab for Module 12, “Configuring Instant Messaging,” in

course 1572A, Implementing and Managing a Microsoft Exchange 2000

! Create an instant messaging virtual server on each server in the

organization, and then enable all your_username accounts for instant

messaging Install the MSN Messenger client that ships with Exchange 2000

on each student machine and configure it to log that student on using their

personal your_username account

Lab Results

Performing the lab in this module introduces the following configuration changes:

! MailTest is installed on each student machine

! A notification is created that alerts all users logged on to your server that a service is down if an Exchange service stops

BETA MATERIALS FOR MICROSOFT CERTIFIED TRAINER PREPARATION PURPOSES ONLY

Overview

! Tools for Monitoring Exchange 2000

! Monitoring Exchange 2000 by Using the Performance MMC

! Monitoring Exchange 2000 by Using Monitoring and Status

! Logging and Viewing Diagnostic Data

There are numerous monitoring tools and services available to you to ensure a computer running Microsoft Exchange 2000 is functioning efficiently Your ability to configure and use these tools and services, and to analyze the data that the tools provide will help reduce server performance issues and plan for future hardware resources

After completing this module, you will be able to:

! Describe the tools that you use to monitor the performance of a computer running Exchange 2000

! Identify resource bottlenecks by monitoring Exchange 2000 and Microsoft Windows 2000 performance objects and counters using Performance Logs and Alerts and System Monitor

! Monitor services and resources, create notifications, and view server and connector status by using the Monitoring and Status tool

! Assess system efficiency by configuring diagnostic logging on components and using Event Viewer to view the log files

In this module, you will learn

how to monitor the

performance of a computer

running Exchange 2000

# Tools for Monitoring Exchange 2000

! Monitoring Tools

! Additional Monitoring Tools

In addition to disaster planning and regular backup, you must monitor system activity and server performance to provide effective preventive maintenance of Exchange 2000

Microsoft Windows 2000 and Exchange 2000 offer various tools to monitor application performance and server performance Familiarizing yourself with the tools available will help you choose the best tool based for your monitoring needs

The data you accumulate through daily monitoring provides the information you need for trend analysis and capacity planning By characterizing system performance over time, you can justify the need for new resources before the need becomes critical

2000 on a regular basis, you

resolve issues before they

impact users, provide

effective preventive

maintenance, and plan for

future capacity

BETA MATERIALS FOR MICROSOFT CERTIFIED TRAINER PREPARATION PURPOSES ONLY

Monitoring Tools

Event Viewer Diagnostic Logging

Protocol Logging

Tools Monitoring and Status Notifications Status Performance MMC

Both Windows 2000 and Exchange 2000 provide tools for monitoring and analyzing server components and Exchange 2000 performance and usage Familiarizing yourself the tools available will help you in choosing the best tool

to use based on your needs

The following tools are the frequently used tools for monitoring the status and performance of Exchange 2000

! Performance MMC A Windows 2000 tool that consists of System Monitor and Performance Logs and Alerts Use System Monitor for viewing information about various performance objects Use Performance Logs and Alerts for logging counter data and event tracing data and to generate

performance alerts Performance MMC is commonly referred to as perfmon

! Monitoring and Status An Exchange 2000 tool that consists of two

components: Notifications and Status Use Notifications to set up scripts and e-mail notifications Use Status to configure warning and critical states for Windows 2000 and Exchange 2000 components

! Event Viewer A Windows 2000 tool that provides event information about applications, directory service, file replication service, security, and system

components

! Diagnostic logging A capability of Exchange 2000 that enables you to monitor Exchange 2000 connectors, protocol connectors, and various system components You can view the logged data by using Event Viewer

! Protocol Logging An Internet Information Services (IIS) tool that provides detailed information about the commands being sent and received by Simple Mail Transfer Protocol (SMTP) and Network News Transport Protocol (NNTP) You can use the information for monitoring and troubleshooting protocol or messaging errors

Windows 2000 offer many

tools for monitoring server

performance and Exchange

Additional Monitoring Tools

Queue Viewer Message Tracking Center Network Monitor

Network Diagnostics Tool Task Manager

HTTPMon

HTTPMon

Windows Management Instrumentation

You may need more specific information when troubleshooting an issue with a computer running Exchange 2000 The following tools are also available to monitor specific aspects of a server or a network:

! Queue Viewer An Exchange 2000 tool that you can use to views the X.400, SMTP transport protocol queues and other connectors installed on a server

! Message Tracking Center An Exchange 2000 tool that tracks messages from sender to recipient through Exchange 2000

! Network Monitor A Windows 2000 tool that captures, displays, and

analyzes network traffic

! Network Diagnosis Tool (Netdiag) A Windows 2000 tool that you use to diagnose network and connectivity problems through a command line

interface

! Task Manager A Windows 2000 tool that provides information about programs and processes running on your computer Task manager also

enables you to monitor key indicators of a server’s performance

! HTTPMon A Windows 2000 Resource Kit tool that provides real-time

monitoring of Web site availability

! Windows Management Instrumentation (WMI) The Microsoft implementation of Web-based Enterprise Management (WBEM) Provides uniform access to management information Exchange 2000 supports WMI

by including WMI providers that access status and other Exchange 2000

many other tools for

monitoring performance and

troubleshooting issues

Inform the students that

these tools are not

discussed in this module

This module focuses on the

frequently used tools

mentioned on the previous

page

BETA MATERIALS FOR MICROSOFT CERTIFIED TRAINER PREPARATION PURPOSES ONLY

MMC

! Performance Logs and Alerts and System Monitor

! Monitoring Exchange 2000 Performance Counters and Objects

! Monitoring for Disk Subsystem Bottlenecks

! Monitoring for Memory Bottlenecks

! Monitoring for Processor Bottlenecks

! Monitoring for Network Subsystem Bottlenecks

! Demonstration: Configuring an Alert

As a server performs tasks, it generates performance data The data is

formulated into performance objects In Windows 2000, a performance object

represents an individual process, a section of shared memory, or a physical device

A performance object can have several counters Counters are data items that

are associated with the performance object For example, the Processor object has many counters, including % Processor Time and Interrupts/sec

You monitor performance objects and their counters by using System Monitor and Performance Logs and Alerts, which are components in the Performance Microsoft Management Console (MMC)

Performance Logs and Alerts and System Monitor

! Performance Logs and Alerts

! System Monitor

The Performance MMC contains two components that provide information on performance objects and related counters The two components are

Performance Log and Alerts and System Monitor

Performance Logs and Alerts

Performance Logs and Alerts records and logs system activity over a period of time You collect data to analyze performance and usage With Performance Logs and Alerts, you can also configure alerts to track system activity For example, you can configure an alert to monitor when a specific counter exceeds

a defined threshold When the threshold is exceeded, an event is generated You can use the Performance Logs and Alerts to:

! Configure real-time alerts on object counters to provide proactive information on Exchange 2000 component activity

! Configure and view real-time analysis of a server experiencing problems to isolate the failing component

! Plan for future capacity requirements and perform trend analysis on data that has been written to a log file

Topic Objective

To provide an introduction to

the functionality of

Performance Logs and

Alerts and System Monitor

Lead-in

The Performance MMC

contains System Monitor

and Performance Logs and

Alerts

BETA MATERIALS FOR MICROSOFT CERTIFIED TRAINER PREPARATION PURPOSES ONLY

System Monitor

System Monitor charts activity in real time and displays information contained

in log files

You can use System Monitor to:

! View server activity during times of performance degradation

! Perform analysis of processor activity and queues, which is useful in isolating problems with specific components

When monitoring large numbers of counters, the computer running System Monitor may experience a decline in system performance You can reduce this burden by displaying data in report view or directing the data to a binary log file, and then viewing the data in the log file using System Monitor

Note

Monitoring Exchange 2000 Performance Objects and Counters

Monitoring Information Store Performance

Monitoring SMTP Performance Monitoring MTA Performance

Monitoring Exchange Server 5.X Integration Performance

Monitoring Exchange Server 5.X Integration Performance

Monitoring Instant Messaging Performance

Monitoring Recipient Update Service Performance

Monitoring Recipient Update Service Performance

Information Store

Information Store

You can configure counter instances to monitor many aspects of server

performance Some counters support multiple instances Instances are a subset

of a counter that generates data For example, an instance of the % Process

Time is _Total, which provides data for all processors in a computer and

additional instances for to each processor to provide data on a processor basis

The following tables list the frequently used objects and counters for monitoring Exchange 2000

Monitoring Information Store Performance

Monitor the following objects and their related counters to view the performance of the Information Store on the computer running Exchange 2000

MSExchangeIS For the MSExchangeIS object, monitor the following counter:

Counter Description User Count Displays the number of people (not connections) that are

currently using the Information Store Always correlate performance measurement with the number of current users

Exchange 2000 installs its

own set of performance

objects and counters

Delivery Tip

View a counter in the

Performance MMC

Note

BETA MATERIALS FOR MICROSOFT CERTIFIED TRAINER PREPARATION PURPOSES ONLY

MSExchangeIS Mailbox and MSExchangeIS Public For the MSExchangeIS Mailbox and MSExchangeIS Public objects, monitor

the following counters:

Counter Description Send Queue Size Displays the queue of messages outbound from the Information

Store In the case where Simple Mail Transfer Protocol (SMTP) service or the Message Transfer Agent (MTA) is down, or is experiencing a reduction in performance, there will be a non-zero value for this queue In normal operating conditions, this queue should not stay at a non-zero value for any significant length of time except on large systems (2000 or more users) where the value will never be zero However, you should monitor for queue growth beyond the typical value for your system

Receive Queue Size

Displays the queue of all messages destined inbound for the

Information Store from the MTA The Receive Queue Size

should stay at non-zero during normal operating conditions for computer running Exchange 2000, with the possible exception of Exchange 2000 server configured as a bridgehead A bridgehead server is a computer that is configured to route messages but not necessarily to store them

Messages Sent/min

Shows the rate that messages are sent to the transport You should

use this counter in conjunction with Send Queue Size to

determine the speed at which messages are being processed

Messages Delivered/min

Shows the rate that messages are delivered to all recipients You

should use this counter in conjunction with Receive Queue Size

to determine the speed at which messages are being processed

Monitoring SMTP Performance

Monitor the SMTP Server object and its counters to analyze how a computer

running Exchange 2000 is performing as it processes inbound SMTP traffic This traffic may be from either SMTP clients, such as Microsoft Outlook Express, or other SMTP hosts, such as another computer running Exchange

2000

Counter Description Local Queue

Length

Indicates the number of messages in the local queue A normal reading is 0 If the reading is greater than 0, the server is receiving more messages than it can process If the number steadily increases, you need to determine what is causing the delay in processing

Categorizer Queue Length

Displays the number of messages waiting for advanced address resolution to occur before the message is placed in the local queue or sent to the routing engine for delivery A high number can indicate a message flow problem within your intranet

Inbound Connections Current

Measures the number of connections that are currently inbound

A reading of 0 for an extended time can indicate network problems

Message Bytes Received/sec

Measures the rate at which inbound messages are being received Use this counter to determine healthy output compared to your baseline

Message Bytes Sent/sec

Measures the rate that bytes are being sent in messages Use this counter to determine healthy output compared to your baseline

Monitoring MTA Performance

If the computer running Exchange 2000 supports inbound or outbound

messages from X.400 recipients, monitor the MSExchangeMTA and

MSExchangeMTA Connections objects and their related counters

MSExchangeMTA For the MSExchangeMTA object, monitor the following counters:

Counter Description Messages/Sec Measures the number of messages that the MTA sends and

receives each second The Messages/Sec counter is a helpful

method to quickly measure traffic sent to other servers

Work Queue Length

Monitors the number of messages queued in the MTA for delivery to other servers and the number of messages in the

receiving queue The Work Queue Length counter divided by

Messages/Sec provides an estimate of how long messages are

delayed in this queue before they are delivered or sent A high number resulting from this calculation indicates a problem, either

in performance or in transmitting messages to other servers

BETA MATERIALS FOR MICROSOFT CERTIFIED TRAINER PREPARATION PURPOSES ONLY

MSExchangeMTA Connections For the MSExchangeMTA Connections object, monitor the following

counter:

Counter Description Queue Length Displays MTA counters on a connection-by-connection basis

Queue Length looks at this queue from one MTA to any other

specific MTA If the MTA Work Queue Size Length is large, the Queue Length counter shows which connections are

responsible for the large queue

Monitoring Exchange Server 5.X Integration Performance

If computer running Exchange 2000 integrates with Microsoft Exchange Server

5.x sites, monitor the MSExchangeSRS object and its related counters:

Counter Description Replication

Updates/sec

Measures the rate at which replication updates are applied by the local site replication services This counter indicates how much replication activity is occurring on the server

Remaining Replication Updates

When a replication synchronization update message is received, it can obtain zero or more object modifications or updates for the directory to process This counter measures how many of those modifications in the current update message remain to be applied to the directory When this

counter and the Pending Replication Synchronization

counter reach zero, the directory synchronization is complete

Monitoring Instant Messaging Performance

If you are supporting Instant Messaging on the computer running Exchange

2000, monitor the MSExchangeIM Virtual Servers object and its related

counters:

Counter Description Current Online Users Indicates the number of users currently logged on to the

server

Current Subscriptions

Measures the number of current subscription notifications sent by users to server A subscription notification occurs when a user adds another user to their contact list

Inbound SUBSCRIBEs/sec

Displays the average number of SUBSCRIBE requests per second

Monitoring Recipient Update Service Performance

Monitor the MSExchangeAL object and its related counter to analyze the

Recipient Update Service:

Counter Description Address Lists Queue

Length

Indicates the load on the Recipient Update Service The Recipient Update Service updates recipient objects to reflect modifications to address lists memberships and e-mail addresses

Monitoring for Disk Subsystem Bottlenecks

Lack of system resources can greatly impact the performance of Exchange

2000 By tracking the performance of these objects, you can quickly identify potential bottlenecks and hardware and software failures

Monitor the following objects and their related counters to help identify disk subsystem bottlenecks

LogicalDisk Object

For the LogicalDisk object, monitor the following counter:

Counter Description

% Free Space Displays the percentage of free space available on a logical disk

The value indicated should be greater than 15 percent To

activate disk monitoring, you need to use the DISKPERF

command from a command prompt

Topic Objective

To explain the performance

objects and counters that

identify disk subsystem

bottlenecks

Lead-in

You should also monitor

hardware resources,

including hard disk, to

ensure optimal performance

of Exchange 2000

Delivery Tip

View one of the following

objects and counters in the

Performance MMC

BETA MATERIALS FOR MICROSOFT CERTIFIED TRAINER PREPARATION PURPOSES ONLY

PhysicalDisk Object

For the PhysicalDisk object, monitor the following counters:

% Disk Time Gauges the percentage of time that a hard drive is reading or

writing A sustained value over 90 percent indicates that the hard drive is a performance bottleneck

Disk Reads/sec, Disk Writes/sec

Checks the specified transfer rate for your hard disk drives to verify that this rate does not exceed the specifications

Current Disk Queue Length

Should equal Current Disk Queue Length/the number of

spindles, a value of 1-2 is acceptable A higher value means that your disk array is not keeping up with the demand This is

an instantaneous counter You should observe its value over several intervals to determine if there is a problem For an

average over a period of time, use PhysicalDisk\Avg Disk

Monitoring for Memory Bottlenecks

Windows 2000 Memory

Processor Hard Disk

Network

When monitoring for memory bottlenecks, you can monitor objects and counter that provide information, such as the amount of physical memory available, paging file usage, and memory usage for a process

Memory Object

For the Memory object, monitor the following counters:

Counter Description Committed Bytes Indicates how much virtual memory space has been committed to

an application This counter must not exceed the overall size of the paging file This indicates that too much application data has been committed to the virtual space

Pages/sec Shows the total in and out paging activity Paging occurs when an

application references data that is not in its working set (physical memory) If this counter is consistently averaging greater than 10, this is an early indicator of a memory bottleneck

Page Faults/sec Shows the number of times that application data was not found

in the server’s physical memory working set and had to be paged

from the disk Page Faults/sec should not show a consistently

high single figure amount You only need be concerned when

Page Faults/sec is low and Page/sec is greater than 10

Topic Objective

To describe the

commonly-used objects and counters

used to identify memory

bottlenecks

Lead-in

Monitor the following objects

and counters to identify

memory bottlenecks

BETA MATERIALS FOR MICROSOFT CERTIFIED TRAINER PREPARATION PURPOSES ONLY

Paging File Object

For Paging File object, monitor the following counter:

Counter Description

% Usage Indicates how much of the paging file is in use and determines if

there is a possible memory bottleneck If this counter is above 70 percent, you need to find the process that is using a high

percentage of processor time To remedy this situation, you may need to upgrade to a faster processor or install an additional processor

Process Object

For Process object, monitor the following counter:

Counter Description Page Faults/sec Monitors individual system processes to identify the process that

is impacted most by lack of virtual memory

Monitoring for Processor Bottlenecks

Windows 2000

Processor

Hard Disk Network

Memory

As your server activity increases, the load on the processor increases When monitoring potential processor bottlenecks, make sure that you view information for all processors in the server

Processor Object

For Processor object, monitor the following counter:

Counter Description Interrupts/sec Shows the average number of hardware interrupts that the

processor is receiving and servicing every second The threshold level depends on the speed of the processor A dramatic increase in this counter value, without a corresponding increase in system activity, indicates a hardware problem Identify the network adapter or hard disk drive controller card causing the interrupts You may need to install an additional adapter or controller card to fix the problem

% Processor Time

Checks the percentage of time that the microprocessor is running non-idle threads If the server has multiple microprocessors, you can monitor each instance An average value below 20 percent indicates that the server is underutilized or services may be down

An average value that is consistently above 70 percent indicates that the server may be overburdened

Topic Objective

To describe the

commonly-used objects and counters

used to identify processor

bottlenecks

Lead-in

Monitor the following

performance objects and

counters to identify

processor bottlenecks

BETA MATERIALS FOR MICROSOFT CERTIFIED TRAINER PREPARATION PURPOSES ONLY

Process Object

For Process object, monitor the following counters:

Counter Description

% Process Time / store

% Process Time / inetinfo

% Process Time / lsass

% Process Time / mad

Indicates how much of the computer’s CPU is being used by Exchange 2000, IIS and the security system (including Active Directory)

System Object

For System object, monitor the following counter:

Counter Description Processor Queue

Length

Shows the number of threads in the processor queue There is a single queue for processor time even on computers with multiple processors Therefore, you may need to divide this value by the number of processors servicing the workload Processor queue length is an instantaneous counter You should observe its value over several intervals to determine if there is a potential problem The value should be below 2

Context Switches/sec

Indicates the rate at which the processor(s) is switching between threads

Monitoring for Network Subsystem Bottlenecks

Windows 2000

Hard Disk

Network

Memory Processor

When monitoring for potential network bottleneck, you can monitor such items

as the network bandwidth is use on a network segment and the rate at which the server is transmitting bytes through the network Use the following objects and counters to identify network bottlenecks

Network Segment Object

For Network Segment object, monitor the following counter:

Counter Description

% Net Utilization Shows the percentage of network bandwidth in use on a network

segment You must determine the threshold based on the type of network you use For example, for Ethernet networks, 30 percent is the recommended threshold

Redirector Object

For Redirector object, monitor the following counters:

Counter Description Bytes Total/sec Provides the number of bytes per second sent and received by

the network redirector If you compare the maximum throughput of the network card with the maximum value of this counter you will be able to determine if network traffic is a bottleneck in the system

Network Errors/sec

Measures the number of unexpected errors the redirector receives If you suspect network problems, verify that this counter is above zero If it is above zero, the system log may be helpful by providing details on the network error

Topic Objective

To describe the

commonly-used objects and counters

used to identify network

subsystem bottlenecks

Lead-in

Monitor the following

performance objects and

counters to identify network

subsystem bottlenecks

BETA MATERIALS FOR MICROSOFT CERTIFIED TRAINER PREPARATION PURPOSES ONLY

Server Object

For Server object, monitor the following counters:

Counter Description Bytes Total/sec Shows the rate at which the server is transmitting bytes through

the network If the sum of Bytes Total/sec for all servers is

almost equal to the maximum transfer rates of your network, you might need to segment the network

Work Item Shortages

Shows the number of times STATUS_DATA_NOT_ACCEPTED was returned at receive indication time This occurs when no work item is available or can be allocated to service the incoming request If the value reaches approximately 3, you should consider tuning the

InitWorkItems or MaxWorkItems entries in the registry (in

HKEY_LOCAL_MACHINE\SYSTEM\

CurrentControlSet\Services\lanmanserver\Parameters)

Pool Paged Peak Indicates the proper sizes for the paging file and the amount of

physical memory

Server Work Queues Object

For Server Work Queues object, monitor the following counter:

Counter Description Queue Length Shows the current length of the server work queue for a

processor If the value reaches approximately 4, there may be a

processor bottleneck Queue Length is an instantaneous

counter You need to observe its value over several intervals to determine if there is a problem

This is only a partial listing of the Windows 2000 objects and counters For more information on Windows 2000 objects and counters, see the Windows

2000 Resource Kit

Note

Demonstration: Configuring an Alert

Exchange 2000 requires disk space to write transaction logs By configuring an alert to notify you of a possible problem, you can be proactive about managing free disk space

! To configure an alert in the Performance MMC

1 Click Start, point to Programs, point to Administrative Tools, and then click Performance

2 In the console tree pane, expand Performance Logs and Alerts

3 Right-click Alerts, and then click New Alert Settings

4 In the New Alert Settings dialog box, type a name, and then click OK

5 Click Add

6 From the Performance object list, select LogicalDisk

7 From the Select counters from list list box, select % Free Space

8 From the Select instances from list list box, select C:

9 Click Add, and then click Close

10 Set Alert when the value is to Under, and then set Limit to 50

Based on partition size, you may need to increase the limit value to greater than 50% free disk space on the C: drive to ensure that an alert will occur

11 Click the Action tab

12 Select Send a network message to:, and then type your_servername in the

text box

13 Click OK

Multiple Messenger Service dialog boxes will appear, do not click OK to

close the boxes You will close them at a later time

Have the students follow

along as you perform the

demonstration

Stress to the students that

the value listed for Limit is

for demonstration purposes

only The value that the

students use in their own

environment will be based

upon their own benchmarks

and standards