SYSTEM AND METHOD FOR MONITORING DOMAIN CONTROLLERS

A computer system having servers and coupled to a network supports a distributed directory and a directory monitor service. The monitor service may include a domain analyzer and domain model at each of several servers; and, a network administrator and network model on an enterprise server of the network. A domain analyzer monitors the network to detect messages associated with directory operations initiated or performed by the same or another server in the network. Methods performed by one or more servers predict system and network failures. One such method includes receiving a first message, receiving a second message, and conditionally raising an alert condition. The first message indicates the beginning of a replication of a portion of a directory and indicates a beginning time. The second message indicates completion of the replication of the portion of the directory and indicates an ending time. An alert condition is raised in response to comparing a first threshold value and the difference between the ending time and the beginning time. In other words, if the duration of a replication operation on the distributed directory takes longer than expected, an alert condition is raised.