---
title: "Microsoft Servers"
canonical: "https://docs.infoblox.com/space/UniversalAssetInsights/1710162758/Microsoft%20Servers"
format: markdown
---
> Macro (excerpt)
> 
> Organizations running Microsoft DNS and DHCP natively on Active Directory servers face escalating challenges. Server-bound tools create silos, forcing administrators to manage each environment in isolation. Tight coupling with AD adds complexity, making automation risky and troubleshooting slower. Fragmented workflows — multiple logins, brittle scripts, and manual operations — waste skilled staff time and drive-up operational costs. At the same time, forgotten DNS records expose systems to cyberthreats, and siloed NetOps, CloudOps, and SecOps lack a single source of truth, delaying remediation and complicating compliance. As hybrid and multi-cloud initiatives expand, these issues only get worse, limiting agility and slowing business outcomes.
> 
> 
> 
> The Infoblox Universal DDI Agent for Microsoft addresses these challenges by extending the Universal DDI platform to Microsoft environments. With a lightweight native agent and two-way sync, Microsoft DNS and DHCP can be managed in place — no rip-and-replace required. Administrators gain a single API and dashboard to unify control across hybrid and multi-cloud, with consistent policy enforcement that reduces errors and accelerates deployments.
> 
> In addition to DNS and DHCP management, the Infoblox Universal DDI Agent provides context to both Infoblox Threat Defense and Infoblox Asset Insights. User and device data, sourced from Microsoft, enriches network and security data, giving SecOps teams stronger visibility and faster incident response. The result is simplified workflows, reduced overhead, stronger security posture, and the agility to modernize Microsoft services at your own pace — all within the same Universal DDI platform that powers enterprise-wide network services.
> 
> > ⚠️ Before configuring network discovery for Active Directory, DNS, or Event Logs, ensure that you complete all the steps mentioned in *[Pre-configuration for Microsoft Active Directory](https://infoblox-docs.atlassian.net/wiki/spaces/UniversalAssetInsights/pages/1694597671)*.
> 
> Configuring network discovery for Microsoft Active Directory consists of the following steps:
> 
> 1. **Pre-configuration for Microsoft Active Directory**: This configuration must be performed on the Microsoft Active Directory server on your network. For more information, see *[Pre-configuration for Microsoft Active Directory](https://infoblox-docs.atlassian.net/wiki/spaces/UniversalAssetInsights/pages/1694597671)*.
> 2. **Installing Infoblox Universal Agent**: This step involves downloading the Infoblox Universal Agent, installing the agent and its components, and connecting the agent with the Infoblox Portal using the Join Token. For more information, see *[Installing Infoblox Universal DDI Agent](https://infoblox-docs.atlassian.net/wiki/spaces/UniversalAssetInsights/pages/1710195646)*.
> 3. **Configuring Discovery**: This step involves configuring network discovery for Active Directory, DNS, DHCP, and Event Logs. For more information, see* **[Discovering Active Directory](https://infoblox-docs.atlassian.net/wiki/pages/createpage.action?spaceKey=universalassetinsightsdraft&title=Discovering%20Active%20Directory1&linkCreation=true&fromPageId=1710162749)**, **[Discovering DNS](https://infoblox-docs.atlassian.net/wiki/spaces/UniversalAssetInsights/pages/1710163101)**, **[Discovering DHCP](https://infoblox-docs.atlassian.net/wiki/spaces/UniversalAssetInsights/pages/1710228652)*, and *[Discovering Event Logs](https://infoblox-docs.atlassian.net/wiki/pages/createpage.action?spaceKey=universalassetinsightsdraft&title=Discovering%20Event%20Log&linkCreation=true&fromPageId=1710162749)**. *
> 
> 
> Microsoft Active Directory consists of the following components:
> 
> ## Active Directory Server
> 
> The Active Directory Server, also known as the Domain Controller (DC), is the core of the AD infrastructure. It hosts the AD database and handles user and computer authentication, authorization, and policy enforcement.
> 
> **Key Functions:**
> 
> - Authenticates users and computers in the domain
> - Enforces security policies and login restrictions
> - Replicates directory data across domain controllers for consistency and availability
> - Supports single sign-on (SSO) capabilities across domain-joined resources
> 
> ## DNS (Domain Name System)
> 
> DNS is a critical component in Active Directory. It provides the name resolution services needed for clients to locate domain controllers and other network services. AD uses DNS to store and locate service records (SRV) required for its operations.
> 
> **Key Functions:**
> 
> - Resolves Fully Qualified Domain Names (FQDNs) to IP addresses
> - Allows clients to locate Domain Controllers via SRV records (e.g., `_ldap._tcp.dc._msdcs.domain.com`)
> - Supports dynamic DNS updates from domain-joined devices
> - Ensures proper name resolution across sites for replication and authentication
> 
> ## Event Logs
> 
> Event Logs in Active Directory provide valuable visibility into the behavior and security of domain controllers. These logs are accessible via the Windows Event Viewer and are essential for monitoring, auditing, and troubleshooting.
> 
> **Key Logs:**
> 
> - **Security Log**: Captures authentication attempts, account logins, and audit events
> 
> **Use these logs to:**
> 
> - Detect unauthorized access or security policy violations


You can perform the following actions:

> Macro (children)