Abstract: A computer system having servers and coupled to a network supports a distributed directory and a directory monitor service. The monitor service may include a domain analyzer and domain model at each of several servers; and, a network administrator and network model on an enterprise server of the network. A domain analyzer monitors the network to detect messages associated with directory operations initiated or performed by the same or another server in the network. Methods performed by one or more servers predict system and network failures. One such method includes receiving a first message, receiving a second message, and conditionally raising an alert condition. The first message indicates the beginning of a replication of a portion of a directory and indicates a beginning time. The second message indicates completion of the replication of the portion of the directory and indicates an ending time.