|
JonG -> Monitoring Domain Admin Group (8/8/2008 5:35:37 AM)
|
Hi All
I need to monitor the Domain Admins group along with other security groups
in side the AD but am having a nightmare getting it to work. I have followed
various docs on this and the other SCOM sites but have drawn a blank.
So far I have created a unit monitor in the 'Active Directory Domain
Controller Server 2003 Computer role' in the 'Security' roll up monitor. With
the values as follows:
Windows Event: Simple Event Detection - Manual Reset
Log name: Security
Parameters - AND Group
Event ID equals 632
Description Matches Wildcard *Domain Admins*
Event raised Warning and then generate and alert.
I thought this should be correct but it just doesnt do anything.
Any help would be appreciated before I throw my toys out of the pram
completely.
Thanks
|
|
|
|
