Does SCOM 2007 R2 monitor files and folder ?

All replies

• 

  

  0

  Sign in to vote

  Hi, SA

  No it doesn't, use the MP for Windows folders: http://www.systemcentercentral.com/PackCatalog/PackCatalogDetails/tabid/145/IndexId/13064/Default.aspx

   

  ---

  Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

  • Marked as answer by Nicholas Li Friday, September 16, 2011 8:58 AM

  Thursday, September 8, 2011 11:52 AM
• 

  

  0

  Sign in to vote

  Windows and cross platform is different. On windows you can use a management pack like dktoa suggests, or you can enable auditing on those files/directories and monitor the security log (perhaps by using separate monitors or using the ACS feature of SCOM). 

  There is also a security monitoring feature for crossplat http://www.microsoft.com/download/en/details.aspx?id=1939 

  Or perhaps there is a place where this is logged in cross-plat )logs?) where you acn try to filter it using log monitoring for certain strings.

  ---

  Bob Cornelissen - BICTT (My BICTT Blog) - Microsoft Community Contributor 2011 Recipient

  • Marked as answer by Nicholas Li Friday, September 16, 2011 8:58 AM

  Thursday, September 8, 2011 5:24 PM
• 

  

  0

  Sign in to vote

   

  Hi,

   

  Regarding monitoring files and folders in Windows, I think you can also try enabling auditing on the files and folders and create a monitor or rule based on the Events. For details, please refer to:

   

  1.    Enable auditing:

   

  Operation-based auditing on files or folders

  http://technet.microsoft.com/en-us/library/cc738931(WS.10).aspx

   

  Audit object access

  http://technet.microsoft.com/en-us/library/cc776774(WS.10).aspx

   

  2.    Create an Event monitor or rule:

   

  How to Create a Simple Windows Event Unit Monitor in Operations Manager 2007

  http://technet.microsoft.com/en-us/library/bb309597.aspx

   

  How to Create an Alert Generating NT-Event-Log-Based Rule in Operations Manager 2007

  http://technet.microsoft.com/en-us/library/bb309568.aspx

   

  Using Event Description as criteria for a rule

  http://blogs.technet.com/b/kevinholman/archive/2008/04/22/using-event-description-as-criteria-for-a-rule.aspx

   

  Hope this helps.

   

  Thanks.

  ---

  Nicholas Li - MSFT
  Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

  • Marked as answer by Nicholas Li Friday, September 16, 2011 8:58 AM

  Monday, September 12, 2011 3:54 AM
• 

  

  0

  Sign in to vote

  Did this help you SA?

  ---

  Bob Cornelissen - BICTT (My BICTT Blog) - Microsoft Community Contributor 2011 Recipient

  Tuesday, September 13, 2011 6:27 AM
• 

  

  0

  Sign in to vote

  Hi

  For detailed monitoring of file systems, I'd suggest that you take a look at Tripwire File Integrity Monitor.

  http://www.tripwire.com/it-security-software/security-configuration-management/file-integrity-monitoring/

  It isn't cheap but for compliance it provides a huge amount more than SCOM or ACS can ever hope to achieve.

  Cheers

  Graham

  ---

  New SCOM 2012 Blog! - http://www.systemcentersolutions.com/blog/
  View OpsMgr tips and tricks at http://systemcentersolutions.wordpress.com/

  • Marked as answer by Nicholas Li Friday, September 16, 2011 8:58 AM

  Wednesday, September 14, 2011 12:41 PM
• 

  

  0

  Sign in to vote

  Thanks everyone,

  i got the solution for Windows File and folder monitors but i dont know how to monitor file and Directory Monitor for AIX and Linux?

  the Monitors and rules in the management Pack are based on xml configuration and if i which to make a new monitor in AIX or Linux for file and folder monitoring ,how would i make it then.

   

  regards,

  SA

  Thursday, October 6, 2011 10:24 AM