none
AD monitoring RRS feed

  • Question

  • Hi all,

    I've been asked to setup a SCOM environment just for monitoring AD servers.

    What should be my plan of action? Just importing AD MP and make some customization in the monitors? Or are there any other things involved?

    Sam

    Tuesday, September 27, 2016 12:09 PM

Answers

  • Hi Sam,

    Are you adding AD into a existing SCOM setup or implementing SCOM just for AD?

    If its the latter, I would read the whole survival guide. 

    http://social.technet.microsoft.com/wiki/contents/articles/20796.the-system-center-2012-r2-operations-manager-survival-guide.aspx#Planning_Deployment

    Also, whoever requested this install will want their whole infrastructure monitoring once they see how good SCOM is.  There are MANY MANY considerations you need to look at as will be explained in the guide.

    Hope this helps.

    Brad

    • Edited by Brad Sherwin Tuesday, September 27, 2016 2:05 PM
    • Marked as answer by MhaisekarS Monday, October 10, 2016 1:03 PM
    Tuesday, September 27, 2016 2:04 PM
  • 1) Install SCOM agent into AD machines
    2) import AD Management pack
       https://www.microsoft.com/en-us/download/details.aspx?id=21357
    3) Configuring Active Directory 2012 R2 Management Pack with SCOM 2012 R2 for detail, pls. refer
       http://www.careexchange.in/configuring-active-directory-2012-r2-management-pack-with-scom-2012-r2/
    Roger
    • Marked as answer by MhaisekarS Monday, October 10, 2016 1:03 PM
    Wednesday, September 28, 2016 3:58 AM
  • Hi Sam,

    considering your SCOM knowledge you are familiar with the basics. :)

    S K Agrawal outlined the major actions. Depending on your AD infrastructure and the contained services you will have to do some MP tuning, but at the end it comes t down to MP import, tune and monitor. 

    Pay attention to the versions, remove the unnecessary MPs, fine tune the rest. 

    Cheers,


    Stoyan (Please take a moment to "Vote as Helpful" and/or "Mark as Answer" where applicable. This helps the community, keeps the forums tidy, and recognizes useful contributions. Thanks!)

    • Marked as answer by MhaisekarS Monday, October 10, 2016 1:03 PM
    Wednesday, September 28, 2016 7:52 AM
    Moderator
  • Hi Sir,

    Agree with others .

    In addition , please also refer to the check list :

    https://blogs.technet.microsoft.com/momteam/2007/07/19/active-directory-management-pack-checklist/

    IMHO , the MP guide is the best way to follow .

    Best Regards,

    Elton


    Please remember to mark the replies as answers if they help and unmark them if they provide no help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    • Marked as answer by MhaisekarS Monday, October 10, 2016 1:03 PM
    Wednesday, September 28, 2016 8:48 AM
    Moderator
  • Hello Sam,

    I agree with everyone here. It will be good if you download the Active Directory Management Pack based upon your AD version and go through the MP guide to for MP import and configuration.

    It will be good if you create Run As account, you may refer below link:

    http://www.careexchange.in/configuring-active-directory-2012-r2-management-pack-with-scom-2012-r2/

    Based upon your organization requirement, you may need to sit with your AD expert and fine tune the MP (Rules/Monitors).

    Also, please make sure you check "Allow this agent to act as proxy and discover managed objects on other computers" option under Agent Properties.

    Please mark this reply as Answer and Vote it, if it helps you.

    Regards,

    Shashi

    • Marked as answer by MhaisekarS Monday, October 10, 2016 1:03 PM
    Sunday, October 2, 2016 10:44 AM
  • Download and read the AD MP guide. You won't need a RunAs account profile.

    "Fear disturbs your concentration"

    • Marked as answer by MhaisekarS Monday, October 10, 2016 1:03 PM
    Wednesday, September 28, 2016 4:49 PM

All replies

  • Hi,

    You will need to install SCOM agents on the AD servers.

    Download the AD Management Packs from Microsoft Download Center. Please download the MP guide as well.

    Import the MP in SCOM. It will start monitoring AD.

    Guide will tell you exactly if there are any other steps that needs to be done.

    This link will help you too - https://amradmin.wordpress.com/2011/06/26/active-directory-management-pack-best-practice/


    Thanks, S K Agrawal

    Tuesday, September 27, 2016 12:43 PM
  • Hi Sam,

    Are you adding AD into a existing SCOM setup or implementing SCOM just for AD?

    If its the latter, I would read the whole survival guide. 

    http://social.technet.microsoft.com/wiki/contents/articles/20796.the-system-center-2012-r2-operations-manager-survival-guide.aspx#Planning_Deployment

    Also, whoever requested this install will want their whole infrastructure monitoring once they see how good SCOM is.  There are MANY MANY considerations you need to look at as will be explained in the guide.

    Hope this helps.

    Brad

    • Edited by Brad Sherwin Tuesday, September 27, 2016 2:05 PM
    • Marked as answer by MhaisekarS Monday, October 10, 2016 1:03 PM
    Tuesday, September 27, 2016 2:04 PM
  • 1) Install SCOM agent into AD machines
    2) import AD Management pack
       https://www.microsoft.com/en-us/download/details.aspx?id=21357
    3) Configuring Active Directory 2012 R2 Management Pack with SCOM 2012 R2 for detail, pls. refer
       http://www.careexchange.in/configuring-active-directory-2012-r2-management-pack-with-scom-2012-r2/
    Roger
    • Marked as answer by MhaisekarS Monday, October 10, 2016 1:03 PM
    Wednesday, September 28, 2016 3:58 AM
  • Hi Sam,

    considering your SCOM knowledge you are familiar with the basics. :)

    S K Agrawal outlined the major actions. Depending on your AD infrastructure and the contained services you will have to do some MP tuning, but at the end it comes t down to MP import, tune and monitor. 

    Pay attention to the versions, remove the unnecessary MPs, fine tune the rest. 

    Cheers,


    Stoyan (Please take a moment to "Vote as Helpful" and/or "Mark as Answer" where applicable. This helps the community, keeps the forums tidy, and recognizes useful contributions. Thanks!)

    • Marked as answer by MhaisekarS Monday, October 10, 2016 1:03 PM
    Wednesday, September 28, 2016 7:52 AM
    Moderator
  • Hi Sir,

    Agree with others .

    In addition , please also refer to the check list :

    https://blogs.technet.microsoft.com/momteam/2007/07/19/active-directory-management-pack-checklist/

    IMHO , the MP guide is the best way to follow .

    Best Regards,

    Elton


    Please remember to mark the replies as answers if they help and unmark them if they provide no help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    • Marked as answer by MhaisekarS Monday, October 10, 2016 1:03 PM
    Wednesday, September 28, 2016 8:48 AM
    Moderator
  • Thanks everyone, that's what i was thinking. 

    But I heard from someone that we will need to create a run as profile?

    Anyway, as you guys mentioned, its true that the guide will provide all instructions.

    Since we are setting up a new environment just for AD, we want to make it extensive and focused, so just wanted to make sure I'm not missing out anything.

    Please let me know if there is anything I should know regarding AD-specific monitoring.

    Brad, yes we are implementing SCOM just for AD for now, the customer is already using Appdynamics for other servers. I'm sure they will understand the SCOM advantage soon and implement this for all purposes.

    Stoyan, I know just a couple of things :)

    Thanks again to everyone.

    Will mark this answered as soon as I get some inputs on the run as profile stuff.

    Also, I came across some posts that we need to install OOMAD on all servers? Is that still the case in SCOM 12 as well?

    Sam


    • Edited by MhaisekarS Wednesday, September 28, 2016 4:39 PM
    Wednesday, September 28, 2016 4:28 PM
  • Download and read the AD MP guide. You won't need a RunAs account profile.

    "Fear disturbs your concentration"

    • Marked as answer by MhaisekarS Monday, October 10, 2016 1:03 PM
    Wednesday, September 28, 2016 4:49 PM
  • Hello Sam,

    I agree with everyone here. It will be good if you download the Active Directory Management Pack based upon your AD version and go through the MP guide to for MP import and configuration.

    It will be good if you create Run As account, you may refer below link:

    http://www.careexchange.in/configuring-active-directory-2012-r2-management-pack-with-scom-2012-r2/

    Based upon your organization requirement, you may need to sit with your AD expert and fine tune the MP (Rules/Monitors).

    Also, please make sure you check "Allow this agent to act as proxy and discover managed objects on other computers" option under Agent Properties.

    Please mark this reply as Answer and Vote it, if it helps you.

    Regards,

    Shashi

    • Marked as answer by MhaisekarS Monday, October 10, 2016 1:03 PM
    Sunday, October 2, 2016 10:44 AM
  • Thanks all for your responses :)
    Monday, October 10, 2016 1:03 PM
  • You should be enabling proxy on all agents. I run this as a scheduled task daily:

    import-module OperationsManager
    new-SCOMmanagementgroupconnection "ms01"
    Get-SCOMAgent | Where-Object {$_.ProxyingEnabled.Value -eq $False} | Enable-SCOMAgentProxy


    "Fear disturbs your concentration"

    Monday, October 10, 2016 4:20 PM