Hi,I want to install and Configure System Center Essential agent on Windows Clients (XP) which are notActive directory domain. How can I add install and configure this agents so I can monitor the Disk, CPU & RAM usage of these type of agents.RegardsJay Choksi

it is a good question ?but i want to know if we can install SCE in workgroup enviroment ?MCP MCSA MCSE MCT

Hi,SCE SP1 can monitor workgroup-joined computer. In this senario, you need to use certificates to accomplish it. For more information, please refer to: How to Prepare the Management Server to Manage Workgroup-joined Computers in Essentials 2007- http://technet.microsoft.com/en-us/library/cc339464.aspx How to Import Certificates in Essentials 2007- http://technet.microsoft.com/en-us/library/cc339467.aspx About Certificates in Essentials 2007- http://technet.microsoft.com/en-us/library/cc339470.aspxHTH.Jie-Feng Ren - MSFT

Hi,Thanks for your helpi have read your above documents. since I am new in Microsoftcan you provide me any step by step documents for the same? what procedure i have to follow on SCE server and what steps I have to followed on Windows XP? My current setup as below.Domain - w2k.com - IP - 192.168.10.9SCE server host name - sce.w2k.com - IP - 192.168.10.13Now my client is in diffrent domain orI can say my client is in workgroup(WGRP). Client Host name - client1Client OS- Windows XP SP3 Client IP - 192.168.10.15Acctually I am confused in Certificate part that i did not understand.

Hi,One more thing which I forgot to describe. Can you tell me what will be the value in below command accordigly my setup.[InstallDirectory]\SCECertPolicyConfigUtil.exe /PolicyType local /ManagementGroup [Essentials Management Server netbios name]_MG /SCEServer SCEServer.FQDN /AEMFileShare \\SCESERVER.FQDN\[AEMPATH] /AEMPort [port] /ConfigureRemoteControl [true/false] /ConfigureAEM [true/false]What is a AEMPATH? what is AEM Port? etc....

Hi,For how to configurate certificates in SCE, You can refer to following link for step by step guide:http://www.docstoc.com/docs/4363291/Certificates-in-SCOM-How-to-work-with-certificates-inIt is for SCOM, but also applicable for SCE.For another question, AEMPATH is a share folder for storing an application error. You can createthis folder on a local directory you want. AEMPORT is 51906 by default. Also, you can run configure product features wizard in adminitration page instead ofrunning command. HTH.Jie-Feng Ren - MSFT

Hi,I am already able to manage computers which are in my Domain(W2k.com) so should i need to run above command again to configure or intall Agents on PCs which are not in w2k.com domain. For ex. WGRP Pcs....

Hi,For workgroup-joined clients, you neend to install agent manually. If the Operations Manager Agent is manually installed on a client computer, use the following steps to configure the certificates:1.Install the Operations Manager Agent2.Copy the WSUSSSL.cer and WSUSCodeSigning.cer files from the C:\Program Files\System Center Essentials 2007\Certificates directory on the Essentials server to the C:\Program Files\System Center Essentials 2007\Certificates directory on the Agent.3. Run SceCertPolicyconfigutil.exe command on client. 4. Configure certificates on both agent and SCE server.HTH.Jie-Feng Ren - MSFT

hi,Do I need to install & Configure Active directory Certificate service on my SCE server?

Hi,You need to install CA in your domain, but you can install CA on another computer other than SCE server.HTH.Jie-Feng Ren - MSFT

Hi,I have install the CA as Enterprise Root CA on my other server and I have follow the below guide but still I am not getting new templates which i have configured on CA Server.http://www.docstoc.com/docs/4363291/Certificates-in-SCOM-How-to-work-with-certificates-inI have complete the configuration which describe in above guide for configuring Enterprise Root CA to support SCOM Certificates without any failures.

Hi,I want to comfirm which step you cannot get the new template. Have you issued thisnew template in the CA? Also, Run gpupdate /force on CA server and restart workgroup-joined client to see if the new certificate shows up in certificate template drop-list.HTH.Jie-Feng Ren - MSFT

Hi,Yes I have issue the new template in the CA. I am follwing the Enterprise Root CA to support SCOM Certificates steps which describe in above documents. I have completed 1 to 30 steps without any failures. I have also give the gpupdate /forece command both on SCE server and CA server. Now i am not able toget the templates on client side as describe in above guide in section "Submiting the certificate request to the CA".

Hi,In my test environment, it works fine. It maybe caused by certificate security. Check if authenticated users, domain admins, domain computers, enterprise admins have been granted with enroll autoenroll permission. Re-issue certificate template in CA console and run gpupdate /force. HTH.Jie-Feng Ren - MSFT

Hi,I have give the permission to users as told by you. I have also re-issue the certificate template in CA and run gpupdate /force but still I am not able to template on client side.

Hi Jay,Sorry to hear the difficulty you encounter. If possible, could you try to set up stand alone CA to issue certificate as a workaround.HTH.Jie-Feng Ren - MSFT

Hi,Can I setup the stand alone CA on my SCE Server? and Can your provide step by step installation and configuration of stand alone CA?

Hi,You can set up stand alone CA on SCE server. Also, the online document mentioned above also provide step by step how to configure stand alone CA to support SCOM certificate. You can change corresponding name of identifying information for offline template for SCE serverand workgroup-joined computer.HTH. Jie-Feng Ren - MSFT