Report features and auditing  in SCOM 2012
Does anyone know how to use report and auditing features in SCOM 2012. 1) when I run report but not too mcuh information in it. Does anyone know some links for SCOM report feature? 2) Previously we use some other software to audit AD change such as delete and enable and creation with event ID 4720, 4738, 4726...etc I wonder whether I can set up in SCOM 2012? What kind of access right can do this? I have all the rights except SCOM admin. Thanks!
July 27th, 2012 5:53pm

Hi 1) when I run report but not too mcuh information in it. Does anyone know some links for SCOM report feature? Using Reporting in SCOM 2012 - http://technet.microsoft.com/en-us/library/hh212786 Kevin Holmans guide - http://blogs.technet.com/b/kevinholman/archive/2010/09/02/operations-manager-101-download.aspx - although for SCOM 2007, this is applicable for SCOM 2012. Marnix Wolf (MVP) - http://thoughtsonopsmgr.blogspot.co.uk/2009/07/opsmgr-and-empty-reports-part-1.html 2) Previously we use some other software to audit AD change such as delete and enable and creation with event ID 4720, 4738, 4726...etc You can create rules that target the security log and look for specific events: http://blogs.technet.com/b/kevinholman/archive/2010/04/12/using-opsmgr-for-intrusion-detection-and-security-hardening.aspx For reporting, test out SCOM Audit Collection Services in a lab: http://technet.microsoft.com/en-us/library/hh212908.aspx Secure Vantage did provide extended reporting and alerting but have yet to release a version that works with SCOM 2012 so not sure what is happening with them. Regards GrahamRegards Graham New System Center 2012 Blog! - http://www.systemcentersolutions.co.uk View OpsMgr tips and tricks at http://systemcentersolutions.wordpress.com/
Free Windows Admin Tool Kit Click here and download it now
July 28th, 2012 4:52am

Hi 1) when I run report but not too mcuh information in it. Does anyone know some links for SCOM report feature? Using Reporting in SCOM 2012 - http://technet.microsoft.com/en-us/library/hh212786 Kevin Holmans guide - http://blogs.technet.com/b/kevinholman/archive/2010/09/02/operations-manager-101-download.aspx - although for SCOM 2007, this is applicable for SCOM 2012. Marnix Wolf (MVP) - http://thoughtsonopsmgr.blogspot.co.uk/2009/07/opsmgr-and-empty-reports-part-1.html 2) Previously we use some other software to audit AD change such as delete and enable and creation with event ID 4720, 4738, 4726...etc You can create rules that target the security log and look for specific events: http://blogs.technet.com/b/kevinholman/archive/2010/04/12/using-opsmgr-for-intrusion-detection-and-security-hardening.aspx For reporting, test out SCOM Audit Collection Services in a lab: http://technet.microsoft.com/en-us/library/hh212908.aspx Secure Vantage did provide extended reporting and alerting but have yet to release a version that works with SCOM 2012 so not sure what is happening with them. Regards GrahamRegards Graham New System Center 2012 Blog! - http://www.systemcentersolutions.co.uk View OpsMgr tips and tricks at http://systemcentersolutions.wordpress.com/
July 28th, 2012 4:53am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics