HI Together I would like to create a custom Monitor in my Scom snviroment but not sure hot to do it. My Problem is that i have very often Error Log on one of my DCs with following Message: 5 Minutes later at next Group Pol. applaying i recive Inforamtion Message EvntID 1500 that everything is OK again. Error EventID: 1006 Source:Group Policy The processing of Group Policy failed. Windows could not authenticate to the Active Directory service on a domain controller. (LDAP Bind function call failed). Look in the details tab for error code and description Inforamtion EventID:1500 Soruce:GroupPolicy The Group Policy settings for the computer were processed successfully. There were no changes detected since the last successful processing of Group Policy. Every Time i get this message (3-4 times in the Week) Scom is alerting me and do not solve alert automaticaly when 1500 comes again. I do not want to disable this Alert but want to create Custom Alert which interact with EventID1500 and resolve Helthy State of the Server.. What is the best way to solve this Problem..Do you have any exampls for creating such Monitor.. I am working with Scom 2007 R2 Greetings

Hi todomati, As for your issue 1. I'd like to recommend you to fix this first. Some links: http://eventid.net/display.asp?eventid=1006&eventno=10293&source=Microsoft-Windows-GroupPolicy&phase=1 http://technet.microsoft.com/en-us/library/cc727283(v=ws.10).aspx 2. I suppose this alert is generated by rule (less likely by monitor that has to be manually reset) so it should not change Health State of the server.. and no automatic alert closing here. 3. No advanced but a simple solution is to use integrated Authoring to create two state unit monitor (Windows Events->Simple Event Detection->Windows Event Reset (target Windows Domain Controller). Decide if you need alerting on Warning/Critical, Automatic Resolve when Healthy. Dont Enable this monitor. Then Override to Enable it on neccesary DC. and dont forget to override (enabled:False) previous rule that generates current alerts.