One of the new component features in Operations Manager 2007 is the Audit Collection Services which very basically allows for you to collect security events from managed machines.
The Audit Collection Services uses forwarder components included in the agent in real time monitoring in an encrypted transmission. The Audit Collection Services information is also exposed to WMI so you can view the collected database information.
Note: The Audit Collection Services is not installed as a default and must be installed from the installation Media after Operations Manager 2007 has been successfully installed as detailed in the link that follows.
Additional Information:
How to Install an ACS Collector and Database
http://technet.microsoft.com/en-us/library/bb309644.aspx
No Comments