I have been seeing more and more organizations tightening security which is excellent! However, one of the victims is the System Center Operations Manager Default Action Account – the action account is denied the log on locally right on the RMSe and other management servers. I am not too concerned when it occurs on an agent since that won’t disrupt the health of the entire management group but when it happens on the RMS / Management Servers - yikes.
Naturally, the Operations Manager log will get flooded with 1102 errors and 7002 and 7015 events that identify the account has been not granted the log on locally right. Too bad System Center Operations Manager can’t monitor itself. So what we have implemented for the Infinity Connected™ management group (you can never be too safe) and what we’ve recommended to our on-premise customers is to leverage the “Attach Task To This Event…” action included with Event Viewer. Its simple and you can have it send an e-mail when 7002 / 7015 appear in the Operations Manager log of any management server in your management group. If you are running a heavy management group, you want to identify this ASAP and resolve immediately otherwise it is OperationsManager churn city!
- Sign Up Now for the Infinity Connected™ Full Feature 30 Day Trial
- Visit the Infinity Connected™ Support Center
- Visit Our Website: http://www.infinityconnected.com
- Visit Our Blog: http://blog.mobieus.com
- Want to just talk shop? 1-800-691-6774