Thanks. Makes sense. Cheers Sarbjit
From: [email protected] [mailto:[email protected]] On Behalf Of Kevin Holman Sent: Tuesday, February 10, 2015 12:18 AM To: [email protected] Subject: [msmom] RE: when using ACS, must the SCOM agent be homed on the same server running ACS Only if you need more scale. We have a 1 collector – to – 1 database relationship. From: [email protected]<mailto:[email protected]> [mailto:[email protected]] On Behalf Of Sarbjit Singh Sent: Monday, February 9, 2015 10:14 AM To: [email protected]<mailto:[email protected]> Subject: [msmom] RE: when using ACS, must the SCOM agent be homed on the same server running ACS Thanks Kevin Wouldn’t it be a better option to run ACS on both of the SCOM mgmt. servers? Regards Sarbjit Singh From: [email protected]<mailto:[email protected]> [mailto:[email protected]] On Behalf Of Kevin Holman Sent: Monday, February 09, 2015 3:45 PM To: [email protected]<mailto:[email protected]> Subject: [msmom] RE: when using ACS, must the SCOM agent be homed on the same server running ACS ACS has pretty much ZERO relationship to the SCOM agent, other than being bundled with it. All your ACS forwarders have a distinct service and channel for ACS that is not related to the SCOM agent, and have a unique registry setting to tell them what their ACS collector server is. This is set one time, when you enable the forwarder. If something is changing that, it is most likely something custom and not being done by anything built in to SCOM. When a forwarder is enabled by the SCOM task, the default is to point to the management server they are assigned to, but there is an override to place the correct ACS collector name in there. Again – this task is run only once to do the initial enable. From: [email protected]<mailto:[email protected]> [mailto:[email protected]] On Behalf Of Sarbjit Singh Sent: Sunday, February 8, 2015 8:27 PM To: [email protected]<mailto:[email protected]> Subject: [msmom] when using ACS, must the SCOM agent be homed on the same server running ACS Greetings, I have two management servers of SCOM 2012 R2. One of them runs is hosting the ACS service. I use ACS for obtaining security logs on all domain controllers. I notice the domain controller which have their SCOM agent homed to mgmt. server which also runs the ACS, all is well. For domain controller which have their SCOM agent homed to a mgmt. server NOT running the ACS, things are not working. I notice after a while, the audit forwarding services on the domain controller will switch back to point to the mgmt. server which the SCOM agent is pointing to. This means no security logs are sent to the ACS. Thanks in advance for your comments. Cheers Sarbjit Singh
