RE: Monitoring for Windows2003 Active Directory

I don't think there are local users but local groups can be defined in the domain controller.  Just a few days ago someone mentioned that the group Tivoli_Admin_Privileges should be a local group instead of a domain group when running Tivoli on a DC.  I'm not sure whether there is a distinction between local and domain users though.  But, does it mean that if I wanted to monitor AD Domain Controllers, ITM/TMR Server needs to be part of the domain? 

 

Thanks,

Carlo Camus

Corporate Information Office - Philippines

Siemens, Inc.

---

From: owner-tme10-XtjxT7Vmt5b1ENwx4SLHqw@xxxxxxxxxxxxxxxx [mailto:owner-tme10-XtjxT7Vmt5b1ENwx4SLHqw@xxxxxxxxxxxxxxxx] On Behalf Of Bontrager, Greg
Sent: Thursday, February 24, 2005 12:32 PM
To: 'tme10-XtjxT7Vmt5b1ENwx4SLHqw@xxxxxxxxxxxxxxxx'
Subject: RE: [tme10] Monitoring for Windows2003 Active Directory

You are correct unless you are planning on monitoring/managing AD Domain Controllers.  Since there are no local IDs and/or groups, you will need the appropriate groups and IDs set up in the Default Domain Controller User Rights assignments.

 

Greg Bontrager
EDS Global Client Engineering - GM
248-265-9579

---

From: owner-tme10-XtjxT7Vmt5b1ENwx4SLHqw@xxxxxxxxxxxxxxxx [mailto:owner-tme10-XtjxT7Vmt5b1ENwx4SLHqw@xxxxxxxxxxxxxxxx] On Behalf Of Camus Carlo
Sent: Wednesday, February 23, 2005 9:56 PM
To: tme10-XtjxT7Vmt5b1ENwx4SLHqw@xxxxxxxxxxxxxxxx
Subject: RE: [tme10] Monitoring for Windows2003 Active Directory

 

Is it necessary that the Tivoli Servers (and the user accounts) are part of the Active Directory Domain?  From what I know, it is only necessary that the localgroups and local accounts are setup properly.

 

---

From: owner-tme10-XtjxT7Vmt5b1ENwx4SLHqw@xxxxxxxxxxxxxxxx [mailto:owner-tme10-XtjxT7Vmt5b1ENwx4SLHqw@xxxxxxxxxxxxxxxx] On Behalf Of Per Eklund
Sent: Wednesday, February 23, 2005 8:35 PM
To: tme10-XtjxT7Vmt5b1ENwx4SLHqw@xxxxxxxxxxxxxxxx
Subject: Re: [tme10] Monitoring for Windows2003 Active Directory

I have implement ITM for AD on windows 2003 srv.
Whe are on patch level, 5.1.1-ADO-FX01. The rm's is working fine.
You must add all the prereq, perfmon etc...


Our AD guys think the Tivoli monitors is OK.

We have do day monitors on 10 Domain controller in one big AD,
Be careful when you set up the user rights for the tme account in the domain.







Per Eklund
CDTS-S
Tivoli Systemspecialist.
Handelsbanken
Tegeluddsvägen 10
+4687015016

"Saleem, Mohamed Yunus" <SALEEMM-phClP/3HyI/+2yGgDSPg/g@xxxxxxxxxxxxxxxx>
Sänt av: owner-tme10-XtjxT7Vmt5b1ENwx4SLHqw@xxxxxxxxxxxxxxxx

2005-02-21 09:24

Sänd svar till
tme10-XtjxT7Vmt5b1ENwx4SLHqw@xxxxxxxxxxxxxxxx

Till	<tme10-XtjxT7Vmt5b1ENwx4SLHqw@xxxxxxxxxxxxxxxx>, <tme10-digest-XtjxT7Vmt5b1ENwx4SLHqw@xxxxxxxxxxxxxxxx>
Kopia
Ärende	[tme10] Monitoring for Windows2003 Active Directory

 

Hello everyone

Has anyone implemented Tivoli Monitoring for Windows 2003 Active
Directory. Please provide suggestion

I think IBM still does not support ITM for W2k3.

Thanks in adv

saleem