You Need to Know : when SC2016 OpsMgr agent installed on Domain Controller

Hi All :

When you deploy System Center 2016 Operations Manager completed, you will installing agent to all monitoring target. If you install the agent on the Domain Controller, you may encounter some errors from event logs, Event ID : 7017 & 1102: 001 002

They are greyed out, not monitored status:

010

Use HSLockdown.exe to check permission, the NT Authority\SYSTEM is denied, the problem is here!

003

Then you can use HSLockdown.exe to remove the explicit deny for Local System and restart Monitoring Agent Service (Healthservice):

HSLockdown.exe "Management Group Name" /R "NT AUTHORITY\SYSTEM" 004

Then the green is back !

011

Regarding to more HSLockdown.exe, please reference : https://technet.microsoft.com/en-us/library/hh212737(v=sc.12).aspx

 

 

Enjoy!

Justin Gao

Microsoft (China)