Hi All :
When you deploy System Center 2016 Operations Manager completed, you will installing agent to all monitoring target. If you install the agent on the Domain Controller, you may encounter some errors from event logs, Event ID : 7017 & 1102:
They are greyed out, not monitored status:
Use HSLockdown.exe to check permission, the NT Authority\SYSTEM is denied, the problem is here!
Then you can use HSLockdown.exe to remove the explicit deny for Local System and restart Monitoring Agent Service (Healthservice):
HSLockdown.exe “Management Group Name” /R “NT AUTHORITY\SYSTEM”
Then the green is back !
Regarding to more HSLockdown.exe, please reference : https://technet.microsoft.com/en-us/library/hh212737(v=sc.12).aspx