So I have been going through all of the services that are being monitored on our APM and I noticed that alot of these services either run under svchost.exe or a lsass.exe files. I tried doing a little research to see if I can find out exactly what it is that these services do but all I can seem to find are articles and forums on how, what, and why there svchost.exe files. I do not want to know that since I already figured that part out. What I want to know is what each service does and if it really needs to be monitored. I think there is no piont in monitoring something that isn't that important when I could be using the license on something else. Does anybody have a suggestion on what is important to monitor on Active Directory?
