Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

Unable to WINDOWS SERVER 2003 DOMAIN CONTROLLER SECURITY

Hi, While adding the win 2k3 server under → WINDOWS SERVER 2003 DOMAIN CONTROLLER SECURITY,it show failed with down status.

PFA error and kindly let me know how to resolve it.

Thanks

Error_Active.jpg

Find more posts tagged with

alterego

Accepted answers

aLTeReGo

PowerShell 2.0 must be installed on the Orion server and the Domain Controller. WinRM must also be configured on both the Orion server, as well as the Domain Controller being monitored. To configure WinRM once PowerShell 2.0 is installed follow the steps outlined below:

Configuring Windows Remote Management (WinRM)

If not already done so, install PowerShell 2.0 and WinRM on the APM and target servers. Powershell 2.0 can be found here: http://support.microsoft.com/kb/968930.
On the Orion APM server, open a command prompt as an Administrator. To do this, perform the following step:

Go to the Start menu and right-click the cmd.exe and then select Run as Administrator.
Enter the following in the command prompt:

winrm quickconfig –q winrm set winrm/config/client @{TrustedHosts="*"}
On the target server, open a command prompt as an Administrator and enter the following:

winrm quickconfig
winrm set winrm/config/client @{TrustedHosts="IP_ADDRESS"}

where IP address is the IP address of your APM server.

All comments

aLTeReGo

Configuring Windows Remote Management (WinRM)

If not already done so, install PowerShell 2.0 and WinRM on the APM and target servers. Powershell 2.0 can be found here: http://support.microsoft.com/kb/968930.
On the Orion APM server, open a command prompt as an Administrator. To do this, perform the following step:

Go to the Start menu and right-click the cmd.exe and then select Run as Administrator.
Enter the following in the command prompt:

winrm quickconfig –q winrm set winrm/config/client @{TrustedHosts="*"}
On the target server, open a command prompt as an Administrator and enter the following:

winrm quickconfig
winrm set winrm/config/client @{TrustedHosts="IP_ADDRESS"}

where IP address is the IP address of your APM server.

fahad207

Thanks, Now its working. but still one of the components is showing down.

Please find attached error snap. Also i would like to know how to create email alert if the user accounts get locked.

BR,

aLTeReGo

The "Logon Failure: Unknown user name or password" component is looking for Windows Event Logs that match that particular event type. The fact that it's red/down is saying that someone has attempted to login using the wrong username or password within the last 7 minutes. It's not a problem with the template. It's functioning as expected when those events exist on the domain controller. If that's not how you want it to behave you can either disable that component entirely, or you can alter this components status behavior by editing the template and changing the "If a match is found in a polling period, component status is" option.

Event Log Status.png

"Down" is what it's currently configured for

"Up" means that this component will be "Up" only if this event is found during the polling interval

"Based on Event Types" means that the component will be "Warning" if the event log severity for the Windows Event Log found is "Warning" or it will report the status of this component as "Critical" if the event log severity is "Critical.

"Based on Event Count" allows you to define warning and critical threshold based on the number of occurrences of these events found during a single polling period. E.G. (up/green < 5) [warning => 5 occurrences] [critical => 10]

fahad207

HI,

Could you please help me in creating an alert for locked user ? Mean to say if any user get locked then it Solarwinds shoud alert it via email.