Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

8MAN Alerts

Hello

We have installed ARM, and this one is located on one domain.

However behind this domain there are 8 domain controller servers.

We have set up a lot of alerts on some sensitive groups in this domain, but when these groups are changed, 8MAN sends the alert emails only for two servers, for the other servers, 8MAN does not detect the change.

Is this a non-open "Stream" or "port" on my domain controller servers?

Thank you for your answer

Find more posts tagged with

Accepted answers

All comments

bjoern-cusatum

Hi,

since 2 out of 8 work, this most probably is either a firewall problem or a GPO problem.

Firewall: if the firewall is enabled, the pre-defined Microsoft rule "Remote Event Log Management (RPC)" must be enabled. Or disable the firewall on those DCs.

This should also be visible in the 8MAN/ARM Logbook in the Logga Status column

GPO: is might be possible the GPO you defined is not working on those DCs, check them on each DC: auditpol /get /category:"policy change,account management,ds access"

It should look like this:

2019-03-25 16_19_30-8MATE AD Logga Manual 9.0 en-US.pdf - Adobe Acrobat Reader DC.png

Cheers

Björn