1 of 1 people found this helpful
No, the agent needs to be installed on all domain controllers to really have anything close to decent coverage. In most cases you also want to install it on all servers to capture their local events, and depending on your policy may also need to be installed on all workstations.
I was afraid of that. Unfortunately i do not have access to all DCs in the domain. Going to have to approach this from a server local security group i think.
Thanks for your help. Much appreciated.