Esta regra consolida eventos para sua regra de processamento de eventos complementar:
Status do SMS 2003: o Site Component Manager não pode conceder à conta da máquina do Ponto de Gerenciamento permissões para atualizar um objeto no Active Directory.
Target | Microsoft.SMS.2003.Microsoft_SMS_2003_Site_Database_Servers_Installation |
Category | EventCollection |
Enabled | True |
Alert Generate | False |
Remotable | True |
Comment | Mom2005ID='{CD9CE63E-125D-4946-91B7-1639D33B1D1D}';MOM2005ComputerGroupID={6E07E901-5EEF-4D43-ABC9-5A73BC9B072D} |
ID | Module Type | TypeId | RunAs |
---|---|---|---|
_F320DA51_13BF_11D3_B2CD_00A0C92A28B4_ | DataSource | System.Mom.BackwardCompatibility.FilteredEvent.DataProvider | Default |
ConsolidatedEventWriteAction | WriteAction | System.Mom.BackwardCompatibility.ConsolidatedEventResponse | Default |
<Rule ID="SMS_2003_Consolidated_Status__Site_Component_Manager_cannot_grant_Management_Point_s_machine_account_permissions_to_update_an_object_in_Active_Directory_9_Rule" Target="Microsoft.SMS.2003.Microsoft_SMS_2003_Site_Database_Servers_Installation" Enabled="true" ConfirmDelivery="false" Comment="Mom2005ID='{CD9CE63E-125D-4946-91B7-1639D33B1D1D}';MOM2005ComputerGroupID={6E07E901-5EEF-4D43-ABC9-5A73BC9B072D}">
<Category>EventCollection</Category>
<DataSources>
<DataSource ID="_F320DA51_13BF_11D3_B2CD_00A0C92A28B4_" Comment="{F320DA51-13BF-11D3-B2CD-00A0C92A28B4}" TypeID="MomBackwardCompatibility!System.Mom.BackwardCompatibility.FilteredEvent.DataProvider">
<Expression>
<And>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="Integer">EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>4916</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="String">PublisherName</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>SMS 2003 Monitor SMS Status Messages</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</And>
</Expression>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="ConsolidatedEventWriteAction" TypeID="MomBackwardCompatibility!System.Mom.BackwardCompatibility.ConsolidatedEventResponse">
<ConsolidationProperties>
<PropertyXPathQuery>EventDisplayNumber</PropertyXPathQuery>
<PropertyXPathQuery>PublisherName</PropertyXPathQuery>
<PropertyXPathQuery>EventDescription</PropertyXPathQuery>
</ConsolidationProperties>
<Interval>3600</Interval>
</WriteAction>
</WriteActions>
</Rule>