| DisplayName | Description | ID | Target | Category | Enabled | Instance Name | Counter Name | Frequency | Event_ID | Event Source | Alert Generate | Alert Severity | Alert Priority | Remotable | Event Log |
| Agent Initiated Maintenance Mode Disable Event 3002 Collection Rule | This will collect events on agent-managed machines related to maintenance mode 'Enable' activity. EventId: 3002 | SCOMAgentHelper.AgentInitiatedMaintenanceModeDisableEvent3002Collection.Rule | Microsoft.SystemCenter.ManagementService | EventCollection | True | | | 0 | 0 | SCOMAgentHelper | False | | | True | Operations Manager |
| Agent Initiated Maintenance Mode Enable Event 3001 Collection Rule | This will collect events on agent-managed machines related to maintenance mode 'Enable' activity. EventId: 3001 | SCOMAgentHelper.AgentInitiatedMaintenanceModeEnableEvent3001Collection.Rule | Microsoft.SystemCenter.ManagementService | EventCollection | True | | | 0 | 0 | SCOMAgentHelper | False | | | True | Operations Manager |
| Deploy SCOMAgentHelper PowerShell Module .PSX1 Files Rule | This will automatically copy the SCOMAgentHelper PowerShell module files to the default Modules folder. This will overwrite any existing SCOMAgentHelper module files. | SCOMAgentHelper.DeploySCOMAgentHelperPowerShellModulePSX1.Rule | Microsoft.SystemCenter.Agent | Operations | True | | | 0 | 0 | | False | | | True | |
| Deploy SCOMAgentHelper PowerShell Module .ZIP Rule | This will automatically extract the SCOMAgentHelper PowerShell module archive to the default Modules folder. This will overwrite any existing SCOMAgentHelper module files. Enabled this ONLY if the .PSX1 deployment rule fails. | SCOMAgentHelper.DeploySCOMAgentHelperPowerShellModuleZIP.Rule | Microsoft.SystemCenter.Agent | Operations | False | | | 0 | 0 | | False | | | True | |
| Detect Agent MM StatusReport Request Event Rule | This will detect specific events on agent-managed machines that are used to trigger a write action on the mgmt server. The write action will use a PowerShell script to trigger an agent task: 'SCOMAgentHelper.WriteMaintModeStatustoEventLog.Task'. This task will write the current agent maintenance mode status to the agent 'Operations Manager' event log. There are two possible status strings: StatusWindowsComputerInMaintenanceModeTrue or StatusWindowsComputerInMaintenanceModeFalse | SCOMAgentHelper.DetectAgentMMStatusReportRequestEvent.Rule | Microsoft.SystemCenter.ManagementService | None | True | | | 0 | 0 | SCOMAgentHelper | False | | | True | Operations Manager |
| Detect Agent MM Toggle Event Rule | Detect MM Action event, trigger MM action, write new MM status to agent event log. | SCOMAgentHelper.DetectAgentMMToggleEvent.Rule | Microsoft.SystemCenter.ManagementService | Maintenance | True | | | 0 | 0 | SCOMAgentHelper | False | | | True | Operations Manager |