Installing and Configuring Audit Collection Services

Audit Collection Services (ACS) collect local Security event log records generated by audit policy and store them in a centralized database.
Audit Collection Services (ACS) consolidates individual Security logs into a centrally managed database.
Only a user who has the right to access the ACS database can run queries and create reports on the collected data.
Audit Collection Services (ACS) consists of three components:
ACS forwarders
ACS collector
ACS database
Audit Collection Services (ACS) requires mutual authentication between the ACS collector and each ACS forwarder.
All Data between ACS forwarders and the ACS collector are encrypted.
Data is not encrypted between the ACS collector and the ACS database.
You can encrypt all communication between ACS collector and the ACS database using Secure Sockets Layer (SSL) or Transport Layer Security (TLS).
ACS Forwarders send all security event log to ACS Collector using inbound TCP port 51909 “open this port in case of you have firewall”.
A local Security log of any server can be accessed by the local administrator, but cannot access ACS database by default.
You can assign a group with permissions to access the audit database to views and queries the ACS database.
Local administrator cannot change Configuration of ACS forwarder, all changes must be come from ACS collector.
ACS forwarder closes the inbound TCP port used by ACS collector after authentication so only outgoing communication is allowed.
ACS collector must terminate and reestablish a communication channel to make any configuration changes to an ACS forwarder.

To Installing and Configuring Audit Collection Services you can download the full docuemnt from the following link
http://www.megaupload.com/?d=4Q12VWYH
or contact me @ Tarek_877@hotmail.com to get a copy

Install and configure System Center Operation Manager 2007

• Microsoft System Center Operations Manager 2007 can monitor end-to-end information technology services.
• Operations Manager 2007 can monitor large environments and organizations, and use Microsoft application and operating system knowledge to resolve operational problems.
• Operations Manager 2007 provides one consolidated Operations Console.
• Operations Manager 2007 Reporting feature has been enhanced and focuses on customer scenarios, performance, and usability.
• Operations Manager 2007 Client Monitoring feature used to monitor operating systems and applications for errors and participate in the Customer Experience Improvement Program (CEIP).
• Operations Manager 2007 Client Monitoring feature consist of the following components “Agentless Exception Monitoring (AEM) - Customer Experience Improvement Program (CEIP) - Management Packs for Windows-based workstation operating systems and applications”.
• Operations Manager 2007 is integrated with Active Directory Domain Services (AD DS) which will allow assigning agent-managed computers to Management Groups.
• Active Directory integration will allow Manual agent deployment using MOMAgent.msi to computers to get its Management Group information from Active Directory automatically.
• Operations Manager 2007 Role-based security limit users privileges to have access to various aspects of Operations Manager 2007.
• Delegation of Operations Manager 2007 roles, such as Operator, utilizing AD DS user accounts and security groups.
• Operations Manager 2007 integration with Active Directory provide Authentication and authorization for Operations Manager 2007 Management Groups using AD DS.
• Microsoft System Center Operations Manager 2007 contain many server role which can be installed on one server or distributed on multiple servers, some of this roles support Microsoft cluster and other did not support.
• Microsoft System Center Operations Manager 2007 contain the following server roles:

1. Operational database
2. Audit Collection Services (ACS) database
3. Reporting Data Warehouse database
4. Reporting database
5. Root Management Server
6. Management Server
7. Administrator console
8. Audit Collection Services (ACS) collector
9. Gateway Server
10. Web Console server
11. Agent

To Install Microsoft System Center Operations manager you can download the full docuemnt from the following link
http://www.megaupload.com/?d=01E5XIT0
or contact me @ tarek_877@hotmail.com to get a copy

Migrate from MOM 2005 to System Center Operations Manager 2007

• Operations Manager 2007 supports a side-by-side migration model.
• Operations Manager 2007 can be deployed along side your MOM 2005 implementation to provide dual monitoring.
• All Operations Manager 2007 components can run on side-by-side on the same systems as MOM 2005.
• You can migrate any MOM 2005 Management Packs and any custom Management Packs you have created to Operations Manager 2007 using the Migration Wizard.
• The Migration Wizard converts MOM 2005 AKM-format to the new Operations Manager 2007 XML-format.

Microsoft Egypt - System Center Operations Manager 2007

Welcome Welcome System Center !

Today 14/05/2007 is the first day in Microsoft Egypt For the new product System Center Operations Manager 2007
System Center Operations Manager 2007 is end-to-end service management solution

System Center Essentials 2007 installation document

Welcome welcome System Center !

This is my first document in SCE 2007

This document for how to install SCE 2007
You can Download it from the following link
Installing System Center Essentials 2007
http://www.megaupload.com/?d=TONTVQVP

or contact me @ tarek_877@hotmail.com get a copy

System Center Essentials 2007 Installation tips and tricks

the following points are required to be checked before start installtion SCE 2007:

• Upgrading from any Beta and RC versions to System Center Essentials 2007 RTM isn’t supported.
• Windows 2000 SP4 clients need to connect to windows update to update the Windows Update client with the last version.
• Explicitly configure a proxy server in your Internet Explorer connection settings to be able to import a third party update catalog when proxy server setting required integrated Windows authentication.
• A remote SQL Server 2005 instance must not installed on Domain controller.
• Remove the SQL Native Client using Add or Remove Programs, if you get the error message: "An installation package for the product Microsoft SQL Native Client cannot be found. Try the installation again using a valid copy of the installation package 'sqlncli.msi'.", and re-run the installation.
• In SQL Server Workgroup Edition, turn off Address Windowing Extensions (AWE) before the installation.
• Install IIS with ASP.NET before install NET Framework 2.0 and NET Framework 3.0, else you need to re-register ASP.NET 2.0 and 3.0
• Stop the WSUS 2 synchronization before SCE installation, if you are upgrading from WSUS 2 to SCE 2007.
• Ensure there is no computer group in WSUS called All Clients and All Servers before installation, else delete it.
• If you upgrade from WSUS 3 RC to SCE 2007, you need to reassign the certificate to the WSUS Administration Web site after upgrade.
• Don’t use compressed drive for your installation locations.
• You need to use Configure local policy on the DC to point to the Essentials 2007 management server, if the domain controller of a trusted domain fails to pick up the Essentials 2007 managed computers policy.
• To use domain policy, install the GPMC on the Essentials 2007 management server.
• Don’t use SQL Server Reporting Services (SRS) instance that is configured to use SSL during Essentials 2007 setup.
• Ensure the printer spooler service is enabled on a managed computer to enable inventory collection.
• You will not be able to generate charts if you are using Microsoft SQL Server 2005 Express Edition, else reinstall SCE with other SQL version.
• Remove the self-signed certificate from the default Web site before installing the Essentials 2007 management server.
• After setup has completed successfully, re-assign the self-signed certificate to the default Web site.
• At this time you can not install SCE 2007 if your domain netbois name not the same as FQDN, this issue will be fixed soon

Installing System Center Essentials 2007

System Center Essentials 2007 is a new management solution in the System Center family of IT systems management products specifically designed for midsized businesses.
System Center Essentials 2007 is designed to be easily installed and configured.

System Center Essentials 2007 can mange up 500 Microsoft Windows-based client computers, 30 Microsoft Windows-based servers, and 50 Network devices when the Essentials 2007 database is installed remotely.

Only 10 remote Essentials 2007 consoles can be used at a time.

an installtion document will be avilable soon, it will contain the following items:

• OVERVIEW
• System Center Essentials 2007 REQUIREMENTS
• ESSENTIALS 2007 MANAGEMENT SERVER REQUIREMENT
• SESSENTIALS 2007 CONSOLE ONLY REQUIREMENTS
• MANAGED COMPUTERS REQUIREMENTS
• OPERATING SYSTEM REQUIREMENTS
• SOFTWARE REQUIREMENTS
• ENVIRONMENT REQUIREMENTS
• UNSUPPORTED ENVIRONMENTS
• MANAGEMENT SERVER PREPARATION
• INSTALL MICROSOFT SYSTEM CENTER ESSENTIALS 2007

How to Import hotfixes from the catalog site to WSUS 3 Server

With Microsoft WSUS V3 you can import any update from Microsoft Catalog to update the clients with this Update.
You must be logged on to the computer as an administrator to import the hotfixes.
Use any computer that has the WSUS administrative console installed to import hotfixes from the catalog site.
In the WSUS administrative console, select the Updates node, and in the Actions pane click Import Updates.
A browser window will open at the Microsoft Update Catalog Web site.
You can browse this site for Windows hotfixes and hardware drivers.When you have found the ones you want, add them to your basket.
When you have finished browsing, go to the basket, specify a download location, and click Import to import your updates.

WSUS svchost/msi issue

With WSUS V2 some client face a great problem due to svchost.exe pegging the cpu of workstations, rendering the computer nearly unresponsive for minutes at a time.

If this problem occurs on your system you have to Combine the installation of the new client of WSUS V3 , with the latest MSI fix available in KB927891 available on Microsoft Download Center, Microsoft completely address the what we have fondly called the svchost/msi issue.

It’s important to keep in mind that the new client is only a partial solution and clients must have both KB927891 and the new 3.0 client installed for a full solution.
http://support.microsoft.com/default.aspx/kb/927891

Windows Server Update Services 3.0

Microsoft announced that WSUS 3.0 has released April 30th and is available now on the Microsoft Download Center.

Installing and configuring WSUS Version 3

http://www.megaupload.com/?d=0YQEHT3C

Upgrade to Windows Server Update Services Version 3

http://www.megaupload.com/?d=6SKEKCKR