Audit Collection in Operations Manager 2007
Operations Manager 2007 Audit Collection Services (ACS) helps you manage the security of your IT environment by collecting security events from managed computers and enabling you to analyze this information. Audit Collection also facilitates the separation of the Security Auditor role from other IT roles, as may be required by your organization's policies.
The ACS Forwarder, a component of the Operations Manager 2007 Agent, provides real-time monitoring of the security log on managed computers. The ACS forwarder encrypts and transmits security events to the ACS Collector, a component of the Operations Manager 2007 Management Server. The Collector makes security events available to WMI subscribers in real-time and then saves them to the Audit Collection database.
A Security Auditor can use WMI queries to analyze the collected data and can use the data analysis tools included in Microsoft SQL Server to perform historical security analysis of your organization's IT environment, such as account management and privileges, and make recommendations to improve it.
See Also
Concepts
What's New in Operations Manager 2007