Preparing Active Directory and Management Groups for Agents

  • Article

Applies To: Operations Manager 2007 R2, Operations Manager 2007 SP1

To prepare Active Directory Domain Services for Agents

  1. Review the agent and agentless monitoring environmental prerequisites at Agent and Agentless Monitoring.

  2. For agents that are included in computer images, the agent configuration information can be either entered manually or stored in an Active Directory Domain Services Connection Point (SCP). Connection points are created by using the MOMADAdmin.exe tool that is located in the Installation Media\SupportTools directory. For information about how to use this tool, see the "How to Create an Active Directory Domain Services Container for an Operations Manager 2007 Management Group" topic in the Operations Manager 2007 Help.

    Note

    Agents that are installed by using a push install cannot use configuration information that is stored in an Active Directory SCP.

  3. Additionally, you can put agent failover configuration information in the SCP by using the Agent Assignment Failover Wizard. When you use this wizard, you can designate which management servers agents are allowed to use failover if the primary management server is unavailable. You can use this technique to prevent agents from failing over to the root manager server (RMS) of a management group. For information about how to perform this operation, see the "How to Use Active Directory Domain Services to Assign Computers to an Operations Manager 2007 Management group" topic in the Operations Manager 2007 Help.

To prepare the Management Group for Agents

By default, management groups do not automatically admit manually installed agents into the management group to manage them. This is a security feature. The management group, as a whole, and individual management servers can be configured to put new manually installed agents into the Pending Management container, where an administrator can then review them and either admit them into the management group or reject them. It is also possible to change the default behavior and automatically admit manually installed agents, although this is not recommended for security reasons. For information about how to perform these steps, see the "How to Approve an Operations Manager 2007 Agent Installed for a management group Using MOMAgent.msi" topic in the Operations Manager 2007 Help.