So you deploy a SCOM2016 agent to a Windows 2016 Domain Controller, only problem is, after the agent push, discovery doesn’t work. Well, the agent isn’t corrupted… Ports are open… SCOM agent is being deployed using the System Local account… etc. etc. So, now what?
Taking a look at the Windows 2016 domain controller and its event log, the domain controller OpsMgr log is getting bombarded with Event IDs 1102….
After some investigation, seems to be this has been an issue in SCOM 2012 (and 2012R2) as well. Well, here’s the fix…
Taking a look at the HSLockdown, the Local System account is being denied access.. Browse to the following folder “%windir%Program FilesMicrosoft Monitoring AgentAgent “and run the following command (elevated access…), “HSLockdown.exe /L“
Now that we can see the Local System account is being denied access, let’s give it access… Running the…
View original post 30 more words
