SCOM 2007 R2 ACS links

  1. Additional Reports:
    1. Some Custom ACS Reports http://blogs.technet.com/b/jimmyharper/archive/2009/12/10/some-custom-acs-reports.aspx
    2. ACS Database Dashboard Report http://blogs.technet.com/b/jimmyharper/archive/2010/11/02/acs-database-dashboard-report.aspx
  2. Audit Collection Services (ACS) http://technet.microsoft.com/en-us/library/bb381258.aspx
  3. Managing Audit Collection Services in Operations Manager 2007 http://technet.microsoft.com/en-us/library/cc974475.aspx
  4. Audit Collection Services for Cross Platform Operating Systems http://technet.microsoft.com/ru-ru/library/ee873221.aspx .
  5. Windows 2008 R2 What’s New in Windows Security Auditing http://technet.microsoft.com/en-us/library/dd560628%28WS.10%29.aspx
  6. Security Audit Events for Windows
    1. Security Audit Events for Windows 7 and Windows Server 2008 R2 http://www.microsoft.com/downloads/en/details.aspx?FamilyID=3A15B562-4650-4298-9745-D9B261F35814
    2. Security audit events for Microsoft Windows Server 2008 and Microsoft Windows Vista http://www.microsoft.com/downloads/en/details.aspx?FamilyID=82E6D48F-E843-40ED-8B10-B3B716F6B51B&displaylang=en
    3. Description of security events in Windows Vista and in Windows Server 2008 http://support.microsoft.com/kb/947226
    4. If you want a complete list of WS03 security events, then I suggest you look at chapter 4 of the Windows Server 2003 Security Guide. http://technet.microsoft.com/en-us/library/cc163121.aspx#EKH
    5. Windows 2000 Security Event Descriptions (Part 1 of 2) http://support.microsoft.com/kb/299475
    6. A list of all possible security events in the Windows Security Event Log http://blogs.technet.com/b/kevinholman/archive/2011/08/05/a-list-of-all-possible-security-events-in-the-windows-security-event-log.aspx
  7. Catch-22: Securing ACS Reports AND scheduling them. Part I: How Catch-22 was born… http://thoughtsonopsmgr.blogspot.com/2010/01/catch-22-securing-acs-reports-and.html
  8. Audit Collection Services WIKI http://www.systemcentercentral.com/WIKI/WIKIDetails/tabid/146/IndexID/20526/Default.aspx
  9. Security Monitoring and Attack Detection http://technet.microsoft.com/en-us/library/cc875806.aspx
  10. Windows Security Logging and Other Esoterica http://blogs.msdn.com/b/ericfitz/
    1. Mapping pre-Vista Security Event IDs to Security Event IDs in Vista+ http://blogs.msdn.com/b/ericfitz/archive/2009/06/10/mapping-pre-vista-security-event-ids-to-security-event-ids-in-vista.aspx
  11. User Logon report – strange logon events with “Logon Process: Authz”
    1. Logon Audit Events Seen After Installing Service Pack on Windows Server 2003 http://support.microsoft.com/kb/2002335
    2. service stopps/started Event ID 540 Logon/Logoff by %username% http://techblog.wanierke.de/2009/09/23/service-stoppsstarted-event-id-540-logonlogoff-by-username/print/
  1. Leave a comment

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: