SCOM Workgroup Monitoring – Disable AD Integration


Because workgroup computers can’t read Active Directory, AD Integration should to be disabled on these systems. For some reason, the SCOM interactive agent setup will not allow the option “Use Management Group Information from Active Directory” to be disabled (it is grayed out). However, this setting can be disabled by installing the agent from the command line, or editing a registry key on an existing agent.

To disable during setup:
Install the SCOM agent with the following command line: MOMAgent.msi USE_SETTINGS_FROM_AD=0 MANAGEMENT_GROUP=“” MANAGEMENT_SERVER_DNS= /qb

To disable in the registry:
Open registry editor and nagivate to: “SYSTEM\CurrentControlSet\Services\HealthService\Parameters\ConnectorManager“.
Set the EnableADIntegration in the registry to ‘0′
Restart the HealthService (System Center Management)

If one of the above steps is not completed, you will see the following entry in your Operations Manager event log:

Log Name: Operations Manager
Source: HealthService
Date:
Event ID: 2010
Task Category: Health Service
Level: Error
Keywords: Classic
User: N/A
Computer:
Description:
The Health Service cannot connect to Active Directory to retrieve management group policy. The error is Unspecified error (0x80004005)

Leave a Reply

Your email address will not be published.