Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 4909 Source: SMSServer

SMS Systems Management Server could not locate the "System Management" container in Active Directory. Nor could it create a default container. This will prevent Site Component Manager from updating or adding any objects to Active Directory.

Possible cause: This siteís SMS Service account or the site serverís machine account might not have the correct rights to update active directory.

Solution: Either give the Service Account rights to update the domain's System Container or manually create the "System Management" container in this domain's Active Directory system container and give the Service Account full rights to that container (and all children objects).
This problem may occur when the SMS Site Component Manager cannot locate or does not have the correct permission to manage the System Management container in the Active Directory directory service. See ME830022 for information on how to solve this problem.
ME830615 has information on this event.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to



Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.