Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 4912 Source: SMSServer

On <date> <time> component <cumponent name> on computer <computer name> reported: Systems Management Server cannot update the already existing object "<object name>" in Active Directory.

Possible cause: This site's SMS Service account or the site server's machine account may not have full control rights for the "System Management" container in Active Directory
Solution: Give the site's SMS Service account full control rights to the "System Management" container and all child objects in Active Directory.

Possible cause: The Active Directory object "<object name>" has been moved to a location outside of the "System Management" container or has been lost.
Solution: Delete the object from its current location and let SMS create a new object.

Possible cause: The Active Directory schema has not been extended with the correct SMS Active Directory classes and attributes.
Solution: Turn off Active Directory publishing for each site in the forest until the schema can be extended. The schema can be extended with the tool "extadsch.exe" from the SMS CD.
As per Microsoft: "This problem may occur when the SMS Site Component Manager cannot locate or does not have the correct permission to manage the System Management container in the Active Directory directory service". See ME830022 for information on solving this problem.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to



Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.