<<

Monitoring Services Guide Overview

Aldridge Monitors are used to evaluate the condition of any device and then perform an action when a threshold is reached. These monitors then generate alerts, by opening tickets, using the information obtained from the monitor.

Event Monitors Table 1: Remote Monitors—Event Monitors

Alert Report Monitor Name Description Groups Interval Action Category

Checks for Service Plans.Windows Servers. Every 10 Default - EV - 4110 DAG Log Replay Eventlog *!!!0!!!MSExchangeRepl!!!4110!!!* in the event logs and if it Roles. Servers.Exchange MinsMin Create Suspended Checks exists, a ticket is created. 2010 Servers utes Ticket

Checks for Service Plans.Windows Servers. Server Default - EV - 4111 DAG Log Replay Every 10 Eventlog *!!!0!!!MSExchangeRepl!!!4111!!!* in the event logs and if it Roles.Windows Messaging Servers.Exchange Create Resumed Minutes Checks exists, a ticket is created. 2010 Servers Ticket

Checks for Service Plans.Windows Servers. Server Default - Every 10 Eventlog EV - 10036 DAG Block Mode *!!!0!!!MSExchangeRepl!!!10036!!!* in the event logs and if it Roles.Windows Messaging Servers.Exchange Create Minutes Checks exists, a ticket is created. 2010 Servers Ticket

Checks for Service Plans.Windows Servers. Server Default - Every 5 Eventlog EV - 1062 Cluster Online *!!!0!!!FailoverClustering!!!1062!!!* in the event logs and if it Roles.Windows Messaging Create Minutes Checks exists, a ticket is created. Servers.Exchange2010 Servers Ticket

EV - 1069 - Checks for System!!!1!!!Microsoft- Windows- Default - Service Plans.Windows Servers. Server Every 60 Eventlog Windows- FailoverClustering!!!1069 in the event logs and if it exists, a Create Roles Seconds Checks FailoverClustering ticket is created. Ticket

Checks for Service Plans.Windows Servers. Server Default - Every 5 Eventlog EV - 1125 Cluster Online *!!!0!!!FailoverClustering!!!1125!!!* in the event logs and if it Roles.Windows Messaging Create Minutes Checks exists, a ticket is created. Servers.Exchange2010 Servers Ticket

PO Box 56506, Houston, TX 77256-6506 | p: 713.403.9150 | f: 713.621.1826 | www.aldridge.com | [email protected]

EV - 1135 Microsoft- Checks for System!!!1!!!Microsoft- Windows- Default - Service Plans.Windows Servers. Server Every 60 Eventlog Windows- FailoverClustering!!!1135 in the event logs and if it exists, a Create Roles Seconds Checks FailoverClustering ticket is created. Ticket

EV - 1177 Microsoft- Checks for System!!!1!!!Microsoft- Windows- Default - Service Plans.Windows Servers. Server Every 60 Eventlog Windows- FailoverClustering!!!1177 in the event logs and if it exists, a Create Roles Seconds Checks FailoverClustering ticket is created. Ticket

Checks for Service Plans.Windows Servers. Server Default - Every 5 Eventlog EV - 1204 Cluster Offline *!!!0!!!FailoverClustering!!!1204!!!* in the event logs and if it Roles.Windows Messaging Create Minutes Checks exists, a ticket is created. Servers.Exchange2010 Servers Ticket

EV - 1205 Microsoft- Checks for System!!!1!!!Microsoft- Windows- Default - Service Plans.Windows Servers. Server Every 60 Eventlog Windows- FailoverClustering!!!1205 in the event logs and if it exists, a Create Roles Seconds Checks FailoverClustering ticket is created. Ticket

Service Plans.Windows Servers. Server Roles.Windows Messaging Servers.Exchange Checks for Default - EV - 15002 Exchange 2007 Servers Every 5 Eventlog *!!!0!!!MSExchangeTransport!!!15002!!!* in the event logs and if Create Backpressure Minutes Checks it exists, a ticket is created. Service Plans.Windows Servers. Server Ticket Roles.Windows Messaging Servers. Exchange 2010 Servers

Service Plans.Windows Servers. Server Roles.Windows Messaging Servers.Exchange Checks for Default - EV - 15004 Exchange 2007 Servers Every 5 Eventlog *!!!0!!!MSExchangeTransport!!!15004!!!* in the event logs and if Create Backpressure Minutes Checks it exists, a ticket is created. Service Plans.Windows Servers. Server Ticket Roles.Windows Messaging Servers.Exchange 2010 Servers Service Plans.Windows Servers. Server Roles.Windows Messaging Servers.Exchange Checks for Default - EV - 15006 Exchange 2007 Servers Every 5 Eventlog *!!!0!!!MSExchangeTransport!!!15006!!!* in the event logs and if Create Backpressure Minutes Checks it exists, a ticket is created. Service Plans.Windows Servers. Server Ticket Roles.Windows Messaging Servers.Exchange 2010 Servers Checks for Service Plans.Windows Servers. Server Default - Every 5 Eventlog EV - 1561 Cluster Offline *!!!0!!!FailoverClustering!!!1561!!!* in the event logs and if it Roles.Windows Messaging Servers.Exchange Create Minutes Checks exists, a ticket is created. 2010 Servers Ticket

Checks for Service Plans.Windows Servers. Server Default - Every 5 Eventlog EV - 2090 DAG Failover *!!!0!!!MSExchangeRepl!!!2090!!!* in the event logs and if it Roles.Windows Messaging Servers.Exchange Create Minutes Checks exists, a ticket is created. 2010 Servers Ticket

Checks for Service Plans.Windows Servers. Server Default - Every 5 Eventlog EV - 2153 DAG Communication *!!!0!!!MSExchangeRepl!!!2153!!!* in the event logs and if it Roles.Windows Messaging Servers.Exchange Create Minutes Checks exists, a ticket is created. 2010 Servers Ticket

PO Box 56506, Houston, TX 77256-6506 | p: 713.403.9150 | f: 713.621.1826 | www.aldridge.com | [email protected]

Service Plans.Windows Default - Checks for *!!!0!!!MSExchangeIS Store!!!9690!!!* in Every 60 Eventlog EV - Exchange DB Size Servers.Server Roles.Windows Create the event logs and if it exists, a ticket is created. Seconds Checks Messaging Servers.Exchange Ticket 2003 Servers

File Monitors Table 1: Remote Monitors—File Monitors

Alert Report Monitor Name Description Groups Interval Action Category Checks to see if PatchReady.txt file is in the %windir%\temp directory and if it _System Every Cluster Cluster Node Patching exists, runs the Automation.Cluster 30 Patch File Monitors Ready ‘Install All Approved Patches’ Detected Seconds Ready script.

Network Monitors Table 3: Remote Monitors—Network Monitors Monitor Name Description Groups Interval Alert Action Report Category Service Plans.MAC Workstations. Managed 8x5 Service Plans.MAC Workstations. TCP – Connection Monitors the number of established Managed 24x7 Every 5 Default – Raise Network Current TCP connections Service Plans.MAC Servers.Managed minutes Alert Checks 8x5 Service Plans.MAC Servers.Managed 24x7

Service Plans.LinuxMachines. TCP – Connection Monitors the number of established Managed 8x5 Every 2 Default – Raise Network Current TCP connections Service Plans. LinuxMachines. minutes Alert Checks Managed 24x7

Verifies the network port is open and communicating. If the Every 10 Default - Create Network TCP - DNS Port 53 Port Management.DNS- 53 TCP port is not open, a ticket iscreated Minutes Ticket Checks

Verifies the network port is open and communicating. If the Every 10 Default - Create Network TCP - FTP Port 21 Port Management.FTP -21 TCP port is not open, a ticket is created Minutes Ticket Checks

Verifies the network port is open and communicating. If the Every 10 Default - Create Network TCP - HTTP Port 80 Port Management.HTTP- 80 TCP port is not open, a ticket is created Minutes Ticket Checks

PO Box 56506, Houston, TX 77256-6506 | p: 713.403.9150 | f: 713.621.1826 | www.aldridge.com | [email protected]

TCP - HTTPS Port Verifies the network port is open and communicating. If the Every 10 Default - Create Network Port Management.HTTPS -443 TCP 443 port is not open, a ticket is created Minutes Ticket Checks

Verifies the network port is open and communicating. If the Every 10 Default - Create Network TCP - ICA Port 1494 Port Management.ICA - 1494 TCP port is not open, a ticket is created Minutes Ticket Checks

Verifies the network port is open and communicating. If the Every 10 Default - Create Network TCP - IMAP Port 143 Port Management.IMAP - 143 TCP port is not open, a ticket is created Minutes Ticket Checks

Verifies the network port is open and communicating. If the Every 10 Default - Create Network TCP - LDAP Port 389 Port Management.LDAP - 389 TCP port is not open, a ticket is created Minutes Ticket Checks

TCP - MSSQL Port Verifies the network port is open and communicating. If the Every 10 Default - Create Network PortManagement.MSSQL -1433 TCP 1433 port is not open, a ticket is created Minutes Ticket Checks

TCP - MySQL Port Verifies the network port is open and communicating. If the Every 10 Default - Create Network PortManagement.MySQL -3306 TCP 3306 port is not open, a ticket is created Minutes Ticket Checks

TCP - Oracle Port Verifies the network port is open and communicating. If the Every 10 Default - Create Network PortManagement.Oracle -1521 TCP 1521 port is not open, a ticket is created Minutes Ticket Checks

Verifies the network port is open and communicating. If the Every 10 Default - Create Network TCP - POP Port 110 Port Management.POP3- 110 TCP port is not open, a ticket is created Minutes Ticket Checks

TCP - RDP Port Verifies the network port is open and communicating. If the Every 10 Default - Create Network Port Management.RDP- 3389 TCP 3389 port is not open, a ticket is created Minutes Ticket Checks

Verifies the network port is open and communicating. If the Every 10 Default - Create Network TCP - SMTP Port 25 Port Management.SMTP - 25TCP port is not open, a ticket is created Minutes Ticket Checks

Default - TCP - SMTPAUTH Verifies the network port is open and communicating. If the Port Management.SMTPAUT H - 587 Every 10 Network Workstation Port 587 port is not open, a ticket is created TCP Minutes Checks 24x7

Verifies the network port is open and communicating. If the Every 10 Default - Create Network TCP - SSH Port 22 Port Management.SSH -22 TCP port is not open, a ticket is created Minutes Ticket Checks

PO Box 56506, Houston, TX 77256-6506 | p: 713.403.9150 | f: 713.621.1826 | www.aldridge.com | [email protected]

Service Plans.MAC Workstations. Managed 8x5 Service Plans.MAC Workstations. UDP – Connection Monitors the number of established Managed 24x7 Every 5 Default – Raise Network Current TCP connections Service Plans.MAC Servers.Managed minutes Alert Checks 8x5 Service Plans.MAC Servers.Managed 24x7

Service Plans.LinuxMachines. UDP– Connection Monitors the number of established TCP Managed 8x5 Every 2 Default – Raise Network Current connections Service Plans. LinuxMachines. minutes Alert Checks Managed 24x7

Verifies the network port is open and communicating. If the Every 10 Default - Create Network UDP - DHCP Port 67 PortManagement.DHCP -67 UDP port is not open, a ticket is created Minutes Ticket Checks

Verifies the network port is open and communicating. If the Every 10 Default - Create Network UDP - DNS Port 53 Port Management.DNS- 53 TCP port is not open, a ticket is created Minutes Ticket Checks

Performance Monitors Table 4: Remote Monitors—Performance Monitors Monitor Name Description Groups Interval Alert Action Report Category

All performance monitors are named after what they are Service Plans.Windows Servers. Server Default - Perf - Accepting TCP testing. All thresholds are based on Microsoft standards, Every 60 Performance Roles.Windows Web/Proxy Servers.ISA Create Connections where applicable, and if the condition exceeds the threshold, Seconds Checks Servers Ticket a ticket is created.

Service Plans.Windows Servers. Server All performance monitors are named after what they are Roles.Windows Messaging Servers.Exchange Perf - Active Mailbox Default - testing. All thresholds are based on Microsoft standards, 2007 Servers Every 60 Performance Delivery Create where applicable, and if the condition exceeds the threshold, Seconds Checks Queue Length Service Plans.Windows Servers. Server Ticket a ticket is created. Roles.Windows Messaging Servers.Exchange 2010 Servers

Service Plans.Windows Servers. Server All performance monitors are named after what they are Roles.Windows Messaging Servers.Exchange Perf - Active Non-SMTP Default - testing. All thresholds are based on Microsoft standards, 2007 Servers Every 60 Performance Delivery Create where applicable, and if the condition exceeds the threshold, Service Plans.Windows Servers. Server Seconds Checks Queue Length Ticket a ticket is created. Roles.Windows Messaging Servers.Exchange 2010 Servers

PO Box 56506, Houston, TX 77256-6506 | p: 713.403.9150 | f: 713.621.1826 | www.aldridge.com | [email protected]

Service Plans.Windows Servers. Server All performance monitors are named after what they are Roles.Windows Messaging Servers.Exchange Perf - Active Remote Default - testing. All thresholds are based on Microsoft standards, 2007 Servers Every 60 Performance Delivery Create where applicable, and if the condition exceeds the threshold, Seconds Checks Queue Length Service Plans.Windows Servers. Server Ticket a ticket is created. Roles.Windows Messaging Servers.Exchange 2010 Servers

All performance monitors are named after what they are Service Plans.Windows Servers. Server Default - testing. All thresholds are based on Microsoft standards, Every 60 Performance Perf - Active Sessions Roles.Windows Remote Access Create where applicable, and if the condition exceeds the threshold, Seconds Checks Servers.Terminal Servers Ticket a ticket is created.

Service Plans.Windows Servers. Server All performance monitors are named after what they are Roles.Windows Database Servers.MS SQL Default - testing. All thresholds are based on Microsoft standards, 2008 R2 Servers Every 60 Performance Perf - Active Temp Tables Create where applicable, and if the condition exceeds the threshold, Seconds Checks Service Plans.Windows Servers. Server Ticket a ticket is created. Roles.Windows Database Servers.MS SQL 2008 Servers

All performance monitors are named after what they are Service Plans.Windows Servers.Server Default - testing. All thresholds are based on Microsoft standards, Every 60 Performance Perf - AD DB Cache % Hit Roles.Windows Servers Core Services.Domain Create where applicable, and if the condition exceeds the threshold, Seconds Checks Controllers Ticket a ticket is created.

Service Plans.Windows Servers. Server All performance monitors are named after what they are Roles.Windows Messaging Servers.Exchange Perf - Aggregate Delivery Default - testing. All thresholds are based on Microsoft standards, 2007 Servers Every 60 Performance Queue Create where applicable, and if the condition exceeds the threshold, Seconds Checks Length Service Plans.Windows Servers.Server Ticket a ticket is created. Roles.Windows Messaging Servers.Exchange 2010 Servers

All performance monitors are named after what they are Perf - Application Resolution Service Plans.Windows Servers. Server Default - testing. All thresholds are based on Microsoft standards, Every 60 Performance Time Roles.Windows Remote Access Servers.Citrix Create where applicable, and if the condition exceeds the threshold, Seconds Checks (ms) XenApp Servers Ticket a ticket is created.

PO Box 56506, Houston, TX 77256-6506 | p: 713.403.9150 | f: 713.621.1826 | www.aldridge.com | [email protected]

Service Plans.Windows Servers. Managed 24x7 Service Plans.Windows Servers. All performance monitors are named after what they are Managed 8x5 Every Create testing. All thresholds are based on Microsoft standards, Service Plans.Windows Workstations. Performance Perf - Available MBytes 120 Ticket and where applicable, and if the condition exceeds the threshold, Managed 24x7 Checks Seconds Raise Alert a ticket is created. Service Plans.Windows Workstations. Managed 8x5 Service Plans.Windows Workstations. Managed HAAS

All performance monitors are named after what they are Service Plans.Windows Servers. Server Default - testing. All thresholds are based on Microsoft standards, Every 60 Performance Perf - Backlogged Packets Roles.Windows Web/Proxy Servers.ISA Create where applicable, and if the condition exceeds the threshold, Seconds Checks Servers Ticket a ticket is created.

All performance monitors are named after what they are Service Plans.Windows Servers. Server Default - Perf - Cache Page Fault testing. All thresholds are based on Microsoft standards, Every 60 Performance Roles.Windows Servers Core Services.Domain Create Stalls/Sec where applicable, and if the condition exceeds the threshold, Seconds Checks Controllers Ticket a ticket is created.

All performance monitors are named after what they are Service Plans.Windows Servers. Server Default - Perf - Cache Page testing. All thresholds are based on Microsoft standards, Every 60 Performance Roles.Windows Servers Core Services.Domain Create Faults/Sec where applicable, and if the condition exceeds the threshold, Seconds Checks Controllers Ticket a ticket is created.

All performance monitors are named after what they are Service Plans.Windows Servers. Server Default - Perf - Categorizer Queue testing. All thresholds are based on Microsoft standards, Every 60 Performance Roles.Windows Messaging Servers.Exchange Create Length where applicable, and if the condition exceeds the threshold, Seconds Checks 2003 Servers Ticket a ticket is created.

Service Plans.Windows Servers. Server All performance monitors are named after what they are Roles.Windows Database Servers.MS SQL Default - testing. All thresholds are based on Microsoft standards, 2008 R2 Servers Every 60 Performance Perf - Connection Reset/sec Create where applicable, and if the condition exceeds the threshold, Seconds Checks Service Plans.Windows Servers. Server Ticket a ticket is created. Roles.Windows Database Servers.MS SQL 2008 Servers

PO Box 56506, Houston, TX 77256-6506 | p: 713.403.9150 | f: 713.621.1826 | www.aldridge.com | [email protected]

Service Plans.Mac Servers. Managed 8x5 Service Plans.MacServers. Managed Default – Monitors to check the percentage of CPU 24x7 Every 5 Performance Perf – CPU % Idle Raise time in idle mode. Service Plans.Mac Workstations. minutes Checks Alert Managed 8x5 Service Plans.Mac Workstations. Managed 8x5

Service Plans.LinuxMachines. Default – Monitors to check if the percentage of CPU Managed 8x5 Every 2 Performance Perf – CPU % Idle Raise time in idle mode. Service Plans.Linux Machines. minutes Checks Alert Managed 24x7

Monitors to check if the percentage of time that the CPU or Service Plans.Linux Machines. Managed Default – Every 2 Performance Perf – CPU % IOWait CPUs were idle during which the system had 8x5 Service Plans.Linux Raise minutes Checks an outstanding disk I/O request. Machines. Managed 24x7 Alert

Service Plans.Mac Servers. Managed 8x5 Service Plans.Mac Servers. Managed Default – Monitors to check the percentage of CPU 24x7 Every 5 Antivirus Perf CPU % System Raise time in system mode. Service Plans.Mac Workstations. minutes Checks Alert Managed 8x5 Service Plans.Mac Workstations. Managed 8x5

Service Plans.Linux Machines. Default – Monitors to check if the percentage of CPU Managed 8x5 Every 2 Antivirus Perf CPU % System Raise time in system mode. Service Plans.Linux Machines. minutes Checks Alert Managed 24x7

Service Plans.Mac Servers. Managed 8x5 Service Plans.Mac Servers. Default – Monitors to check if the percentage of CPU Managed 24x7 Every 5 Performance Perf – CPU % User Raise time in user mode minutes Checks Service Plans.Mac Workstations. Alert Managed 8x5 Service Plans.Mac Workstations. Managed 8x5

PO Box 56506, Houston, TX 77256-6506 | p: 713.403.9150 | f: 713.621.1826 | www.aldridge.com | [email protected]

Service Plans.Mac Servers. Managed 8x5 Service Plans.Mac Servers. Default – Perf – CPU Load – 5 min Monitors to check if the CPU load average for the past five Managed 24x7 Every 5 Performance Raise avg minutes Service Plans.Mac Workstations. minutes Checks Alert Managed 8x5 Service Plans.Mac Workstations. Managed 8x5

Service Plans.Linux Machines. Default – Perf – CPU Load – 5 min Monitors to check tthe CPU load average for the past five Managed 8x5 Every 2 Performance Raise avg minutes Service Plans.Linux Machines. minutes Checks Alert Managed 24x7

All performance monitors are named after what they are Perf - Current Cache Service Plans.Windows Servers. Server Default - testing. All thresholds are based on Microsoft standards, Every 60 Performance Fetches Roles.Windows Web/Proxy Servers.ISA Create where applicable, and if the condition exceeds the threshold, Seconds Checks Average Milliseconds/ Servers Ticket a ticket is created.

Service Plans.Windows Workstations. All performance monitors are named after what they are Managed 24x7 Perf - Current Disk Queue Default - testing. All thresholds are based on Microsoft standards, Service Plans.Windows Workstations. Every 90 Performance Length Create where applicable, and if the condition exceeds the threshold, Managed 8x5 Seconds Checks C Drive Ticket a ticket is created. Service Plans.Windows Workstations. Managed HAAS

All performance monitors are named after what they are Service Plans.Windows Servers. Server Default - Perf - Data Store Connection testing. All thresholds are based on Microsoft standards, Every 60 Performance Roles.Windows Remote Access Servers.Citrix Create Failure where applicable, and if the condition exceeds the threshold, Seconds Checks XenApp Servers Ticket a ticket is created.

Service Plans.Windows Servers. Server All performance monitors are named after what they are Roles.Windows Messaging Servers.Exchange Default - Perf - Database Page Fault testing. All thresholds are based on Microsoft standards, 2007 Servers Every 60 Performance Create Stalls/sec where applicable, and if the condition exceeds the threshold, Service Plans.Windows Servers. Server Seconds Checks Ticket a ticket is created. Roles.Windows Messaging Servers.Exchange 2010 Servers

PO Box 56506, Houston, TX 77256-6506 | p: 713.403.9150 | f: 713.621.1826 | www.aldridge.com | [email protected]

All performance monitors are named after what they are Service Plans.Windows Servers. Server Default - testing. All thresholds are based on Microsoft standards, Every 60 Performance Perf - DHCP Acks / Sec Roles.Windows Servers Core Create where applicable, and if the condition exceeds the threshold, Seconds Checks Services.Windows DHCP Servers Ticket a ticket is created.

All performance monitors are named after what they are Service Plans.Windows Servers. Server Default - Perf - DHCP Active Queue testing. All thresholds are based on Microsoft standards, Every 60 Performance Roles.Windows Servers Core Create Length where applicable, and if the condition exceeds the threshold, Seconds Checks Services.Windows DHCP Servers Ticket a ticket is created.

All performance monitors are named after what they are Perf - DHCP Conflict Check Service Plans.Windows Servers. Server Default - testing. All thresholds are based on Microsoft standards, Every 60 Performance Queue Roles.Windows Servers Core Create where applicable, and if the condition exceeds the threshold, Seconds Checks Length Services.Windows DHCP Servers Ticket a ticket is created.

All performance monitors are named after what they are Service Plans.Windows Servers. Server Default - testing. All thresholds are based on Microsoft standards, Every 60 Performance Perf - DHCP Declines Sec Roles.Windows Servers Core Create where applicable, and if the condition exceeds the threshold, Seconds Checks Services.Windows DHCP Servers Ticket a ticket is created.

All performance monitors are named after what they are Service Plans.Windows Servers.Server Default - testing. All thresholds are based on Microsoft standards, Every 60 Performance Perf - DHCP Discovers Sec Roles.Windows Servers Core Services.Windows Create where applicable, and if the condition exceeds the threshold, Seconds Checks DHCP Servers Ticket a ticket is created.

All performance monitors are named after what they are Service Plans.Windows Servers. Server Default - testing. All thresholds are based on Microsoft standards, Every 60 Performance Perf - DHCP Informs Sec Roles.Windows Servers Core Create where applicable, and if the condition exceeds the threshold, Seconds Checks Services.Windows DHCP Servers Ticket a ticket is created.

PO Box 56506, Houston, TX 77256-6506 | p: 713.403.9150 | f: 713.621.1826 | www.aldridge.com | [email protected]

All performance monitors are named after what they are Service Plans.Windows Servers. Server Default - testing. All thresholds are based on Microsoft standards, Every 60 Performance Perf - DHCP Nacks Sec Roles.Windows Servers Core Create where applicable, and if the condition exceeds the threshold, Seconds Checks Services.Windows DHCP Servers Ticket a ticket is created.

All performance monitors are named after what they are Service Plans.Windows Servers. Server Default - testing. All thresholds are based on Microsoft standards, Every 60 Performance Perf - DHCP Requests Sec Roles.Windows Servers Core Create where applicable, and if the condition exceeds the threshold, Seconds Checks Services.Windows DHCP Servers Ticket a ticket is created.

All performance monitors are named after what they are Service Plans.Windows. Servers Default - testing. All thresholds are based on Microsoft standards, Managed 24x7 Every 90 Performance Perf - Disk % Idle Time Create where applicable, and if the condition exceeds the threshold, Service Plans.Windows Servers. Seconds Checks Ticket a ticket is created. Managed 8x5

Service Plans.Linux Machines. Default – Perf – Disk Read – Primary Monitors to check the primary disk drive read rate in Managed 8x5 Every 2 Antivirus Raise Drive MB/second Service Plans.Linux Machines. minutes Checks Alert Managed 24x7

Service Plans.Linux Machines. Default – Perf- Disk TPS – Primary Monitors to check if the primary disk drive transactions per Managed 8x5 Every 2 Antivirus Raise Disk second (TPS) Service Plans.Linux Machines. minutes Checks Alert Managed 24x7

Service Plans.Mac Servers. Managed 8x5 Service Plans.Mac Servers. Managed Perf – Disk Transfer – Default – Monitors to check if the primary disk transfer rate in 24x7 Every 5 Performance Primary Raise MB/sec Service Plans.Mac Workstations. minutes Checks Drive Alert Managed 8x5 Service Plans.Mac Workstations. Managed 8x5

PO Box 56506, Houston, TX 77256-6506 | p: 713.403.9150 | f: 713.621.1826 | www.aldridge.com | [email protected]

All performance monitors are named after what they are Service Plans.Windows Servers. Default - testing. All thresholds are based on Microsoft standards, Managed 24x7 Every 90 Performance Perf - Disk Transfers/Sec Create where applicable, and if the condition exceeds the threshold, Service Plans.Windows Servers. Seconds Checks Ticket a ticket is created. Managed 8x5

Service Plans.Windows Workstations. All performance monitors are named after what they are Managed 24x7 Default - testing. All thresholds are based on Microsoft standards, Service Plans.Windows Workstations. Every 90 Performance Perf - Disk Utilization Create where applicable, and if the condition exceeds the threshold, Managed 8x5 Seconds Checks Ticket a ticket is created. Service Plans.Windows Workstations. Managed HAAS

Service Plans.Linux Machines. Default – Perf – Disk Write – Primary Monitors to check if the primary disk drive write rate in Managed 8x5 Every 2 Antivirus Raise Drive MB/second Service Plans.Linux Machines. minutes Checks Alert Managed 24x7

All performance monitors are named after what they are Service Plans.Windows Servers. Server Default - testing. All thresholds are based on Microsoft standards, Every 60 Performance Perf - DNS Caching Memory Roles.Windows Servers Core Create where applicable, and if the condition exceeds the threshold, Seconds Checks Services.Windows DNS Servers Ticket a ticket is created.

All performance monitors are named after what they are Service Plans.Windows Servers. Server Default - Perf - DNS Database Node testing. All thresholds are based on Microsoft standards, Every 60 Performance Roles.Windows Servers Core Create Memory where applicable, and if the condition exceeds the threshold, Seconds Checks Services.Windows DNS Servers Ticket a ticket is created.

All performance monitors are named after what they are Perf - DNS Dynamic Service Plans.Windows Servers. Server Default - testing. All thresholds are based on Microsoft standards, Every 60 Performance Updates Roles.Windows Servers Core Create where applicable, and if the condition exceeds the threshold, Seconds Checks Timeouts Services.Windows DNS Servers Ticket a ticket is created.

PO Box 56506, Houston, TX 77256-6506 | p: 713.403.9150 | f: 713.621.1826 | www.aldridge.com | [email protected]

All performance monitors are named after what they are Service Plans.Windows Servers. Server Default - testing. All thresholds are based on Microsoft standards, Every 60 Performance Perf - DNS Nbstat Memory Roles.Windows Servers Core Create where applicable, and if the condition exceeds the threshold, Seconds Checks Services.Windows DNS Servers Ticket a ticket is created.

All performance monitors are named after what they are Service Plans.Windows Servers. Server Default - Perf - DNS Zone Transfer testing. All thresholds are based on Microsoft standards, Every 60 Performance Roles.Windows Servers Core Create Failure where applicable, and if the condition exceeds the threshold, Seconds Checks Services.Windows DNS Servers Ticket a ticket is created.

All performance monitors are named after what they are Service Plans.Windows Servers. Server Default - Perf - DRA Inbound Bytes testing. All thresholds are based on Microsoft standards, Every 60 Performance Roles.Windows Servers Core Services.Domain Create Total/Sec where applicable, and if the condition exceeds the threshold, Seconds Checks Controllers Ticket a ticket is created.

All performance monitors are named after what they are Service Plans.Windows Servers. Server Default - Perf - DRA Inbound Object testing. All thresholds are based on Microsoft standards, Every 60 Performance Roles.Windows Servers Core Services.Domain Create Updates Remaining in Pac where applicable, and if the condition exceeds the threshold, Seconds Checks Controllers Ticket a ticket is created.

All performance monitors are named after what they are Service Plans.Windows Servers. Server Default - Perf - DRA Outbound testing. All thresholds are based on Microsoft standards, Every 60 Performance Roles.Windows Servers Core Services.Domain Create Bytes Total / Sec where applicable, and if the condition exceeds the threshold, Seconds Checks Controllers Ticket a ticket is created.

All performance monitors are named after what they are Perf - DRA Pending Service Plans.Windows Servers. Server Default - testing. All thresholds are based on Microsoft standards, Every 60 Performance Replication Roles.Windows Servers Core Services.Domain Create where applicable, and if the condition exceeds the threshold, Seconds Checks Synchronization Controllers Ticket a ticket is created.

PO Box 56506, Houston, TX 77256-6506 | p: 713.403.9150 | f: 713.621.1826 | www.aldridge.com | [email protected]

All performance monitors are named after what they are Service Plans.Windows Servers. Server Default - testing. All thresholds are based on Microsoft standards, Every 60 Performance Perf - Dropped Packets Sec Roles.Windows Web/Proxy Servers.ISA Create where applicable, and if the condition exceeds the threshold, Seconds Checks Servers Ticket a ticket is created.

All performance monitors are named after what they are Service Plans.Windows Servers. Server Default - testing. All thresholds are based on Microsoft standards, Every 60 Performance Perf - DS Threads in Use Roles.Windows Servers Core Services.Domain Create where applicable, and if the condition exceeds the threshold, Seconds Checks Controllers Ticket a ticket is created.

All performance monitors are named after what they are Service Plans.Windows Servers. Server Default - testing. All thresholds are based on Microsoft standards, Every 60 Performance Perf - DTC Calls Roles.Windows Messaging Create where applicable, and if the condition exceeds the threshold, Seconds Checks Servers.Blackberry Servers Ticket a ticket is created.

All performance monitors are named after what they are Service Plans.Windows Servers. Server Default - testing. All thresholds are based on Microsoft standards, Every 60 Performance Perf - Errors Sec Roles.Windows Web/Proxy Servers.Windows Create where applicable, and if the condition exceeds the threshold, Seconds Checks IIS Web Servers Ticket a ticket is created.

All performance monitors are named after what they are Service Plans.Windows Servers. Server Default - testing. All thresholds are based on Microsoft standards, Every 60 Performance Perf - File Cache Hits % Roles.Windows Web/Proxy Servers.Windows Create where applicable, and if the condition exceeds the threshold, Seconds Checks IIS Web Servers Ticket a ticket is created.

All performance monitors are named after what they are Service Plans.Windows Servers. Server Default - Perf - File Directory testing. All thresholds are based on Microsoft standards, Every 60 Performance Roles.Windows Servers Core Create Searches where applicable, and if the condition exceeds the threshold, Seconds Checks Services.Windows File Servers Ticket a ticket is created.

PO Box 56506, Houston, TX 77256-6506 | p: 713.403.9150 | f: 713.621.1826 | www.aldridge.com | [email protected]

All performance monitors are named after what they are Service Plans.Windows Servers. Server Default - testing. All thresholds are based on Microsoft standards, Every 60 Performance Perf - Files Open Roles.Windows Servers Core Create where applicable, and if the condition exceeds the threshold, Seconds Checks Services.Windows File Servers Ticket a ticket is created.

All performance monitors are named after what they are Service Plans.Windows Servers. Server Default - testing. All thresholds are based on Microsoft standards, Every 60 Performance Perf - Files Opened Total Roles.Windows Servers Core Create where applicable, and if the condition exceeds the threshold, Seconds Checks Services.Windows File Servers Ticket a ticket is created.

All performance monitors are named after what they are Service Plans.Windows Servers. Server Default - testing. All thresholds are based on Microsoft standards, Every 60 Performance Perf - HTTP Requests Roles.Windows Web/Proxy Servers.Windows Create where applicable, and if the condition exceeds the threshold, Seconds Checks IIS Web Servers Ticket a ticket is created.

All performance monitors are named after what they are Service Plans.Windows Servers. Server Default - Perf - Hyper V Logical testing. All thresholds are based on Microsoft standards, Every 60 Performance Roles.Windows Servers Core Create Processors where applicable, and if the condition exceeds the threshold, Seconds Checks Services.Windows HyperV Host Ticket a ticket is created.

All performance monitors are named after what they are Perf - Hyper V Machine Service Plans.Windows Servers. Server Default - testing. All thresholds are based on Microsoft standards, Every 60 Performance Health Roles.Windows Servers Core Create where applicable, and if the condition exceeds the threshold, Seconds Checks Critical Services.Windows HyperV Host Ticket a ticket is created.

All performance monitors are named after what they are Service Plans.Windows Servers. Server Default - testing. All thresholds are based on Microsoft standards, Every 60 Performance Perf - Hyper V Partitions Roles.Windows Servers Core Create where applicable, and if the condition exceeds the threshold, Seconds Checks Services.Windows HyperV Host Ticket a ticket is created.

PO Box 56506, Houston, TX 77256-6506 | p: 713.403.9150 | f: 713.621.1826 | www.aldridge.com | [email protected]

All performance monitors are named after what they are Service Plans.Windows Servers. Server Default - testing. All thresholds are based on Microsoft standards, Every 60 Performance Perf - Hyper V Total Pages Roles.Windows Servers Core Create where applicable, and if the condition exceeds the threshold, Seconds Checks Services.Windows HyperV Host Ticket a ticket is created.

All performance monitors are named after what they are Service Plans.Windows Servers. Server Default - testing. All thresholds are based on Microsoft standards, Every 60 Performance Perf - Inactive Sessions Roles.Windows Remote Access Create where applicable, and if the condition exceeds the threshold, Seconds Checks Servers.Terminal Servers Ticket a ticket is created.

All performance monitors are named after what they are Service Plans.Windows Servers. Server Default - testing. All thresholds are based on Microsoft standards, Every 60 Performance Perf - Jobs Roles.Windows Servers Core Create where applicable, and if the condition exceeds the threshold, Seconds Checks Services.Windows Print Servers Ticket a ticket is created.

Service Plans.Windows Servers. Server All performance monitors are named after what they are Roles.Windows Messaging Servers.Exchange Perf - Largest Delivery Default - testing. All thresholds are based on Microsoft standards, 2007 Servers Every 60 Performance Queue Create where applicable, and if the condition exceeds the threshold, Service Plans.Windows Servers.Server Seconds Checks Length Ticket a ticket is created. Roles.Windows Messaging Servers.Exchange 2010 Servers

All performance monitors are named after what they are Service Plans.Windows Servers. Server Default - testing. All thresholds are based on Microsoft standards, Every 60 Performance Perf - LDAP Bind Time Roles.Windows Servers Core Services.Domain Create where applicable, and if the condition exceeds the threshold, Seconds Checks Controllers Ticket a ticket is created.

All performance monitors are named after what they are Service Plans.Windows Servers. Server Default - testing. All thresholds are based on Microsoft standards, Every 60 Performance Perf - LDAP Client Sessions Roles.Windows Servers Core Services.Domain Create where applicable, and if the condition exceeds the threshold, Seconds Checks Controllers Ticket a ticket is created.

PO Box 56506, Houston, TX 77256-6506 | p: 713.403.9150 | f: 713.621.1826 | www.aldridge.com | [email protected]

Service Plans.Windows Servers. Server All performance monitors are named after what they are Roles.Windows Messaging Servers.Exchange Default - testing. All thresholds are based on Microsoft standards, 2007 Servers Every 5 Performance Perf - LDAP Read Time Create where applicable, and if the condition exceeds the threshold, Minutes Checks Service Plans.Windows Servers. Server Ticket a ticket is created. Roles.Windows Messaging Servers.Exchange 2010 Servers

Service Plans.Windows Servers. Server All performance monitors are named after what they are Roles.Windows Messaging Servers.Exchange Default - testing. All thresholds are based on Microsoft standards, 2007 Servers Every 5 Performance Perf - LDAP Search Time Create where applicable, and if the condition exceeds the threshold, Service Plans.Windows Servers. Server Minutes Checks Ticket a ticket is created. Roles.Windows Messaging Servers.Exchange 2010 Servers

All performance monitors are named after what they are Service Plans.Windows Servers. Server Default - testing. All thresholds are based on Microsoft standards, Every 60 Performance Perf - LDAP Searches / Sec Roles.Windows Servers Core Services.Domain Create where applicable, and if the condition exceeds the threshold, Seconds Checks Controllers Ticket a ticket is created.

Service Plans.Windows Servers. Server All performance monitors are named after what they are Roles.Windows Messaging Servers.Exchange Default - Perf - LDAP Searches Timed testing. All thresholds are based on Microsoft standards, 2007 Servers Every 60 Performance Create Out where applicable, and if the condition exceeds the threshold, Seconds Checks Service Plans.Windows Servers. Server Ticket a ticket is created. Roles.Windows Messaging Servers.Exchange 2010 Servers

All performance monitors are named after what they are Service Plans.Windows Servers. Server Default - testing. All thresholds are based on Microsoft standards, Every 60 Performance Perf - Local Queue Length Roles.Windows Messaging Servers.Exchange Create where applicable, and if the condition exceeds the threshold, Seconds Checks 2003 Servers Ticket a ticket is created.

Service Plans.Windows Servers. Server All performance monitors are named after what they are Roles.Windows Messaging Servers.Exchange Perf - Log Generation Default - testing. All thresholds are based on Microsoft standards, 2007 Servers Every 60 Performance Checkpoint Create where applicable, and if the condition exceeds the threshold, Seconds Checks Depth Service Plans.Windows Servers. Server Ticket a ticket is created. Roles.Windows Messaging Servers.Exchange 2010 Servers

PO Box 56506, Houston, TX 77256-6506 | p: 713.403.9150 | f: 713.621.1826 | www.aldridge.com | [email protected]

All performance monitors are named after what they are Service Plans.Windows Servers. Server Default - testing. All thresholds are based on Microsoft standards, Every 60 Performance Perf - Log Record Stalls/Sec Roles.Windows Servers Core Services.Domain Create where applicable, and if the condition exceeds the threshold, Seconds Checks Controllers Ticket a ticket is created.

All performance monitors are named after what they are Service Plans.Windows Servers. Server Default - testing. All thresholds are based on Microsoft standards, Every 60 Performance Perf - Log Threads Waiting Roles.Windows Servers Core Services.Domain Create where applicable, and if the condition exceeds the threshold, Seconds Checks Controllers Ticket a ticket is created.

Service Plans.Windows Servers. Server Roles.Windows Database Servers.MS SQL 2008 R2 Servers All performance monitors are named after what they are Service Plans.Windows Servers. Server Default - testing. All thresholds are based on Microsoft standards, Every 60 Performance Perf - Logical Connections Roles.Windows Database Servers.MS SQL Create where applicable, and if the condition exceeds the threshold, Seconds Checks 2008 Servers Ticket a ticket is created. Service Plans.Windows Servers. Server Roles.Windows Messaging Servers.Blackberry Servers

Service Plans.Windows Servers. Server All performance monitors are named after what they are Roles.Windows Messaging Servers.Exchange Perf - Long Default - testing. All thresholds are based on Microsoft standards, 2007 Servers Every 60 Performance Running LDAP Create where applicable, and if the condition exceeds the threshold, Seconds Checks Operations Service Plans.Windows Servers. Server Ticket a ticket is created. Roles.Windows Messaging Servers.Exchange 2010 Servers

Service Plans.Windows Servers. Server All performance monitors are named after what they are Roles.Windows Database Servers.MS SQL Default - testing. All thresholds are based on Microsoft standards, 2008 R2 Servers Every 60 Performance Perf - Mars Deadlocks Create where applicable, and if the condition exceeds the threshold, Seconds Checks Service Plans.Windows Servers. Server Ticket a ticket is created. Roles.Windows Database Servers.MS SQL 2008 Servers

All performance monitors are named after what they are Service Plans.Windows Servers. Default - testing. All thresholds are based on Microsoft standards, Managed 24x7 Every 90 Performance Perf - Memory Pages Sec Create where applicable, and if the condition exceeds the threshold, Service Plans.Windows Servers. Seconds Checks Ticket a ticket is created. Managed 8x5

PO Box 56506, Houston, TX 77256-6506 | p: 713.403.9150 | f: 713.621.1826 | www.aldridge.com | [email protected]

Service Plans.Windows Workstations. All performance monitors are named after what they are Managed 24x7 Default - testing. All thresholds are based on Microsoft standards, Service Plans.Windows Workstations. Every 30 Performance Perf - Memory Utilization Create where applicable, and if the condition exceeds the threshold, Managed 8x5 Minutes Checks Ticket a ticket is created. Service Plans.Windows Workstations. Managed HAAS

Service Plans.Windows Servers. Server All performance monitors are named after what they are Roles.Windows Messaging Default - Perf - Messages Queued for testing. All thresholds are based on Microsoft standards, Servers.Exchange2007 Servers Every 60 Performance Create Submission where applicable, and if the condition exceeds the threshold, Seconds Checks Service Plans.Windows Servers. Server Ticket a ticket is created. Roles.Windows Messaging Servers.Exchange 2010 Servers

Service Plans.Windows Servers. Server All performance monitors are named after what they are Roles.Windows Messaging Servers.Exchange Default - Perf - Messages Queued for testing. All thresholds are based on Microsoft standards, 2010 Servers Every 60 Performance Create Submission Public where applicable, and if the condition exceeds the threshold, Seconds Checks Service Plans.Windows Servers. Server Ticket a ticket is created. Roles.Windows Messaging Servers.Exchange 2007 Servers

Service Plans.Windows Servers. Managed24x7 Service Plans.Windows Servers. All performance monitors are named after what they are Managed 8x5 Default - testing. All thresholds are based on Microsoft standards, Every 90 Performance Perf - Network Bandwidth Service Plans.Windows Workstations. Create where applicable, and if the condition exceeds the threshold, Seconds Checks Managed 24x7 Ticket a ticket is created. Service Plans.Windows Workstations. Managed 8x5 Service Plans.Windows Workstations. Managed HAAS

Service Plans.Windows Workstations. All performance monitors are named after what they are Managed 24x7 Default - Perf - NIC Output Queue testing. All thresholds are based on Microsoft standards, Service Plans.Windows Workstations. Every 90 Performance Create Length where applicable, and if the condition exceeds the threshold, Managed 8x5 Seconds Checks Ticket a ticket is created. Service Plans.Windows Workstations. Managed HAAS

Service Plans.Windows Workstations. All performance monitors are named after what they are Managed 24x7 Default - Perf - NIC Packets Received testing. All thresholds are based on Microsoft standards, Service Plans.Windows Workstations. Every 90 Performance Create Errors where applicable, and if the condition exceeds the threshold, Managed 8x5 Seconds Checks Ticket a ticket is created. Service Plans.Windows Workstations. Managed HAAS

PO Box 56506, Houston, TX 77256-6506 | p: 713.403.9150 | f: 713.621.1826 | www.aldridge.com | [email protected]

All performance monitors are named after what they are Service Plans.Windows Servers. Server Default - testing. All thresholds are based on Microsoft standards, Every 60 Performance Perf - Not Ready Errors Roles.Windows Servers Core Create where applicable, and if the condition exceeds the threshold, Seconds Checks Services.Windows Print Servers Ticket a ticket is created.

Service Plans.Windows Servers. Server All performance monitors are named after what they are Roles.Windows Messaging Servers.Exchange Perf - OWA Average Default - testing. All thresholds are based on Microsoft standards, 2007 Servers Every 60 Performance Response Create where applicable, and if the condition exceeds the threshold, Seconds Checks Time Service Plans.Windows Servers. Server Ticket a ticket is created. Roles.Windows Messaging Servers.Exchange 2010 Servers

Service Plans.Windows Servers. Server All performance monitors are named after what they are Roles.Windows Messaging Servers.Exchange Default - Perf - OWA Average Search testing. All thresholds are based on Microsoft standards, 2007 Servers Every 60 Performance Create Time where applicable, and if the condition exceeds the threshold, Service Plans.Windows Servers. Server Seconds Checks Ticket a ticket is created. Roles.Windows Messaging Servers.Exchange 2010 Servers

Service Plans.Windows Workstations. All performance monitors are named after what they are Managed 24x7 Default - testing. All thresholds are based on Microsoft standards, Service Plans.Windows Workstations. Every 90 Performance Perf - Pages Input/Sec Create where applicable, and if the condition exceeds the threshold, Managed 8x5 Seconds Checks Ticket a ticket is created. Service Plans.Windows Workstations. Managed HAAS

Service Plans.Windows Servers. Server All performance monitors are named after what they are Roles.Windows Messaging Servers.Exchange Default - testing. All thresholds are based on Microsoft standards, 2007 Servers Every 60 Performance Perf - Poison Queue Length Create where applicable, and if the condition exceeds the threshold, Seconds Checks Service Plans.Windows Servers. Server Ticket a ticket is created. Roles.Windows Messaging Servers.Exchange 2010 Servers

All performance monitors are named after what they are Service Plans.Windows Servers. Server Default - testing. All thresholds are based on Microsoft standards, Every 60 Performance Perf - Print Job Errors Roles.Windows Servers Core Create where applicable, and if the condition exceeds the threshold, Seconds Checks Services.Windows Print Servers Ticket a ticket is created.

PO Box 56506, Houston, TX 77256-6506 | p: 713.403.9150 | f: 713.621.1826 | www.aldridge.com | [email protected]

Service Plans.Windows Servers. Server Roles.Windows Database Servers.MS SQL 2008 R2 Servers All performance monitors are named after what they are Service Plans.Windows Servers. Server Default - testing. All thresholds are based on Microsoft standards, Every 60 Performance Perf - Processes blocked Roles.Windows Database Servers.MS SQL Create where applicable, and if the condition exceeds the threshold, Seconds Checks 2008 Servers Ticket a ticket is created. Service Plans.Windows Servers. Server Roles.Windows Messaging Servers.Blackberry Servers

All performance monitors are named after what they are Service Plans.Windows Servers. Default - Perf - Processor % testing. All thresholds are based on Microsoft standards, Managed 24x7 Every 90 Performance Create Privileged Time where applicable, and if the condition exceeds the threshold, Service Plans.Windows Servers. Seconds Checks Ticket a ticket is created. Managed 8x5

All performance monitors are named after what they are Service Plans.Windows Servers. Default - Perf - Processor % User testing. All thresholds are based on Microsoft standards, Managed 24x7 Every 90 Performance Create Time where applicable, and if the condition exceeds the threshold, Service Plans.Windows Servers. Seconds Checks Ticket a ticket is created. Managed 8x5

All performance monitors are named after what they are Default - Perf - Processor Queue testing. All thresholds are based on Microsoft standards, Service Plans.Windows Workstations. Every 30 Performance Create Length where applicable, and if the condition exceeds the threshold, Managed 24x7 Minutes Checks Ticket a ticket is created.

All performance monitors are named after what they are Service Plans.Windows Workstations. Default - Perf - Processor Queue testing. All thresholds are based on Microsoft standards, Managed 8x5 Every 30 Performance Create Length where applicable, and if the condition exceeds the threshold, Service Plans.Windows Workstations. Minutes Checks Ticket a ticket is created. Managed HAAS

Service Plans.Windows Workstations. All performance monitors are named after what they are Managed 24x7 Default - testing. All thresholds are based on Microsoft standards, Service Plans.Windows Workstations. Every 90 Performance Perf - Processor Utilization Create where applicable, and if the condition exceeds the threshold, Managed 8x5 Seconds Checks Ticket a ticket is created. Service Plans.Windows Workstations. Managed HAAS

PO Box 56506, Houston, TX 77256-6506 | p: 713.403.9150 | f: 713.621.1826 | www.aldridge.com | [email protected]

All performance monitors are named after what they are Service Plans.Windows Servers. Server Default - Perf - Receive testing. All thresholds are based on Microsoft standards, Every 60 Performance Roles.Windows Messaging Servers.Exchange Create Queue Size where applicable, and if the condition exceeds the threshold, Seconds Checks 2003 Servers Ticket a ticket is created.

All performance monitors are named after what they are Service Plans.Windows Servers. Server Default - testing. All thresholds are based on Microsoft standards, Every 60 Performance Perf - Remote Queue Length Roles.Windows Messaging Servers.Exchange Create where applicable, and if the condition exceeds the threshold, Seconds Checks 2003 Servers Ticket a ticket is created.

Service Plans.Windows Servers. Server All performance monitors are named after what they are Roles.Windows Messaging Servers.Exchange Default - Perf - Retry Remote Delivery testing. All thresholds are based on Microsoft standards, 2007 Servers Every 60 Performance Create Queue Length where applicable, and if the condition exceeds the threshold, Seconds Checks Service Plans.Windows Servers. Server Ticket a ticket is created. Roles.Windows Messaging Servers.Exchange 2010 Servers

Service Plans.Windows Servers. Server All performance monitors are named after what they are Roles.Windows Messaging Servers.Exchange Default - testing. All thresholds are based on Microsoft standards, 2007 Servers Every 60 Performance Perf - RPC Average Latency Create where applicable, and if the condition exceeds the threshold, Service Plans.Windows Servers. Server Seconds Checks Ticket a ticket is created. Roles.Windows Messaging Servers.Exchange 2010 Servers

Service Plans.Windows Servers. Server All performance monitors are named after what they are Roles.Windows Messaging Servers.Exchange Default - Perf - RPC Average Latency testing. All thresholds are based on Microsoft standards, 2007 Servers Every 60 Performance Create IS where applicable, and if the condition exceeds the threshold, Seconds Checks Service Plans.Windows Servers. Server Ticket a ticket is created. Roles.Windows Messaging Servers.Exchange 2010 Servers

Service Plans.Windows Servers. Server All performance monitors are named after what they are Roles.Windows Messaging Servers.Exchange Default - Perf - RPC Average Latency testing. All thresholds are based on Microsoft standards, 2007 Servers Every 60 Performance Create MBX where applicable, and if the condition exceeds the threshold, Service Plans.Windows Servers. Server Seconds Checks Ticket a ticket is created. Roles. Windows Messaging Servers.Exchange 2010 Servers

PO Box 56506, Houston, TX 77256-6506 | p: 713.403.9150 | f: 713.621.1826 | www.aldridge.com | [email protected]

All performance monitors are named after what they are Service Plans.Windows Servers. Server Default - Perf - RPC Averaged testing. All thresholds are based on Microsoft standards, Every 60 Performance Roles.Windows Messaging Servers.Exchange Create Latency where applicable, and if the condition exceeds the threshold, Seconds Checks 2003 Servers Ticket a ticket is created.

All performance monitors are named after what they are Service Plans.Windows Servers. Server Default - testing. All thresholds are based on Microsoft standards, Every 60 Performance Perf - RPC Requests Roles.Windows Messaging Servers.Exchange Create where applicable, and if the condition exceeds the threshold, Seconds Checks 2003 Servers Ticket a ticket is created.

Service Plans.Windows Servers. Server All performance monitors are named after what they are Roles.Windows Messaging Servers.Exchange Default - testing. All thresholds are based on Microsoft standards, 2007 Servers Every 60 Performance Perf - RPC Requests CAS Create where applicable, and if the condition exceeds the threshold, Seconds Checks Service Plans.Windows Servers. Server Ticket a ticket is created. Roles.Windows Messaging Servers.Exchange 2010 Servers

Service Plans.Windows Servers. Server All performance monitors are named after what they are Roles.Windows Messaging Servers.Exchange Default - testing. All thresholds are based on Microsoft standards, 2007 Servers Every 60 Performance Perf - RPC Requests IS Create where applicable, and if the condition exceeds the threshold, Service Plans.Windows Servers. Server Seconds Checks Ticket a ticket is created. Roles.Windows Messaging Servers.Exchange 2010 Servers

Service Plans.Windows Servers. Server All performance monitors are named after what they are Roles.Windows Messaging Servers.Exchange Default - testing. All thresholds are based on Microsoft standards, 2003 Servers Every 60 Performance Perf - Send Queue Size Create where applicable, and if the condition exceeds the threshold, Service Plans.Windows Servers. Server Seconds Checks Ticket a ticket is created. Roles.Windows Messaging Servers.Exchange 2003 Servers

Service Plans.Windows Servers. Server All performance monitors are named after what they are Roles.Windows Messaging Servers.Exchange Default - Perf - Submission Queue testing. All thresholds are based on Microsoft standards, 2007 Servers Every 60 Performance Create length where applicable, and if the condition exceeds the threshold, Service Plans.Windows Servers. Server Seconds Checks Ticket a ticket is created. Roles.Windows Messaging Servers.Exchange 2010 Servers

PO Box 56506, Houston, TX 77256-6506 | p: 713.403.9150 | f: 713.621.1826 | www.aldridge.com | [email protected]

All performance monitors are named after what they are Service Plans.Windows Servers. Default - testing. All thresholds are based on Microsoft standards, Managed 24x7 Performance Perf - System Uptime Daily Create where applicable, and if the condition exceeds the threshold, Service Plans.Windows Servers. Checks Ticket a ticket is created. Managed 8x5

All performance monitors are named after what they are Service Plans.Windows Servers. Server Default - Perf - Table Open Cache testing. All thresholds are based on Microsoft standards, Every 60 Performance Roles.Windows Servers Core Services.Domain Create Hits/Sec where applicable, and if the condition exceeds the threshold, Seconds Checks Controllers Ticket a ticket is created.

All performance monitors are named after what they are Service Plans.Windows Servers. Default - Perf - Total CPU Processor testing. All thresholds are based on Microsoft standards, Managed 24x7 Every 90 Performance Create Time where applicable, and if the condition exceeds the threshold, Service Plans.Windows Servers. Seconds Checks Ticket a ticket is created. Managed 8x5

All performance monitors are named after what they are Service Plans.Windows Servers. Server Default - testing. All thresholds are based on Microsoft standards, Every 60 Performance Perf - Total Files Cached Roles.Windows Web/Proxy Servers.Windows Create where applicable, and if the condition exceeds the threshold, Seconds Checks IIS Web Servers Ticket a ticket is created.

All performance monitors are named after what they are Service Plans.Windows Servers. Server Default - testing. All thresholds are based on Microsoft standards, Every 60 Performance Perf - Total Jobs Printed Roles.Windows Servers Core Create where applicable, and if the condition exceeds the threshold, Seconds Checks Services.Windows Print Servers Ticket a ticket is created.

All performance monitors are named after what they are Service Plans.Windows Servers. Server Default - testing. All thresholds are based on Microsoft standards, Every 60 Performance Perf - Total Pages Printed Roles.Windows Servers Core Create where applicable, and if the condition exceeds the threshold, Seconds Checks Services.Windows Print Servers Ticket a ticket is created.

PO Box 56506, Houston, TX 77256-6506 | p: 713.403.9150 | f: 713.621.1826 | www.aldridge.com | [email protected]

All performance monitors are named after what they are Service Plans.Windows Servers. Server Default - testing. All thresholds are based on Microsoft standards, Every 60 Performance Perf - Total Sessions Roles.Windows Remote Access Create where applicable, and if the condition exceeds the threshold, Seconds Checks Servers.Terminal Servers Ticket a ticket is created.

Service Plans.Windows Servers. Server All performance monitors are named after what they are Roles.Windows Database Servers.MS SQL Default - testing. All thresholds are based on Microsoft standards, 2008 R2 Servers Every 60 Performance Perf - Transactions Create where applicable, and if the condition exceeds the threshold, Service Plans.Windows Servers. Server Seconds Checks Ticket a ticket is created. Roles.Windows Database Servers.MS SQL 2008 Servers

Service Plans.Windows Servers. Server All performance monitors are named after what they are Roles.Windows Messaging Servers.Exchange Default - Perf - Unreachable Queue testing. All thresholds are based on Microsoft standards, 2007 Servers Every 60 Performance Create Length where applicable, and if the condition exceeds the threshold, Service Plans.Windows Servers. Server Seconds Checks Ticket a ticket is created. Roles.Windows Messaging Servers.Exchange 2010 Servers

Service Plans.Windows Servers. Server Roles.Windows Database Servers.MS SQL 2008 R2 Servers All performance monitors are named after what they are Service Plans.Windows Servers. Server Default - testing. All thresholds are based on Microsoft standards, Every 60 Performance Perf - User Connections Roles.Windows Database Servers.MS SQL Create where applicable, and if the condition exceeds the threshold, Seconds Checks 2008 Servers Ticket a ticket is created. Service Plans.Windows Servers. Server Roles.Windows Messaging Servers.Blackberry Servers

Service Plans.Windows Servers. Server All performance monitors are named after what they are Roles.Windows Messaging Servers.Exchange Default - Perf - Version Buckets testing. All thresholds are based on Microsoft standards, 2007 Servers Every 60 Performance Create Allocated where applicable, and if the condition exceeds the threshold, Seconds Checks Service Plans.Windows Servers. Server Ticket a ticket is created. Roles.WindowsMessaging Servers.Exchange 2010 Servers

All performance monitors are named after what they are Service Plans.Windows Servers. Server Default - testing. All thresholds are based on Microsoft standards, Every 60 Performance Perf - Work Queue Length Roles.Windows Messaging Servers.Exchange Create where applicable, and if the condition exceeds the threshold, Seconds Checks 2003 Servers Ticket a ticket is created.

PO Box 56506, Houston, TX 77256-6506 | p: 713.403.9150 | f: 713.621.1826 | www.aldridge.com | [email protected]

All performance monitors are named after what they are Service Plans.Windows Servers. Server Default - testing. All thresholds are based on Microsoft standards, Every 60 Performance Perf - Worker Threads Roles.Windows Web/Proxy Servers.ISA Create where applicable, and if the condition exceeds the threshold, Seconds Checks Servers Ticket a ticket is created.

Service Monitors Table 5: Remote Monitors—Service Monitors Monitor Name Description Groups Interval Alert Report Action Category Checks to see if the ~Autofix ‘wBackupAssist’ service is running and if it isn’t, will Every 5 Action Service BAssist Service Backup Management.Backup Assist call the Monitor Restart Service script to attempt to fix Minutes Restart Monitors the issue. Service

Checks to see if the ~Autofix ‘BackupExecJobEngine’ service is running and if it Every 5 Action Service BExec Engine Backup Management.Backup Exec isn’t, will call the Monitor Restart Service script to Minutes Restart Monitors attempt to fix the issue. Service

Checks to see if the ~Autofix ‘BackupExecRPCService’ is running and if it isn’t, will Every 5 Action Service BExec Service Backup Management.Backup Exec call the Monitor Restart Service script to attempt to fix Minutes Restart Monitors the issue. Service

Checks to see if the ~Autofix ‘ShadowProtectSvc’ is running and if it isn’t, will Backup Management.Shadow Every 5 Action Service Shadow Protect Service call the Monitor Protect Minutes Restart Monitors Restart Service script to attempt to fix the issue. Service

~Autofix Checks to see if the ‘AcrSch2Svc’ service is running Backup Every Action Service SVC-AcrSch2Svc and if it isn’t, will call the Monitor Restart Service script Management.Acronis Minute Restart Monitors to attempt to fix the issue. Service

PO Box 56506, Houston, TX 77256-6506 | p: 713.403.9150 | f: 713.621.1826 | www.aldridge.com | [email protected]

~Autofix Service Plans.MAC Servers.Server Every Monitors to check if the Mac Server Action Service SVC-addressbook Roles.OS X Messaging two AddressBook service is running Restart Monitors Services.OS X Messaging -AddressBook minuts Service

~Autofix Service Plans.MAC Servers.Server Every Monitors to check if the Mac Server Apple Action Service SVC-afp Roles.OS X Core Services.OS X Core Services - two File Protocol AFP service is running Restart Monitors File Sharing - AFP minuts Service

~Autofix Checks to see if the ‘Apache2’ service’ is running Service Plans.Windows Servers.Server Every 60 Action Service SVC-Apache2 and if it isn’t, will call the Monitor Restart Service Roles.Windows Web/Proxy Servers.Windows Seconds Restart Monitors script to attempt to fix the issue. Apache Web Servers Service

~Autofix Checks to see if the ‘Apache2.2’ service’ is running Service Plans.Windows Servers.Server Every 60 Action Service SVC-Apache2.2 and if it isn’t, will call the Monitor Restart Service script Roles.Windows Web/Proxy Servers.Windows Seconds Restart Monitors to attempt to fix the issue. Apache Web Servers Service

Service Plans.Windows Servers. Managed 24x7 Service Plans.Windows Servers. ~Autofix Checks to see if the ‘avgwd’ service is running and if Managed 8x5 Every 60 Action Service SVC-avgwd it isn’t, will call the Monitor Restart Service script to Service Plans.Windows Seconds Restart Monitors attempt to fix the issue. Servers.Server Anti-Virus Only Service Service Plans.Windows Workstations. Managed 2 4x7

~Autofix Checks to see if the ‘BBAttachServer’ service is Service Plan s.Windows Servers.Server Every 60 Action Service SVC-BBAttachServer running and if it isn’t, will call the Monitor Restart Roles.Windows M essaging Servers.Blackberry Seconds Restart Monitors Service script to attempt to fix the issue. Serv ers Service

~Autofix Checks to see if the ‘Named’ service is running and if Service Plans.Windows Servers.Server Every 60 Action Service SVC-BIND it isn’t, will call the Monitor Restart Service script to Roles.Windows Servers Core Services. Seconds Restart Monitors attempt to fix the issue. Windows DNS Servers Service

~Autofix Checks to see if the ‘BlackBerry Controller’ service is Service Plans.Windows Servers.Server Every 60 Action Service SVC-BlackBerry Controller running and if it isn’t, will call the Monitor Restart Roles.Windows Messaging Servers.Blackberry Seconds Restart Monitors Service script to attempt to fix the issue. Servers Service

PO Box 56506, Houston, TX 77256-6506 | p: 713.403.9150 | f: 713.621.1826 | www.aldridge.com | [email protected]

~Autofix Checks to see if the ‘BlackBerry Dispatcher’ service is Service Plans.Windows Servers.Server Every 60 Action Service SVC-BlackBerry Dispatcher running and if it isn’t, will call the Monitor Roles.Windows Messaging Servers.Blackberry Seconds Restart Monitors Restart Service script to attempt to fix the issue. Servers Service

~Autofix Checks to see if the ‘BlackBerry Router’ service is Service Plans.Windows Servers.Server Every 60 Action Service SVC-BlackBerry Router running and if it isn’t, will call the Monitor Restart Roles.Windows Messaging Servers.Blackberry Seconds Restart Monitors Service script to attempt to fix the issue. Servers Service

~Autofix Checks to see if the ‘BlackBerry Server Alert’ Service Plans.Windows Servers. Server Every 60 Action Service SVC-BlackBerry Server Alert service is running and if it isn’t, will call the Monitor Roles.Windows Messaging Seconds Restart Monitors Restart Service script to attempt to fix the issue. Servers.Blackberry Servers Service

~Autofix Service Plans.MAC Servers.Server Every Monitors to check if the Mac Action Service SVC- Roles.OS X Messaging Services.OS X two Server Calendar service is running Restart Monitors Messaging - Calendar minutes Service

Checks to see if the ~Autofix ‘CASAD2DWebSvc’ service is running and if it isn’t, Every Action Service SVC-CASAD2DWebSvc Backup Management.CA Backup will call the Monitor Restart Service script to attempt to Minute Restart Monitors fix the issue. Service

Checks to see if the ‘Citrix ~Autofix Encryption Servicet’ service is running and if it isn’t, Service Plans.Windows Servers. Server Every 60 Action Service SVC-Citrix Encryption Service will call the Roles.Windows Remote Access Servers. Citrix Seconds Restart Monitors Monitor Restart Service script to attempt to XenApp Servers fix the issue Service

~Autofix Checks to see if the ‘Citrix Licensing’ service is Service Plans.Windows Servers. Server Every 60 Action Service SVC-Citrix Licensing running and if it isn’t, will call the Monitor Restart Roles.Windows Remote Access Servers.Citrix Seconds Restart Monitors Service script to attempt to fix the issue. XenApp Servers Service

Checks to see if the ~Autofix Service Plans.Windows Servers. Server ‘Citrix_GTLicensingProvt’ service Every 60 Action Service SVC-Citrix_GTLicensingProv Roles.Windows Remote Access Servers.Citrix is running and if it isn’t, will call the Monitor Restart Seconds Restart Monitors XenApp Servers Service script to attempt to fix the issue. Service

~Autofix Checks to see if the ‘CitrixCseEnginet’ service is Service Plans.Windows Servers.Server Every 60 Action Service SVC-CitrixCseEngine running and if it isn’t, will call the Monitor Restart Roles.Windows Remote Access Servers.Citrix Seconds Restart Monitors Service script to attempt to fix the issue. XenApp Servers Service

PO Box 56506, Houston, TX 77256-6506 | p: 713.403.9150 | f: 713.621.1826 | www.aldridge.com | [email protected]

~Autofix Checks to see if the ‘CitrixHealthMont’ service is Service Plans.Windows Servers. Server Every 60 Action Service SVC-CitrixHealthMon running and if it isn’t, will call the Monitor Restart Roles.Windows Remote Access Servers.Citrix Seconds Restart Monitors Service script to attempt to fix the issue. XenApp Servers Service

Checks to see if the ~Autofix Service Plans.Windows Servers.Server ‘ConnectWiseUpdaterServicet’ service is running and Every 5 Action Service SVC- ConnectWiseUpdaterService Roles.MSP Specific Servers.ConnectWise if it isn’t, will call the Monitor Restart Service script to Minutes Restart Monitors Server attempt to fix the issue. Service

Service Plans. WindowsWorkstations. Managed 24x7 ~Autofix Checks to see if the ‘CryptSvct’ service is running Service Plans.WindowsWorkstations. Every 5 Action Service SVC-CryptSvc and if it isn’t, will call the Monitor Restart Service Managed 8x5 Minutes Restart Monitors script to attempt to fix the issue. Service Plans. Workstations. Managed HAAS

~Autofix Service Plans.Linux Machines.Server Monitors to check if the CUPS (Common Every 60 Action Service SVC-cups Roles.Linux Services.Linux CUPS Unix Printing System) service is running. seconds Restart Monitors Print Servers Service

~Autofix Checks to see if the ‘DataCollectorSvc’ service is Service Plans.Windows Servers. Server Every 60 Action Service SVC-DataCollectorSvc running and if it isn’t, will call the Monitor Restart Roles.Windows Small Business Servers.SBS Seconds Restart Monitors Service script to attempt to fix the issue. 2008 Servers Service

Service Plans.Windows Servers. ~Autofix Checks to see if the ‘Dfs’ service is running and if it Managed 24x7 Every 60 Action Service SVC-Dfs isn’t, will call the Monitor Restart Service script to Seconds Restart Monitors attempt to fix the issue. Service Plans.Windows Servers. Managed 8x5 Service

Service Plans.Windows Servers. ~Autofix Checks to see if the ‘DFSR’ service is running and if Managed 24x7 Every 60 Action Service SVC-DFSR it isn’t, will call the Monitor Restart Service script to Service Plans.Windows Servers. Seconds Restart Monitors attempt to fix the issue. Managed 8x5 Service

Service Plans.Windows Workstations. Managed 24x7 ~Autofix Checks to see if the ‘Dhcp’ service is running and if it Service Plans.Windows Every 5 Action Service SVC-Dhcp isn’t, will call the Monitor Restart Service script to Workstations. Managed 8x5 Minutes Restart Monitors attempt to fix the issue. Service Plans.Windows Service Workstations. Managed HAAS

PO Box 56506, Houston, TX 77256-6506 | p: 713.403.9150 | f: 713.621.1826 | www.aldridge.com | [email protected]

~Autofix Service Plans.Linux Machines.Server Monitors to check if the DHCP Every 60 Action Service SVC-dhcpd Roles.Linux Server Core Services.Linux DHCP service is running seconds Restart Monitors Servers Service

~Autofix Checks to see if the ‘DHCPServer’ service is running Service Plans.Windows Servers. Server Every 60 Action Service SVC-DHCPServer and if it isn’t, will call the Monitor Restart Service script Roles.Windows Servers Core Services. Seconds Restart Monitors to attempt to fix the issue. Windows DHCP Servers Service

~Autofix Checks to see if the ‘DNS’ service is running and if it Service Plans.Windows Servers. Server Every 60 Action Service SVC-DNS isn’t, will call the Monitor Restart Service script to Roles.Windows Servers Core Services. Seconds Restart Monitors attempt to fix the issue. Windows DNS Servers Service

Service Plans.Windows Servers. Managed 24x7 Service Plans.Windows Servers. Managed 8x5 ~Autofix Checks to see if the ‘Dnscache’ service is running Service Plans.Windows Every 60 Action Service SVC-Dnscache and if it isn’t, will call the Monitor Restart Service Workstations.Managed24x7 Seconds Restart Monitors script to attempt to fix the issue. Service Plans.Windows Service Workstations. Managed 8x5 Service Plans.Windows Workstations. Managed HAAS

Checks to see if the ~Autofix Service Plans.Windows Servers. Server ‘EdgeCredentialSvc’ service is running and if it isn’t, Every 60 Action Service SVC-EdgeCredentialSvc Roles.Windows Messaging Servers.Exchange will call the Monitor Restart Service script to attempt to Seconds Restart Monitors 2007 Servers fix the issue. Service

Service Plans.Windows ~Autofix Checks to see if the ‘ekrn’ service is running and if it Servers. Managed 24x7 Every 60 Action Service SVC-ekrn isn’t, will call the Monitor Restart Service script to Service Plans.Windows Servers. Seconds Restart Monitors attempt to fix the issue. Managed 8x5 Service Plans.Windows Servers. Server Service Anti Virus Only ~Autofix Checks to see if the ‘EmailRobot’ service is running Service Plans.Windows Servers.Server Every 5 Action Service SVC-EmailRobot and if it isn’t, will call the Monitor Restart Service script Roles.MSP Specific Servers.ConnectWise Minutes Restart Monitors to attempt to fix the issue. Server Service

PO Box 56506, Houston, TX 77256-6506 | p: 713.403.9150 | f: 713.621.1826 | www.aldridge.com | [email protected]

Service Plans.Windows Servers. Managed 24x7 ~Autofix Checks to see if the ‘ERA_SERVER’ service is running Service Plans.Windows Servers. Every 60 Action Service SVC-ERA_SERVER and if it isn’t, will call the Monitor Restart Service script Managed 8x5 Seconds Restart Monitors to attempt to fix the issue. Service Plans.Windows Servers. Server Service Anti-Virus Only

Service Plans.Windows Servers. Managed 24x7 ~Autofix Checks to see if the ‘Eset_MSP_Service’ service is Service Plans.Windows Servers. Every 60 Action Service SVC-Eset_MSP_Service running and if it isn’t, will call the Monitor Restart Managed 8x5 Seconds Restart Monitors Service script to attempt to fix the issue. Service Plans.Windows Service Servers.Server Anti-Virus Only ~Autofix Service Plans.Linux Machines.Server Monitors to check if the Exim4 SMTP Every 60 Action Service SVC-exim4 Roles.Linux Messaging Services.Linux SMTP- service is running Seconds Restart Monitors Exim4 Servers Service

Service Plans.Windows Default - Checks to see if the ‘fwsrv’ service is running and if Every 60 Service SVC-FWSRV Servers.Server Roles.Windows Create it isn’t, a ticket is created. Seconds Monitors Web/Proxy Servers.ISA Servers Ticket

Service Plans.Windows Servers. Managed 24x7 Service Plans.Windows Servers. Managed 8x5 ~Autofix Checks to see if the ‘gpsvc’ service is running and if Service Plans.Windows Every 60 Action Service SVC-gpsvc it isn’t, will call the Monitor Restart Service script to Workstations. Managed 24x7 Seconds Restart Monitors attempt to fix the issue. Service Plans.Windows Service Workstations. Managed 8x5 Service Plans.Windows Workstations. Managed HAAS

~Autofix Service Plans.Linux Machines.Server Monitors to check if the httpd(apache2) Every 60 Action Service SVC-httpd Roles.Linux Web/Proxy Servers.Linux HTTP- service is running Seconds Restart Monitors Apache2 Servers Service

~Autofix Checks to see if the ‘IISAdmin’ service is running and Service Plans.Windows Servers.Server Every 60 Action Service SVC-IISADMIN if it isn’t, will call the Monitor Restart Service script to Roles.Windows Web/Proxy Servers.Windows Seconds Restart Monitors attempt to fix the issue. IIS Web Servers Service

Service Plans.Windows Servers.Server Default - Checks to see if the ‘IMAP4Svc’ service is running Roles.Windows Messaging Every 60 Service SVC-IMAP4Svc Create and if it isn’t a ticket is created. Servers.Exchange 2003 Seconds Monitors Ticket Servers

PO Box 56506, Houston, TX 77256-6506 | p: 713.403.9150 | f: 713.621.1826 | www.aldridge.com | [email protected]

~Autofix Service Plans.MAC Servers.Server Monitors to check if the Mac Server Every 2 Action Service SVC-ipfilter Roles.OS X Core Services.OS X Core Services - Firewall(ipfilter) service is running minutes Restart Monitors Firewall IPFilter Service

~Autofix Service Plans.MAC Servers.Server Monitors to check if the Mac Server Chat Every 2 Action Service SVC-jabber Roles.OS X Messaging Services.OS X (jabber) service is running minutes Restart Monitors Messaging - Chat Service

~Autofix Checks to see if the ‘kdc’ service is running and if it Service Plans.Windows Servers.Server Every 60 Action Service SVC-kdc isn’t, will call the Monitor Restart Service script to Roles.Windows Servers Core Services.Domain Seconds Restart Monitors attempt to fix the issue. Controllers Service

~Autofix Checks to see if the ‘LabMySQL’ service is running Service Plans.Windows Servers.Server Every 5 Action Service SVC-LabMySQL and if it isn’t, will call the Monitor Restart Service script Roles.MSP Specific Servers.TAC Agent Minutes Restart Monitors to attempt to fix the issue. Server Service

Checks to see if the ~Autofix Service Plans.Windows Servers.Server ‘LanmanServer’ service is running and if it isn’t, will Every 60 Action Service SVC-LanmanServer Roles.Windows Servers Core Services.Domain call the Monitor Restart Service script to attempt to fix Seconds Restart Monitors Controllers the issue. Service

~Autofix Checks to see if the ‘LTAgent’ service is running and Service Plans.Windows Servers.Server Every 5 Action Service SVC-LTAgent if it isn’t, will call the Monitor Restart Service script to Roles.MSP Specific Servers.TAC Agent Minutes Restart Monitors attempt to fix the issue. Server Service

~Autofix Checks to see if the ‘LTRedirSvc’ service is running Service Plans.Windows Servers.Server Every 5 Action Service SVC-LTRedirSvc and if it isn’t, will call the Monitor Restart Service script Roles.MSP Specific Servers.TAC Agent Minutes Restart Monitors to attempt to fix the issue. Server Service

~Autofix Service Plans.MAC Servers.Server Monitors to check if the Mac Every 2 Action Service SVC- Roles.OS X Messaging Services.OS X Server Mail service is running. minutes Restart Monitors Messaging - Mail Service

Service Plans.Windows Servers. Server Roles.Windows Database Servers.MS SQL ~Autofix Checks to see if the ‘MsDtsServer100’ service is 2008 R2 Servers Every 60 Action Service SVC-MsDtsServer100 running and if it isn’t, will call the Monitor Restart Service Plans.Windows Servers. Server Seconds Restart Monitors Service script to attempt to fix the issue. Roles.Windows Database Servers.MS SQL Service 2008 Servers

PO Box 56506, Houston, TX 77256-6506 | p: 713.403.9150 | f: 713.621.1826 | www.aldridge.com | [email protected]

~Autofix Checks to see if the ‘MSExchangeAB’ service is Service Plans.Windows Servers. Server Every 60 Action Service SVC-MSExchangeAB running and if it isn’t, will call the Monitor Restart Roles.Windows Messaging Servers.Exchange Seconds Restart Monitors Service script to attempt to fix the issue. 2010 Servers Service

Service Plans.Windows Servers. Server Roles.Windows Messaging Servers.Exchange ~Autofix Checks to see if the ‘MSExchangeADAM’ service is 2007 Servers Every 60 Action Service SVC-MSExchangeADAM running and if it isn’t, will call the Monitor Restart Seconds Restart Monitors Service script to attempt to fix the issue. Service Plans.Windows Servers. Server Roles.Windows Messaging Servers.Exchange Service 2010 Servers Service Plans.Windows Servers. Server Checks to see if the Roles.Windows Messaging Servers.Exchange ~Autofix ‘MSExchangeADTopology’ service is running and if it 2007 Servers Every 60 Action Service SVC-MSExchangeADTopology isn’t, will call the Monitor Restart Service script to Service Plans.Windows Servers. Server Seconds Restart Monitors attempt to fix the issue. Roles.Windows Messaging Servers.Exchange Service 2010 Servers

~Autofix Checks to see if the Service Plans.Windows Servers. Server Every 60 Action Service SVC- MSExchangeAntispamUpdate ‘MSExchangeAntispamUpdate’ Roles.Windows Seconds Restart Monitors service is running and if it isn’t, will Service

Messaging Servers. Exchange 2007 Servers call the Monitor Restart Service script to Service Plans.Windows Servers. Server attempt to fix the issue. Roles.Windows Messaging Servers.Exchange 2010 Servers

Checks to see if the ~Autofix Service Plans.Windows Servers. Server ‘MSExchangeEdgeCred’ service is running and if it Every 60 Action Service SVC-MSExchangeEdgeCred Roles.Windows Messaging Servers.Exchange isn’t, will call the Monitor Restart Service script to Seconds Restart Monitors 2010 Servers attempt to fix the issue. Service

Service Plans.Windows Servers. Server Checks to see if the Roles.Windows Messaging Servers.Exchange ~Autofix ‘MSExchangeEdgeSync’ service is running and if it 2007 Servers Every 60 Action Service SVC-MSExchangeEdgeSync isn’t, will call the Monitor Restart Service script to Service Plans.Windows Servers. Server Seconds Restart Monitors attempt to fix the issue. Roles.Windows Messaging Servers.Exchange Service 2010 Servers

Checks to see if the ~Autofix Service Plans.Windows Servers. Server ‘MSExchangeFBA’ service is running and if it isn’t, will Every 60 Action Service SVC-MSExchangeFBA Roles.Windows Messaging Servers.Exchange call the Monitor Restart Service script to attempt to fix Seconds Restart Monitors 2010 Servers the issue. Service

PO Box 56506, Houston, TX 77256-6506 | p: 713.403.9150 | f: 713.621.1826 | www.aldridge.com | [email protected]

Service Plans.Windows Servers. Server Checks to see if the Roles.Windows Messaging Servers.Exchange ~Autofix ‘MSExchangeFDS’ service is running and if it isn’t, will 2007 Servers Every 60 Action Service SVC-MSExchangeFDS call the Monitor Restart Service script to attempt to fix Service Plans.Windows Servers. Server Seconds Restart Monitors the issue. Roles.Windows Messaging Servers.Exchange Service 2010 Servers Service Plans.Windows Servers. Server Checks to see if the Roles.Windows Messaging Servers.Exchange ~Autofix ‘MSExchangeIMAP4’ service is running and if it 2007 Servers Every 60 Action Service SVC-MSExchangeIMAP4 isn’t, will call the Monitor Restart Service script to Service Plans.Windows Servers. Server Seconds Restart Monitors attempt to fix the issue. Roles.Windows Messaging Servers.Exchange Service 2010 Servers Service Plans.Windows Servers. Server Roles.Windows Messaging Servers.Exchange Default - Checks to see if the ‘MSExchangeIS’ service is 2003 Servers Every 60 Service SVC-MSExchangeIS Create running and if it isn’t, a ticket is created.. Service Plans.Windows Servers. Server Seconds Monitors Roles.Windows Messaging Servers. Exchange Ticket 2007 Servers S i Pl Wi d S S Service Plans.Windows Servers. Server

Checks to see if the Roles.Windows Messaging Servers.Exchange ~Autofix SVC- ‘MSExchangeMailboxAssistants’ service is running 2007 Servers Every 60 Action Service MSExchangeMailboxAssistants and if it isn’t, will call the Monitor Restart Service script Service Plans.Windows Servers. Server Seconds Restart Monitors to attempt to fix the issue. Roles.Windows Messaging Servers.Exchange Service 2010 Servers

Checks to see if the ~Autofix Service Plans.Windows Servers. Server SVC- ‘MSExchangeMailboxReplication’ Every 60 Action Service Roles.Windows Messaging Servers.Exchange MSExchangeMailboxReplication service is running and if it isn’t, will call the Monitor Seconds Restart Monitors 2010 Servers Restart Service script to attempt to fix the issue. Service

Service Plans.Windows Servers. Server Checks to see if the Roles.Windows Messaging Servers.Exchange ~Autofix ‘MSExchangeMailSubmission’ service is running and 2007 Servers Every 60 Action Service SVC- MSExchangeMailSubmission if it isn’t, will call the Monitor Restart Service script to Service Plans.Windows Servers. Server Seconds Restart Monitors attempt to fix the issue. Roles.Windows Messaging Servers.Exchange Service 2010 Servers

Checks to see if the ‘MSExchangeMGMT’ service is Service Plans.Windows Servers. Server Default - Every 60 Service SVC-MSExchangeMGMT running and if it isn’t, will call the Monitor Restart Roles.Windows Messaging Servers.Exchange Create Seconds Monitors Service script to attempt to fix the issue. 2003 Servers Ticket

Checks to see if the ‘MSExchangeMTA’ service is Service Plans.Windows Servers. Server Default - Every 60 Service SVC-MSExchangeMTA running and if it isn’t, will call the Monitor Restart Roles.Windows Messaging Servers.Exchange Create Seconds Monitors Service script to attempt to fix the issue. 2003 Servers Ticket

PO Box 56506, Houston, TX 77256-6506 | p: 713.403.9150 | f: 713.621.1826 | www.aldridge.com | [email protected]

Service Plans.Windows Servers. Server Checks to see if the ‘MSExchangePOP3’ service is Roles.Windows Messaging Servers.Exchange ~Autofix running and if it isn’t, will call the Monitor Restart 2007 Servers Every 60 Action Service SVC-MSExchangePOP3 Service script to Service Plans.Windows Servers. Server Seconds Restart Monitors attempt to fix the issue. Roles.Windows Messaging Servers.Exchange Service 2010 Servers

Checks to see if the ~Autofix Service Plans.Windows Servers. Server SVC- ‘MSExchangeProtecedServiceHost”service is running Every 60 Action Service Roles.Windows Messaging Servers.Exchange MSExchangeProtectedServiceHo st and if it isn’t, will call the Monitor Restart Service script Seconds Restart Monitors 2010 Servers to attempt to fix the issue. Service

Service Plans.Windows Servers. Server Roles.Windows Messaging Servers.Exchange ~Autofix Checks to see if the ‘MSExchangeRepl’ service is 2007 Servers Every 60 Action Service SVC-MSExchangeRepl running and if it isn’t, will call the Monitor Restart Service Plans.Windows Servers. Server Seconds Restart Monitors Service script to attempt to fix the issue. Roles.Windows MessagingServers. Exchange Service 2010 Servers

~Autofix Checks to see if the ‘MSExchangeRPC’ service is Service Plans.Windows Servers. Server Every 60 Action Service SVC-MSExchangeRPC running and if it isn’t, will call the Monitor Restart Roles.Windows Messaging Servers.Exchange Seconds Restart Monitors Service script to attempt to fix the issue. 2010 Servers Service

Service Plans.Windows Servers. Server Roles.Windows Messaging Servers.Exchange Default - Checks to see if the ‘MSExchangeSA’ service is 2003 Servers Every 60 Service SVC-MSExchangeSA Create running and if it isn’t, a ticket is created. Service Plans.Windows Servers. Server Seconds Monitors Ticket Roles.Windows Messaging Servers.Exchange 2007 Servers Service Plans.Windows Servers. Server

Checks to see if the Roles.Windows Messaging Servers.Exchange ~Autofix

‘MSExchangeSearch’ service is running and if it 2007 Servers Every 60 Action Service SVC-MSExchangeSearch isn’t, will call the Monitor Restart Service script to Service Plans.Windows Servers. Server Seconds Restart Monitors attempt to fix the issue. Roles.Windows Messaging Servers.Exchange Service 2010 Servers Service Plans.Windows Servers. Server Checks to see if the Roles.Windows Messaging Servers.Exchange ~Autofix ‘MSExchangeServiceHost’ service is running and if it 2007 Servers Every 60 Action Service SVC-MSExchangeServiceHost isn’t, will call the Monitor Restart Service script to Service Plans.Windows Servers. Server Seconds Restart Monitors attempt to fix the issue. Roles.Windows Messaging Servers.Exchange Service 2010 Servers

Checks to see if the ~Autofix Service Plans.Windows Servers. Server ‘MSExchangeThrottling’ service is running and if it Every 60 Action Service SVC-MSExchangeThrottling Roles.Windows Messaging Servers.Exchange isn’t, will call the Monitor Restart Service script to Seconds Restart Monitors 2010 Servers attempt to fix the issue. Service

PO Box 56506, Houston, TX 77256-6506 | p: 713.403.9150 | f: 713.621.1826 | www.aldridge.com | [email protected]

Service Plans.Windows Servers. Server Checks to see if the Roles.Windows Messaging Servers.Exchange ~Autofix ‘MSExchangeTransport’ service is running and if it 2007 Servers Every 60 Action Service SVC-MSExchangeTransport isn’t, will call the Monitor Restart Service script to Service Plans.Windows Servers. Server Seconds Restart Monitors attempt to fix the issue. Roles.Windows Messaging Servers.Exchange Service 2010 Servers

Service Plans.Windows Servers. Server Checks to see if the Roles.Windows Messaging Servers.Exchange ~Autofix SVC- ‘MSExchangeTransportLogSearch’ 2007 Servers Every 60 Action Service MSExchangeTransportLogSearch service is running and if it isn’t, will call the Monitor Service Plans.Windows Servers. Server Seconds Restart Monitors Restart Service script to attempt to fix the issue. Roles.Windows Messaging Servers.Exchange Service 2010 Servers Service Plans.Windows Servers. Server Roles.Windows Messaging Servers.Exchange ~Autofix Checks to see if the ‘MSExchangeUM’ service is 2007 Servers Every 60 Action Service SVC-MSExchangeUM running and if it isn’t, will call the Monitor Restart Service Plans.Windows Servers. Server Seconds Restart Monitors Service script to attempt to fix the issue. Roles.Windows Messaging Servers.Exchange Service 2010 Servers Service Plans.Windows Servers. Managed 24x7 Service Plans.Windows Servers. Managed 8x5 Service Plans.Windows Servers. Server Anti-Virus Only ~Autofix Checks to see if the ‘MsMpSvc’ service is running Service Plans.Windows Every 60 Action Service SVC-MsMpSvc and if it isn’t, will call the Monitor Restart Service Workstations. Managed 24x7 Seconds Restart Monitors script to attempt to fix the issue. Service Plans.Windows Service Workstations. Managed 8x5 Service Plans.Windows Workstations. Managed HAAS Service Plans.Windows Workstations. Workstation Anti-Virus Only

Service Plans.Windows Servers. ~Autofix Checks to see if the ‘MSMQ’ service is running and if Managed 24x7 Every 60 Action Service SVC-MSMQ it isn’t, will call the Monitor Restart Service script to Service Plans.Windows Servers. Seconds Restart Monitors attempt to fix the issue. Managed 8x5 Service

Service Plans.Windows Servers. Server Checks to see if the Roles.Windows Messaging Servers.Exchange ~Autofix ‘MSSpeechService’ service is running and if it isn’t, 2007 Servers Every 60 Action Service SVC-MSSpeechService will call the Monitor Restart Service script to attempt Service Plans.Windows Servers. Server Seconds Restart Monitors to fix the issue. Roles.Windows Messaging Servers. Exchange Service 2010 Servers

PO Box 56506, Houston, TX 77256-6506 | p: 713.403.9150 | f: 713.621.1826 | www.aldridge.com | [email protected]

Service Plans.Windows Servers. Server Roles.Windows Database Servers.MS SQL 2005 Servers ~Autofix Checks to see if the ‘MSSQLSERVER’ service is Service Plans.Windows Servers. Server Every 60 Action Service SVC-MSSQLSERVER running and if it isn’t, will call the Monitor Restart Roles.Windows Database Servers.MS SQL Seconds Restart Monitors Service script to attempt to fix the issue. 2008 R2 Servers Service Service Plans.Windows Servers. Server Roles.Windows Database Servers.MS SQL 2008 Servers

Service Plans.Windows Servers. Server Checks to see if the Roles.Windows Database Servers.MS SQL ~Autofix ‘MSSQLServerOLAPService’ service is running and 2008 R2 Servers Every 60 Action Service SVC-MSSQLServerOLAPService if it isn’t, will call the Monitor Restart Service script to Service Plans.Windows Servers.Server Seconds Restart Monitors attempt to fix the issue. Roles.Windows Database Servers.MS SQL 2008 Service Servers

~Autofix Checks to see if the ‘MySQL’ service is running and Service Plans.Windows Servers. Server Every 60 Action Service SVC-MySQL if it isn’t, will call the Monitor Restart Service script to Roles.Windows Database Servers.Windows Seconds Restart Monitors attempt to fix the issue. MYSQL Servers Service

~Autofix Service Plans.Linux Machines.Server Monitors to check if the Mysqld database service is Every 60 Action Service SVC-mysqld Roles.Linux Database Services.Linux MySQL running Seconds Restart Monitors Servers Service

~Autofix Checks to see if the ‘MySQL55’ service is running Service Plans.Windows Servers. Server Every 60 Action Service SVC-MySQL55 and if it isn’t, will call the Monitor Restart Service Roles.Windows Database Servers.Windows Seconds Restart Monitors script to attempt to fix the issue. MYSQL Servers Service

~Autofix Service Plans.Linux Machines.Server Monitors to check if the Bind(named) Every 60 Action Service SVC-named Roles.Linux Server Core Services.Linux DNS-Bind service is running Seconds Restart Monitors Servers Service

Service Plans.Windows Workstations. Managed 24x7 ~Autofix Checks to see if the ‘Netman’ service is running and Service Plans.Windows Every 5 Action Service SVC-Netman if it isn’t, will call the Monitor Restart Service script to Workstations. Managed 8x5 Minutes Restart Monitors attempt to fix the issue. Service Plans.Windows Service Workstations. Managed HAAS

PO Box 56506, Houston, TX 77256-6506 | p: 713.403.9150 | f: 713.621.1826 | www.aldridge.com | [email protected]

~Autofix Service Plans.MAC Servers.Server Every Monitors to check if the Mac Server NFS (network Action Service SVC-nfs Roles.OS X Core Services.OS X Core Services - two ) is running Restart Monitors File Sharing - NFS minutes Service

~Autofix Service Plans.MAC Servers.Server Every Monitors to check if the Mac Server Action Service SVC-notification Roles.OS X Messaging Services.OS X two Notification service is running. Restart Monitors Messaging - Mail -Notification minutes Service

~Autofix Checks to see if the ‘NTDS’ Service Plans.Windows Servers. Server Every 60 Action Service SVC-NTDS service is running and if it isn’t, will call the Monitor Roles.Windows Servers Core Services. Seconds Restart Monitors Restart Service script to attempt to fix the issue. Domain Controllers Service

Service Plans.Windows Servers. ~Autofix Checks to see if the ‘NtFrs’ service is running and if it Managed 24x7 Every 60 Action Service SVC-NtFrs isn’t, will call the Monitor Restart Service script to Service Plans.Windows Servers. Seconds Restart Monitors attempt to fix the issue. Managed 8x5 Service

~Autofix Service Plans.Linux Machines.Server Monitors to check if the NTP(Network Time Every 60 Action Service SVC-ntpd Roles.Linux Server Core Services.Linux NTP Protocol) service is running. Seconds Restart Monitors Servers Service

~Autofix Checks to see if the ‘nvspwmi’ service is running and Service Plans.Windows Servers. Server Every 60 Action Service SVC-nvspwmi if it isn’t, will call the Monitor Restart Service script to Roles.Windows Servers Core Seconds Restart Monitors attempt to fix the issue Services.Windows HyperV Host Service

Service Plans.Windows Workstations. Managed 24x7 ~Autofix Checks to see if the ‘PlugPlay’ service is running and Service Plans.Windows Every 5 Action Service SVC-PlugPlay if it isn’t, will call the Monitor Restart Service script to Workstations. Managed 8x5 Minutes Restart Monitors attempt to fix the issue. Service Plans.Windows Service Workstations. Managed HAAS

Service Plans.Windows Servers. Server Default - Checks to see if the ‘POP3Svc’ service is running Every 60 Service SVC-POP3Svc Roles.Windows Messaging Servers.Exchange Create and if it isn’t, a ticket is created. Seconds Monitors 2003 Servers Ticket

PO Box 56506, Houston, TX 77256-6506 | p: 713.403.9150 | f: 713.621.1826 | www.aldridge.com | [email protected]

Service Plans.Windows Servers. Managed 24x7 ~Autofix Checks to see if the ‘ProfSvc’ service is running and Service Plans.Windows Servers. Every 60 Action Service SVC-ProfSvc if it isn’t, will call the Monitor Restart Service script to Managed 8x5 Seconds Restart Monitors attempt to fix the issue. Service Plans.Windows Service Workstations. Managed 24x7

Service Plans.Windows ~Autofix Checks to see if the ‘ProfSvc’ service is running and Workstations. Managed 8x5 Every 5 Action Service SVC-ProfSvc if it isn’t, will call the Monitor Restart Service script to Service Plans.Windows Minutes Restart Monitors attempt to fix the issue. Workstations. Managed HAAS Service

~Autofix Service Plans.Linux Machines.Server Monitors to check if the Postfix Every 60 Action Service SVC-postfix Roles.Linux Messaging Services.Linux SMTP- SMTP service is running seconds Restart Monitors Postfix Servers Service

~Autofix Service Plans.Linux Machines.Server Monitors to check if the Postgresql database Every 60 Action Service SVC –postgresql Roles.Linux Database Services.Linux PostgreSQL service is running seconds Restart Monitors Servers Service

~Autofix Service Plans.Linux Machines.Server Monitors to check if the Every 60 Action Service SVC – radius Roles.Linux Server Core Services.Linux FreeRadius service is running seconds Restart Monitors FreeRadius Servers Service

~Autofix Checks to see if the ‘Reply XML Command’ service is Every 5 Action Service SVC - Replay XML running and if it isn’t, will call the Monitor Restart Backup Management.AppAssure Minutes Restart Monitors Service script to attempt to fix the issue. Service

~Autofix Checks to see if the ‘Reply Agent64’ service’ is running Every 5 Action Service SVC - ReplayAgent64 and if it isn’t, will call the Monitor Restart Service script Backup Management.AppAssure Minutes Restart Monitors to attempt to fix the issue. Service

~Autofix Checks to see if the ‘ReplyServer64’ service is running Every 5 Action Service SVC - ReplayServer64 and if it isn’t, will call the Monitor Restart Service script Backup Management.AppAssure Minutes Restart Monitors to attempt to fix the issue. Service

PO Box 56506, Houston, TX 77256-6506 | p: 713.403.9150 | f: 713.621.1826 | www.aldridge.com | [email protected]

~Autofix Checks to see if the ‘ReportServer’ service is running Service Plans.Windows Servers. Server Every 60 Action Service SVC-ReportServer and if it isn’t, will call the Monitor Restart Service script Roles.Windows Database Servers.MS SQL Seconds Restart Monitors to attempt to fix the issue. 2008 R2 Servers Service

Service Plans.Windows Servers. Server Default - Checks to see if the ‘RESvc’ service is running and Every 60 Service SVC-RESvc Roles.Windows Messaging Servers.Exchange Create if it isn’t, a ticket is created. Seconds Monitors 2003 Servers Ticket

~Autofix Checks to see if the ‘RpcSs’ service is running and if Service Plans.Windows Servers. Server Every 60 Action Service SVC-RpcSs it isn’t, will call the Monitor Restart Service script to Roles.Windows Servers Core Services. Seconds Restart Monitors attempt to fix the issue. Domain Controllers Service

Service Plans.Windows Servers. Managed 24x7 Service Plans.Windows Servers. Managed 8x5 ~Autofix Checks to see if the ‘SamSs’ service is running and if Service Plans.Windows Every 60 Action Service SVC-SamSs it isn’t, will call the Monitor Restart Service script to Workstations. Managed 24x7 Seconds Restart Monitors attempt to fix the issue. Service Plans. Windows Service Workstations. Managed 8x5 Service Plans.WindowsWorkstations. Managed HAAS Service Plans.WindowsServers. Managed 24x7 ~Autofix Checks to see if the ‘SBAMSvc’ service is running Service Plans.WindowsServers. Every 60 Action Service SVC-SBAMSvc and if it isn’t, will call the Monitor Restart Service Managed 8x5 Seconds Restart Monitors script to attempt to fix the issue. Service Plans.Windows Service Servers.Server Anti-Virus Only S i Pl Wi d W k t ti ~Autofix Checks to see if the ‘SBCore’ service is running and Service Plans.Windows Servers. Server Every 60 Action Service SVC-SBCore if it isn’t, will call the Monitor Restart Service script to Roles.Windows Small Business Servers.SBS Seconds Restart Monitors attempt to fix the issue. 2003 Servers Service

Service Plans.Windows Servers. Server An ti-virus only ~Autofix Monitors to check if the Symantec Endpoint Service Plans.Windows Servers. Every 60 Action Antivirus SVC-semsrv Protection Management service is running. Managed 24x7 seconds Restart Checks Service Plans.Windows Servers. Service Managed 8x5

PO Box 56506, Houston, TX 77256-6506 | p: 713.403.9150 | f: 713.621.1826 | www.aldridge.com | [email protected]

Service Plans.Windows Servers. Server Anti-virus only Service Plans.Windows Servers. ~Autofix Monitors to check if the Symantec Endpoint Managed 24x7 Every 60 Action Antivirus SVC-SepMasterService Protection service is running Service Plans.WindowsServers. seconds Restart Checks Managed 8x5 Service Service Plans.Windows Workstations. Workstation Anti-Virus Only Service Plans.WindowsWorkstations. Managed 24x7 Service Plans.WindowsWorkstations .Managed 8x5 Service Plans.Windows Workstations. Managed HAAS

~Autofix Service Plans.MAC Servers.Server Monitors to check if the Mac Every 2 Action Service SVC-smb Roles.OS X Core Services.OS X Core Services - Server SMB/Windows File Sharing service is running minutes Restart Monitors File Sharing - SMB/Windows Service

Checks to see if the ‘SMTPSVC’ service is running Service Plans.Windows Servers. Server Default - Every 60 Service SVC-SMTPSVC and if it isn’t, will call the Monitor Restart Service script Roles.Windows Messaging Servers.Exchange Create Seconds Monitors to attempt to fix the issue. 2003 Servers Ticket

Service Plans.Windows Servers. Server Roles.Windows Web/Proxy Servers. SharePoint Foundation 2010 Servers ~Autofix Checks to see if the ‘SPAdminV4’ service is running Service Plans.Windows Servers. Server Every 60 Action Service SVC-SPAdminV4 and if it isn’t, will call the Monitor Restart Service script Roles. Windows Web/Proxy Servers. SharePoint Seconds Restart Monitors to attempt to fix the issue. Server 2007 (MOSS) Server Service Service Plans.Windows Servers. Server Roles.Windows Web/Proxy Servers. SharePoint Server 2010 Servers

Service Plans.Windows Servers. Server Roles.Windows Servers Core Services. Windows Print Servers ~Autofix Checks to see if the ‘Spooler’ service is running and Service Plans.Windows Every 60 Action Service SVC-Spooler if it isn’t, will call the Monitor Restart Service script to Workstations. Managed 24x7 Seconds Restart Monitors attempt to fix the issue. Service Plans.WindowsWorkstations. Service Managed 8x5 Service Plans.Windows Workstations. Managed HAAS

PO Box 56506, Houston, TX 77256-6506 | p: 713.403.9150 | f: 713.621.1826 | www.aldridge.com | [email protected]

Service Plans.Windows Servers. Server ~Autofix Checks to see if the ‘SPTimerV3’ service is running Roles.Windows Web/Proxy Servers. Every 60 Action Service SVC-SPTimerV3 and if it isn’t, will call the Monitor Restart Service script SharePoint Services WSS v3 Seconds Restart Monitors to attempt to fix the issue. Servers Service

Service Plans.Windows Servers. Server Roles.Windows Web/Proxy Servers. SharePoint Foundation 2010 Servers ~Autofix Checks to see if the ‘SPTimerV4’ service is running Service Plans.Windows Servers. Server Every 60 Action Service SVC-SPTimerV4 and if it isn’t, will call the Monitor Restart Service script Roles.Windows Web/Proxy Servers. SharePoint Seconds Restart Monitors to attempt to fix the issue. Server 2007 (MOSS) Server Service Service Plans.Windows Servers. Server Roles.Windows Web/Proxy Servers. SharePoint Server 2010 Servers

Service Plans.Windows Servers. Server Roles.Windows Web/Proxy Servers. SharePoint Services WSS v3 Servers ~Autofix Checks to see if the ‘SPTrace’ service is running and Service Plans.WindowsServers. ServerRoles. Every 60 Action Service SVC-SPTrace if it isn’t, will call the Monitor Restart Service script to Windows Web/Proxy Servers. SharePoint Server Seconds Restart Monitors attempt to fix the issue. 2007 (MOSS) Server Service Service Plans.Windows Servers. Server Roles.WindowsWeb/Proxy Servers. SharePoint Server 2010 Servers

Service Plans.Windows Servers. Server ~Autofix Checks to see if the ‘SPTraceV4’ service is running Roles.Windows Web/Proxy Servers. Every 60 Action Service SVC-SPTraceV4 and if it isn’t, will call the Monitor Restart Service script SharePoint Foundation 2010 Seconds Restart Monitors to attempt to fix the issue. Servers Service

Service Plans.Windows Servers. Server ~Autofix Checks to see if the ‘SPWriter’ service is running and Roles.Windows Web/Proxy Servers. Every 60 Action Service SVC-SPWriter if it isn’t, will call the Monitor Restart Service script to SharePoint Services WSS v3 Seconds Restart Monitors attempt to fix the issue. Servers Service

Service Plans.Windows Servers. Server ~Autofix Checks to see if the ‘SPWriterV4’ service is running Roles.Windows Web/Proxy Servers. Every 60 Action Service SVC-SPWriterV4 and if it isn’t, will call the Monitor Restart Service script SharePoint Foundation 2010 Seconds Restart Monitors to attempt to fix the issue. Servers Service

~Autofix Service Plans.Linux Machines.Server Monitors to check if the Secure Shell Every 60 Action Service SVC-sshd Roles.Linux Server Core Services.Linux SSH (SSH) service is running Seconds Restart Monitors Servers Service

PO Box 56506, Houston, TX 77256-6506 | p: 713.403.9150 | f: 713.621.1826 | www.aldridge.com | [email protected]

Service Plans.Windows Servers. Server Roles.Windows Database Servers.MS SQL 2005 Servers ~Autofix Checks to see if the ‘SQLBrowser’ service is running Service Plans.Windows Servers. Server Every 60 Action Service SVC-SQLBrowser and if it isn’t, will call the Monitor Restart Service script Roles.Windows Database Servers.MS SQL Seconds Restart Monitors to attempt to fix the issue. 2008 R2 Servers Service Service Plans.Windows Servers. Server Roles.Windows Database Servers. MS SQL 2008 Servers

Service Plans.Windows Servers. Server Roles.Windows Database Servers.MS SQL 2005 Servers ~Autofix Checks to see if the ‘SQLWriter’ service is running Service Plans.Windows Servers. Server Every 60 Action Service SVC-SQLWriter and if it isn’t, will call the Monitor Restart Service Roles.Windows Database Servers.MS SQL Seconds Restart Monitors script to attempt to fix the issue. 2008 R2 Servers Service Service Plans.Windows Servers. Server Roles.Windows Database Servers.MS SQL 2008 Servers

~Autofix Service Plans.Linux Machines.Server Monitors to check if the tomcat6 Every 60 Action Service SVC-tomcat6 Roles.Linux Server Core Services.Linux SSH Java Servlet Engine service is running Seconds Restart Monitors Servers Service

~Autofix Checks to see if the ‘TSGateway’ service is running Service Plans.Windows Servers. Server Every 60 Action Service SVC-TSGateway and if it isn’t, will call the Monitor Restart Service script Roles.Windows Remote Access Servers. Seconds Restart Monitors to attempt to fix the issue. Terminal Server Gateway Service

~Autofix Checks to see if the ‘vhdsvc’ service is running and if Service Plans.Windows Servers. Server Every 60 Action Service SVC-vhdsvc it isn’t, will call the Monitor Restart Service script to Roles.Windows Servers Core Services. Seconds Restart Monitors attempt to fix the issue. Windows HyperV Host Service

Service Plans.Windows Servers. ~Autofix Checks to see if the ‘vmicheartbeat’ service is running Managed 24x7 Every 60 Action Service SVC-vmicheartbeat and if it isn’t, will call the Monitor Restart Service script Service Plans.Windows Servers. Seconds Restart Monitors to attempt tofix the issue. Managed 8x5 Service

Service Plans.Windows Servers. ~Autofix Checks to see if the ‘vmickvpexchange’ service is Managed 24x7 Every 60 Action Service SVC-vmickvpexchange running and if it isn’t, will call the Monitor Restart Service Plans.Windows Servers. Seconds Restart Monitors Service script to attempt to fix the issue. Managed 8x5 Service

PO Box 56506, Houston, TX 77256-6506 | p: 713.403.9150 | f: 713.621.1826 | www.aldridge.com | [email protected]

Service Plans.Windows Servers. ~Autofix Checks to see if the ‘vmicshutdown’ service is running Managed 24x7 Every 60 Action Service SVC-vmicshutdown and if it isn’t, will call the Monitor Restart Service script Service Plans.Windows Servers. Seconds Restart Monitors to attempt to fix the issue. Managed 8x5 Service

Service Plans.Windows Servers. ~Autofix Checks to see if the ‘vmictimesync’ service is running Managed 24x7 Every 60 Action Service SVC-vmictimesync and if it isn’t, will call the Monitor Restart Service script Service Plans.Windows Servers. Seconds Restart Monitors to attempt to fix the issue. Managed 8x5 Service

Service Plans. Windows Servers. ~Autofix Checks to see if the ‘vmicvss’ service is running and Managed 24x7 Every 60 Action Service SVC-vmicvss if it isn’t, will call the Monitor Restart Service script to Seconds Restart Monitors attempt to fix the issue. Service Plans. Windows Servers. Managed 8x5 Service

~Autofix Checks to see if the ‘vmms’ service is running and if Service Plans.Windows Servers. Server Every 60 Action Service SVC-vmms it isn’t, will call the Monitor Restart Service script to Roles. Windows Servers Core Services. Seconds Restart Monitors attempt to fix the issue. Windows HyperV Host Service

~Autofix Service Plans.MAC Servers.Server Monitors to check if the Mac Every 2 Action Service SVC-vpn Roles.OS X Core Services.OS X Core Services - Server VPN service is running minutes Restart Monitors VPN Service

~Autofix Service Plans.Linux Machines.Server Monitors to check if the file transfer service Every 60 Action Service SVC-vsftpd Roles.Linux Server Core Services.Linux FTP- (vsftpd) is running Seconds Restart Monitors vsftpd Servers Service

~Autofix Checks to see if the ‘W32Time’ service is running Service Plans.Windows Servers. Server Every 60 Action Service SVC-W32Time and if it isn’t, will call the Monitor Restart Service Roles.Windows Servers Core Services. Seconds Restart Monitors script to attempt to fix the issue. Domain Controllers Service

~Autofix Checks to see if the ‘W3SVC’ service is running and Service Plans.Windows Servers. Server Every 60 Action Service SVC-W3SVC if it isn’t, will call the Monitor Restart Service script to Roles.Windows Web/Proxy Servers.Windows Seconds Restart Monitors attempt to fix the issue. IIS Web Servers Service

~Autofix Service Plans.MAC Servers.Server Monitors to check if the Mac Every 2 Action Service SVC-web Roles.OS X Web Services.OS X Web Services - Server Web Service is running minutes Restart Monitors Web Server Service

PO Box 56506, Houston, TX 77256-6506 | p: 713.403.9150 | f: 713.621.1826 | www.aldridge.com | [email protected]

~Autofix Service Plans.MAC Servers.Server Every 2 Action Service SVC-Wiki Monitors to check if the Wiki Server is running Roles.OSX Web Services. OS X Web Services - minutes Restart Monitors Wiki Server Service

System Monitors Table 6: Remote Monitors—System Monitors Monitor Name Description Groups Interval Alert Action Report Category

Default - EXE - DNS Tests DNS via nslookup against four known sources to validate that DNS is looking up Every 5 Remote PortManagement. DNS -53 UDP Create Lookup Test addresses externally as designed. If not, a ticket is created. Minutes Monitors Ticket

Analyzes the state of domain controllers in a forest or enterprise and reports any problems to Service Plans.Windows EXE - Domain help in troubleshooting. If any problems are reported, the ~Autofix Action DCDIAG script is Servers. Server Every ~Autofix Action Remote Controller called in an attempt fix the issue. Roles.Windows Servers Core Hour DCDIAG Monitors Diagnostic This script will push down a copy of dcdiag to the server if missing, and re-run dcdiag with verbose output attaching the result to the ticket. See: http://technet.microsoft.com/en- Services.Domain Controllers us/library/cc731968(v=ws 10) aspx for more specific details on this tool Tests KCC consistency via kcctest.bat. If a problem is found, the ~Autofix Action KCC script is Service Plans.Windows EXE - KCC called in an attempt to fix the issue. This script will push down a copy of Repadmin.exe. Every Servers. Server ~Autofix Action Remote Consistency Repadmin helps administrators diagnose replication problems between 12 Roles.Windows Servers Core KCC Monitors Check domain controllers running operating systems. Hours See http://technet.microsoft.com/en- Services.Domain Controllers us/library/cc770963(v=ws 10) aspx for more specific details on this tool This monitor watches for performance monitors that have been disabled at the computer level ~ Autofix LT - Perf and places a noperf file on the computer to ensure that the performance monitoring is disabled. Every 5 Action Perf Antivirus Monitors All Agents Performance monitors that have been disabled will all report as Minutes Monitors Checks Disable ‘green’ regardless of the current state of the monitor. Disable

~ Autofix LT - Perf This monitor removes the noperf file from a computer that has had performance monitors re- Every 5 Action Perf Antivirus Monitors All Agents enabled by deselecting the Remove Performance Monitors extra data field checkbox. Minutes Monitors Checks Enable Enable

PO Box 56506, Houston, TX 77256-6506 | p: 713.403.9150 | f: 713.621.1826 | www.aldridge.com | [email protected]

Antivirus Table 7: Internal Monitor Types—Antivirus Alert Report Monitor Name Description Groups Interval Template Category

Service Plans.Windows Servers.Managed 24x7 Service Plans.Windows Servers.Server Anti- Virus Only Checks the computer for antivirus from all of the definitions that exist Service Plans. Windows Workstations. in TAC Agent and that it has been disabled. If these conditions are Managed 24x7 Default - Antivirus AV - Disabled Daily met, it will only create a ticket if the computer has checked in within Service Plans. Windows Workstations. Create Ticket Checks the last 15 minutes. Managed 8x5 Service Plans. WindowsWorkstations. Managed HAAS Service Plans.Windows Workstations. Workstation Anti- Virus Only

Service Plans.Windows Servers.Managed 24x7 Service Plans.Windows Servers.Server Anti- Virus Checks the computer for antivirus software and checks the virus Only definitions to check if they have been updated within the last 15 Service Plans.Windows Workstations. days. If they haven’t been updated in the last ~Autofix Action AV – Out of Managed 24x7 Antivirus 15 days and the computer has checked inwithin the last 15 minutes, Daily Resend AV Date Service Plans.Windows Workstations. Checks the ‘Update Virus Definitions’ script is called to Definitions Managed 8x5 update the definitions automatically. Refer to notes in Overview for additional information on Autofix actions. Service Plans.Windows Workstations. Managed HAAS Service Plans.Windows Workstations. Workstation Anti- Virus Only

Service Plans.Windows Servers.Managed 24x7 Service Plans.Windows Servers.Server Anti- Virus Checks the computer for antivirus software based on the virus Only definitions that exist in TAC Agent and that the computer has checked Service Plans.Windows Workstations. AV-Software in within the last 15 minutes. If both conditions are met, a ticket will Managed 24x7 Default - Antivirus Daily Missing be created; however, you will not be alerted Service Plans.Windows Workstations. Create Ticket Checks if antivirus is missing if the role of the Managed 8x5 computer is defined as a database server, VM Host or mail server. Service Plans.Windows Workstations. Managed HAAS Service Plans.Windows Workstations. Workstation Anti- Virus Only

PO Box 56506, Houston, TX 77256-6506 | p: 713.403.9150 | f: 713.621.1826 | www.aldridge.com | [email protected]

Backups Table 8: Internal Monitor Types—Backups Alert Report Monitor Name Description Groups Interval Template Category BU - !Job Backup Management.AppAssure Backup Default - Checks the backup status and if the job has been running for more Every Backup Running > 8 Management.Acronis Backup Management.CA Create than 8 hours, a ticket will be created. Hour Checks hrs Backup Ticket

BU - Backup Checks the backup logs and looks for messages in the backup Backup Management.AppAssure Backup Default - Failed to logs indicating that the backup configuration failed to save. If the Every Backup Management.Acronis Backup Management.CA Create Configure Backup Manager plugin failed to save the backup configuration Hour Checks Ticket Job in the past 24 hours, a ticket will be created. Backup Checks the backup logs for backups that have failed within the past hour. If any backups Backup Management.AppAssure Backup BU - Backup have failed within the past hour, the ~Autofix Action Server Every ~Autofix Action Backup Management.Acronis Backup Management.CA Job Failed Backup script will automatically run in an attempt to resolve the Hour Server Backup Checks Backup issue. Refer to notes in Overview for additional information on Autofix actions. Backup Management.AppAssure Backup Default - BU – Backup Checks the backup logs and if the Backup Manager plugin has Backup Management.Acronis Backup Management.CA Daily Create Plugin Failed failed or is not found, a ticket will be created. Checks Backup Ticket BU – Verify Checks the backup logs for failures. If there Backup Management.AppAssure Backup Default - Backup Backup Job is any indication that a backup job failed in the past 24 hours, a Management.Acronis Backup Management.CA Daily Create Checks Failed ticket will be created. Backup Ticket

CIM Table 9: Internal Monitor Types—CIM Alert Report Monitor Name Description Groups Interval Template Category

Monitors for a bad fan and if a bad fan is detected, a Service Plans.Windows Servers.Managed Every 12 Default - Create Antivirus CIM – Fan Offline ticket is created. 24x7 hours Ticket Checks

CIM – Power Supply Monitors for a bad power supply and if a bad power supply Service Plans.Windows Servers.Managed Every 12 Default - Create Antivirus Offline is detected, a ticket is created. 24x7 hours Ticket Checks

CIM – Temperature Monitors for a temperature higher than 90 degrees and Service Plans.Windows Servers.Managed Every 12 Default - Create Antivirus Sensor will create a ticket. 24x7 hours Ticket Checks

PO Box 56506, Houston, TX 77256-6506 | p: 713.403.9150 | f: 713.621.1826 | www.aldridge.com | [email protected]

Disk Table 10: Internal Monitor Types—Disk Alert Report Monitor Name Description Groups Interval Template Category

Checks the size of the server’s temp files and if it’s greater than 167772160 bytes (160 MB) and the computer has checked in within the last 15 Every ~Autofix DRV – Disk Service Plans.Windows Servers.Managed Disk minutes, the~Autofix Action Temp File Cleanup script will be called to 12 Action Temp Cleanup Servers 24x7 Monitors attempt to fix the issue. Refer to notes in Overview for additional hours File Cleanup information on Autofix actions.

Service Plans.Windows Workstations. Managed 24x7 Service Plans.Windows Workstations. DRV – Disk Checks the fragmentation on the drive. If the fragmentation is greater than Managed 8x5 Default – 30%, it will create a ticket because the ~Autofix Action Defragment Drive Daily Service Plans.Windows Workstations. Create Ticket Monitors Workstations that would have run prior to it hitting 30% did not remediate the issue. Managed HAAS Service Plans.Windows Servers.Managed 24x7

Checks the fragmentation on drive. If the fragmentation on the drive is greater than 16% and less than 30% and the computer has checked in within the last 1400 minutes, the ~Autofix Action Defragment Drive script will be called to attempt to fix the Service Plans.Windows ~Autofix DRV – issue. Drives that are excluded: drives that don’t exist and are there for Workstations.Managed 24x7 Action Disk Fragmentation < Daily history only, USB drives, firewire drives and drives manually tagged as Defragment Monitors 30% Service Plans.Windows SSD. Additionally, defragmentation is based on software detected so if SP, Workstations.Managed HAAS Drive Acronis, AppAssure, CA, VMHost, VM, MSSQL Server or Exchange is detected these machines will not be defragmented. Refer to notes in Overview for additional information on Autofix actions.

PO Box 56506, Houston, TX 77256-6506 | p: 713.403.9150 | f: 713.621.1826 | www.aldridge.com | [email protected]

Checks the size of the server’s temp files and if it’s greater than 167772160 DRV – bytes (160 MB) and the computer has checked in within the last 15 Every ~Autofix Service Plans.Windows Servers.Managed Disk Fragmentation minutes, the~Autofix Action Temp File Cleanup script will be called to 12 Action Temp 24x7 Monitors > 30% attempt to fix the issue. Refer to notes in Overview for additional hours File Cleanup information on Autofix actions.

Service Plans.Windows Workstations. Managed 24x7 Service Plans.Windows Workstations. Managed 8x5 Service Plans.Windows Workstations. Managed HAAS DRV – Free Checks the disk for available free space. If drive size is greater than Service Plans.Windows Servers.Managed Default – Space Remaining 16384 MB (16 GB), available free space is less than 10% of the total drive Disk 24x7 Daily Create < size and file system is not CDFS, UNKFS, DVDFS, FAT, FAT32 or NetFS, Monitors Service Plans.Linux Machines.Managed 8x5 Ticket 10% Total Size monitor will create a ticket. Service Plans.MAC Workstations.Managed 24x7 Service Plans.MAC Workstations.Managed 8x5 Service Plans.MAC Servers.Managed 24x7 Service Plans.MAC Servers.Managed 8x5

PO Box 56506, Houston, TX 77256-6506 | p: 713.403.9150 | f: 713.621.1826 | www.aldridge.com | [email protected]

Service Plans.Windows Workstations. Managed 24x7 Service Plans.Windows Workstations. Managed 8x5 Service Plans.Windows Workstations. Managed HAAS DRV – Free Checks the disk for available free space. If drive size is greater than 16384 Service Plans.Windows Servers.Managed 8x5 Every Default – Space Remaining MB (16 GB), the available free space is less than 2048 (2 Service Plans.Windows Servers.Managed Disk 6 Create < GB) and the file system is not CDFS, UNKFS, 24x7 Monitors hours Ticket 2 GB DVDFS, FAT, FAT32 or NetFS, the monitor will create a ticket. Service Plans.Linux Machines.Managed 8x5 Service Plans.MAC Workstations.Managed 24x7 Service Plans.MAC Workstations.Managed 8x5 Service Plans.MAC Servers.Managed 24x7 Service Plans.MAC Servers.Managed 8x5

Default – Service Plans.Windows Workstations. Create Managed 24x7 Ticket Monitors the MFT fragmentation of a drive (ignores SSD drives). When the Service Plans.Windows Workstations. fragmentation is greater than 15 percent and the computer has checked in DRV – MFT Managed 8x5 Disk within the last 15 minutes, it Daily Fragmentation Service Plans.Windows Workstations. Monitors will trigger the appropriate Alert Template based on the service plan Managed HAAS this computer belongs to. Service Plans.Windows Servers.Managed Default – 24x7 Server 24x7

PO Box 56506, Houston, TX 77256-6506 | p: 713.403.9150 | f: 713.621.1826 | www.aldridge.com | [email protected]

Service Plans.Windows Workstations. Managed 24x7 Service Plans.Windows Workstations. Managed 8x5 Service Plans.Windows Workstations. Managed HAAS Smart Failures should not be ignored! Service Plans.Windows Servers.Managed 8x5 Every Default – DRV – Smart Monitors the smart attributes’ thresholds and if the value exceeds the Service Plans.Windows Servers.Managed Disk 12 Create Failures threshold (VMs are excluded), then a ticket is created. If there are multiple 24x7 Monitors hours Ticket failures, a single ticket is created per computer. Service Plans.Linux Machines.Managed 8x5 Service Plans.MAC Workstations.Managed 24x7 Service Plans.MAC Workstations.Managed 8x5 Service Plans.MAC Servers.Managed 24x7 Service Plans.MAC Servers.Managed 8x5

Table 11: Internal Monitor Types—ESX Alert Report Monitor Name Description Groups Interval Template Category

Monitors CPU usage of host and if CPU Every 4 Default – Create Antivirus ESX – Host CPU Usage Service Plans.Window Servers.Managed 24x7 usage goes above 90%, a ticket is created. hours Ticket Checks

Monitors bus resets of disks on host and creates a Every 4 Default – Create Antivirus ESX – Host Disk Resets Service Plans.Window Servers.Managed 24x7 ticket, if above 0. hours Ticket Checks

Monitors disk usage of host and creates a ticket if above Every 4 Default – Create Antivirus ESX – Host Disk Usage Service Plans.Window Servers.Managed 24x7 80%. hours Ticket Checks

ESX – Host Memory Monitors memory usage of host and creates a ticket if above Every 4 Default – Create Antivirus Service Plans.Window Servers.Managed 24x7 Usage 90%. hours Ticket Checks

ESX – Host Recently Monitors the host system uptime and creates a ticket if time Every 4 Default – Create Antivirus Service Plans.Window Servers.Managed 24x7 Restarted is less than 5 minutes. hours Ticket Checks

ESX – VM Recently Monitors VM system uptime and creates a ticket if time is Every 4 Default – Create Antivirus Service Plans.Window Servers.Managed 24x7 Restarted less than 5 minutes. hours Ticket Checks

Service Plans.Windows Workstations.Managed Monitors CPU usage of VM and creates a ticket if above 24x7 Every 4 Default – Create Antivirus ESX VM – CPU Usage 90%. Service Plans.Windows Workstations.Managed hours Ticket Checks 8x5 S i Pl Wi d S M d 8 5 PO Box 56506, Houston, TX 77256-6506 | p: 713.403.9150 | f: 713.621.1826 | www.aldridge.com | [email protected]

Service Plans.Windows Workstations.Managed 24x7 Monitors disk usage of VM and creates a ticket if above Service Plans.Windows Workstations.Managed Every 4 Default – Create Antivirus ESX VM – Disk Usage 80% 8x5 hours Ticket Checks Service Plans.Windows Servers.Managed 8x5 Service Plans.Windows Servers.Managed 24x7

Service Plans.Windows Workstations.Managed 24x7 ESX VM – Memory Monitors number of times memory balloons on the VM and Service Plans.Windows Workstations.Managed Every 4 Default – Create Antivirus Ballooned creates a ticket if above 0. 8x5 hours Ticket Checks Service Plans.Windows Servers.Managed 8x5 Service Plans.Windows Servers.Managed 24x7

Service Plans.Windows Workstations.Managed 24x7 ESX VM – Memory Monitors memory usage of VM and creates a ticket if above Service Plans.Windows Workstations.Managed Every 4 Default – Create Antivirus Usage 90%. 8x5 hours Ticket Checks Service Plans.Windows Servers.Managed 8x5 Service Plans.Windows Servers.Managed 24x7

Events Table 12: Internal Monitor Types—Events Alert Report Monitor Name Description Groups Interval Template Category

Monitors the blacklisted events for errors on the Exchange server only. If blacklisted events occur, the Monitor EV – Blacklisted Events – Exchange server script will be called, which creates a ticket Every ~Autofix Action Exchange Service Plans.Windows Servers.Managed 24x7 Exchange Server and adds a comment for each Exchange Server Blacklist hour Exchange Server Errors event detected. Will update a new or opened ticket, if ticket is closed, it will open a new one.

Monitors the blacklisted events for error type 2 (informational EV – Blacklisted ~Autofix Action only) and excludes Exchange events. Creates a ticket and Events – Every 12 Blacklist Eventlog appends all disk Informational blacklist events as a Service Plans.Windows Servers.Managed 24x7 Informational hours Events Checks comment to the ticket. Will only update a new or opened Errors Only - Informational ticket, if the ticket is closed it will open a new one.

Monitors the blacklisted events for warnings and errors EV – Blacklisted Service Plans.Windows Servers.Managed 24x7 ~Autofix Action that need to be addressed for Symantec Backup Exec. Events – Service Plans.Windows Servers.Managed 8x5 Every Critical Symantec Backup Creates a ticket and appends all events as a comment to Symantec hour Backup Exec Checks the ticket. Will only update a new or opened ticket, if the Service Plans.Windows Servers.Server Backup Backup Exec Events ticket is closed it will open a new one. Only

PO Box 56506, Houston, TX 77256-6506 | p: 713.403.9150 | f: 713.621.1826 | www.aldridge.com | [email protected]

Monitors the blacklisted events for warnings and errors Service Plans.Windows Servers.Managed 24x7 that need to be addressed for Symantec Endpoint Service Plans.Windows Servers.Managed 8x5 ~Autofix Action EV – Blacklisted Protection. Service Plans.Windows Servers.Server Anti- Every Critical Symantec Events – Symantec Anti-Virus Creates a ticket and appends all events as a comment to Virus Only hour Endpoint Security Endpoint Protection the ticket. Will only update a new or opened ticket, if the Service Plans.Windows Workstations.Managed Events ticket is closed it will open a new one. 24x7 S i Pl Wi d W k t ti M d Service Plans.Windows Servers.Managed 24x7 Service Plans.Windows Servers.Managed 8x5 Service Plans.Windows Se rvers.Server Anti- Monitors the blacklisted events for Symantec Endpoint Virus Only EV – Blacklisted Protection licenses that are about to expire. Creates a Service Plans .Windo ws W orks tations.Managed Events – Symantec Every Default – Do ticket and appends all events as a comment to the ticket. 24x7 Anti-Virus Endpoint Protection hour Nothing Will only update a new or opened ticket, if the ticket is Licensing Service Plans.Windows Workstations.Managed closed it will open a new one. 8x5 Service Plans.Windows Workstations.Managed HAAS Service Plans.Windows Workstations.

Monitors the blacklisted events for warnings and errors Service Plans.Windows Servers.Managed 24x7 ~Autofix Action that Service Plans.Windows Workstations.Managed EV – Blacklisted Blacklist need to be addressed. Excludes Exchange 24x7 Events – Every 4 Events Eventlog events. Creates a ticket and appends all disk blacklist Service Plans.Windows Workstations.Managed Warnings and hours – Warnings Checks events as a commentto the ticket. Will only update a new or 8x5 Errors Only and opened ticket, if the Service Plans.Windows Workstations.Managed Errors ticket is closed it will open a new one. HAAS

Monitors the event logs for the event ID of 1254 and the source is ‘Server Administrator’ with an event Default – Create Internal EV – Chassis Intrusion type of 1(error). Event ID1254 indicates that a chassis Service Plans.Windows Servers.Managed 24x7 Daily Ticket Monitors intrusion was detected. If any are detected, a ticket is created.

Service Plans.Windows Servers.Managed 24x7 Service Plans.Windows Workstations.Managed Monitors the event logs for any disk errors. Creates a ticket EV – Drive Errors and 24x7 ~Autofix Action and appends all raid blacklist events as a comment to the Every Drive Raid Service Plans.Windows Workstations.Managed Drive Errors and ticket. Will only update a new or opened ticket, if the ticket hour Errors Failures Raid Failures is closed it will open a new one. 8x5 Service Plans.Windows Workstations.Managed HAAS Service Plans.Windows Servers.Managed 24x7 Service Plans.Windows Workstations.Managed Monitors event logs for excessive alerts. If there have 24x7 EV – Excessive Alerts been more than 25 alerts and the computer has checked Service Plans.Windows Workstations.Managed Default- Server Eventlog Detected in within the last 6 minutes, it will trigger the appropriate Daily 24x7 Checks > 25 Like Events Alert Template based on the service plan this computer 8x5 belongs to. Service Plans.Windows Workstations.Managed HAAS

PO Box 56506, Houston, TX 77256-6506 | p: 713.403.9150 | f: 713.621.1826 | www.aldridge.com | [email protected]

Monitors the event logs where the LogName field equals ‘application’ and the event ID is1521. Event ID 1521 indicates that Windows cannot locate the server copy of EV – Failed Load User your roaming profile and is attempting to log you on with Default – Create Internal Service Plans.Windows Servers.Managed 24x7 Daily Profile your local profile. Changes to the profile will not be copied Ticket Monitors to the server when you logoff. Possible causes of this error include network problems or insufficient security rights. This event will automatically create a ticket.

Monitors the event logs for the event ID 529, 644, 681 with the source of ‘security’. Event ID 529 indicates a Logon Failure for unknown user name or bad password. Event ID 644 indicates that the user Every 12 Default – Internal EV – Failed Logins* account has been locked out. Event ID 681 indicates that Service Plans.Windows Servers.Managed 24x7 hours Server 24x7 Monitors a log in attempt failed. A decimal error code is included in the event(i.e. 3221225578) that translates to the cause of the failure. Triggers the appropriate Alert Template based on the service plan this computer belongs to.

Monitors event logs for failed folder redirects and event EV – Folder Redirect Default – Create Internal log type 1. If computer has checked in within last 15 min, Service Plans.Windows Servers.Managed 24x7 Daily Failed Ticket Monitors a ticket will be created.

Monitors the event logs for the event ID 1111 where the source is ‘UmrdpService’, the eventtype is 1(error) and Service Plans.Windows Workstations.Managed Default – EV – Printer Driving thecomputer has checked in within the last 15 minutes. 24x7 Internal Daily Workstation Missing* Event Service Plans.Windows Workstations.Managed Monitors 24x7 1111 indicates that the driver required for printer is HAAS unknown ormissing. Triggers the appropriate Alert Service Plans.Windows Servers.Managed 24x7 Service Plans.Windows Workstations.Managed EV – Reoccurring Critical 24x7 Monitors the event log for more than 75 reoccurring Default – Create Eventlog > 75 Daily events and will create a ticket when this occurs. Service Plans.Windows Workstations.Managed Ticket Checks Occurrences 8x5 Service Plans.Windows Workstations.Managed HAAS Monitors event logs with the event ID 4226 with a source of ‘Tcpip’ and the event type of Service Plans.Windows Workstations.Managed E V – TCP Max 3 (warning/error) and the computer has checked in 24x7 Default – Create Internal Connections within the last 15 minutes. The event ID 4226 indicates Daily Service Plans.Windows Workstations.Managed Ticket Monitors Reached that TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts. HAAS Creates a ticket when this occurs.

PO Box 56506, Houston, TX 77256-6506 | p: 713.403.9150 | f: 713.621.1826 | www.aldridge.com | [email protected]

Hardware Table 12: Internal Monitor Types—Hardware Alert Report Monitor Name Description Groups Interval Template Category

HDW – Hardware Checks for any changes in hardware since yesterday. Any changes Service Plans.Windows Servers. Managed. Default – Create Internal Changes Daily are indicated in a ticket. 24x7 Ticket Monitors Detected

TAC Agent 2.0 Table 13: Internal Monitor Types—TAC Agent 2.0 Alert Report Monitor Name Description Interval Groups Template Category

Monitors agent computers for the current service version for Windows, Mac and Linux. If the service version is not current, the script ~Autofix Out of Internal LT-Agent Out Dated All Agents Daily will try to remediate the issue. If it cannot, then the script is to execute the alert Date Agent Monitors template that has been specified in the Properties.

LT – Agents No Default – Monitors agent computers for the last checkin. If greater than 30 days, will Internal Checkin for more than Service Plans Daily Create create a ticket. Monitors 30 days Ticket

Default – LT – TAC Agent monitor This monitor detects Internal Monitors that have been disabled due to invalid Every Internal All Agents Create disabled or long running SQL queries. Hour Monitors Ticket

-Autofix Action LT – New Computer This monitor alerts on new network devices detected by the network probe Internal All Agents Daily New Computer Detected* within the past day that appear to be new computers on the network. Monitors Detected

Service Plans.Windows Default – LT – New Device This monitor alerts on new network devices detected by the network probe Every 12 Internal Servers.Server Roles.MSP Specific Create Detected* within the past day. hours Monitors Servers.TAC Agent Server Ticket

This monitor detects new computers that have been added to the New Service Plans.Windows Default – LT – New Unassigned Internal Computers location in the past two days that need to be moved to their proper Servers.Server Roles.MSP Specific Daily Create Computers* Monitors location. Servers.TAC Agent Server Ticket

PO Box 56506, Houston, TX 77256-6506 | p: 713.403.9150 | f: 713.621.1826 | www.aldridge.com | [email protected]

Every 5 Default – Do Internal LT – Offline Locations* This monitor detects locations that have no agents checking in. All Agents minutes Nothing Monitors

Monitors servers where the last time the server checked in was greater than 5 minutes ago. If greater than 5 minutes, the autofix action agent offline script Service Plans.Windows Servers. ~Autofix LT-Offline Master Every 30 Internal will run. The script ensures the agent is actually down or if an entire site is Managed. Action Server Servers seconds Monitors down. If so, the script will try to remediate the issue. If it cannot, then the script 24x7 Offline Script executes the alert template that has been specified in the Properties.

Monitors servers where the last time the server checked in was greater than 5 Service Plans.Windows Servers. minutes ago. If greater than 5 minutes, the autofix action agent offline script Managed. ~Autofix Every 5 Internal will run. The script ensures the agent is actually down or if an entire site is 24x7 Action Server minutes Monitors down. If so, the script will try to remediate the issue. If it cannot, then the script Service Plans.Windows Offline Script executes the alert template that has been specified in the Properties. Servers.Managed.8x5 LT-Offline Servers Service Plans.Linux Machines.Managed 24x7 Default – Monitors servers where the last time the server checked in was greater than 5 Service Plans.MAC Every 5 Internal Create minutes ago. If greater than 5 minutes, a ticket is created. Servers.Managed 24x7 minutes Monitors Ticket Service Plans.MAC Servers.Managed 8x5 LT – Onboarding Detects locations that have been enabled for Onboarding, but do not have a Default – Incomplete – Every 12 Internal credential selected for ‘Login to use for Administrator Access’ selected on the All Agents Create Missing Admin hours Monitors location’s Deployment and Defaults tab. Ticket Credential

LT – System MAC This monitor detects agents where the MAC address of the network card has Default – Internal Address changed. If the MAC address of an agent is changing this is used to detect Service Plans Create Monitors Changed when two different agent computers checking into the same server agentid. Ticket

Mobile Device Management Table 14: Internal Monitor Types—MDM Alert Report Monitor Name Description Groups Interval Template Category MDM – Devices Over Checks for mobile devices that exceed their specified data Every 6 Default – Create Internal Mobile Global monitor – not assigned to specific groups plan. hours Ticket Monitors Data MDM – Mobile Checks for mobile devices that are being managed through Every 12 Default – Create Internal Devices Not Global monitor – not assigned to specific groups MDM that are not checking in. hours Ticket Monitors Checking In

PO Box 56506, Houston, TX 77256-6506 | p: 713.403.9150 | f: 713.621.1826 | www.aldridge.com | [email protected]

No Contract Table 15: Internal Monitor Types—No Contract Alert Report Monitor Name Description Groups Interval Template Category

Checks the computer for antivirus from all of the definitions that exist in TAC Agent and that it has been Service Plans.Windows Workstations.No Default – No Antivirus NC – AV Disabled disabled. If these conditions are met, it will only create a Daily Contract Contract Ticket Checks ‘no contract’ ticket if the computer has checked in within the last 15 minutes.

Monitors the computer for antivirus software and checks the virus definitions to determine if they have been updated within the last 15 days. If they haven’t been Service Plans.Windows Workstations.No Default – No Antivirus NC – AV Out of Date Daily updated in the last Contract Contract Ticket Checks 15 days and the computer has checked in within the last 15 minutes, a ‘no contract’ ticket will be created.

Checks the computer for antivirus software based on the virus definitions that exist in TAC Agent and that the computer has checked in within the last 15 minutes. If NC – AV Software both conditions are met, a ‘no contract’ ticket will be Service Plans.Windows Workstations.No Default – No Antivirus Daily Missing created; however, there is no alert if antivirus is Contract Contract Ticket Checks missing or if the role of the computer is defined as a database server, VM Host or mail server.

NC – Bad Processes Monitors for blacklisted processes. If a blacklisted Service Plans.Windows Workstations.No Default – No Process Daily Detected process is detected, a ‘no contract’ ticket is created. Contract Contract Ticket Monitors

Monitors the event logs for any disk errors. Creates a NC – Drive – Drive ‘no contract’ ticket and appends all raid blacklist events Default – No Drive Errors and as a comment to the Service Plans.Windows Servers.No Contract Contract Ticket Errors Raid Failures ticket. Will only update a new or opened ticket, if the ticket is closed it will open a new one.

Checks the size of the server’stemp files and NC – Drive – Disk if greater than167772160 bytes (160 MB) and the Service Plans.Windows Workstations.No Default – No Disk Cleanup computer has checked in within the last 15 minutes, a Contract Contract Ticket Monitors Servers ‘no contract’ ticket will be created.

PO Box 56506, Houston, TX 77256-6506 | p: 713.403.9150 | f: 713.621.1826 | www.aldridge.com | [email protected]

Checks the size of the computer’s temp files size, if NC – Disk Cleanup greater than 50331648 bytes (48 MB) and the computer Service Plans.Windows Workstations.No Default – No Disk Workstations has checked in within the last 15 minutes, a ‘no Contract Contract Ticket Monitors contract’ ticket will be created.

Checks the fragmentation on drive. If the fragmentation on the drive is greater than 15% and the computer has checked in within the last 1400 minutes, a ‘no contract’ NC – Drive – Service Plans.Windows Workstations.No Default – No Disk ticket will be created. Drives that are excluded: Fragmentation Contract Contract Ticket Monitors drives that don’t exist and are there for history only, USB drives, firewire drives and drives manually tagged as SSD.

Checks the disk for available free space. If drive size Service Plans.Windows Workstations.No NC – Drive – is greater than 4096 MB (4 GB), available free space Contract Default – No Disk Free Space is less than 5% of the total drive size and file system Service Plans.Windows Servers.No Contract Service Contract Ticket Monitors <5% Free is not CDFS, UNKFS, DVDFS, FAT, FAT32 or NetFS, Plans.MAC Workstations.No Contract Service Plans.MAC monitor will create a ‘no contract’ ticket. Servers.No Contract

Smart Failures should not be ignored! Service Plans.Windows Workstations.No Monitors the smart attributes’ thresholds and if the value Contract NC – Drive – Smart Default – No Drive exceeds the threshold (VMs are excluded), then a non- Service Plans.Windows Servers.No Contract Service Daily Failures Contract Ticket Errors contract ticket is created. If there are multiple failures, a Plans.Linux Machines.No Contract Service Plans.MAC single ticket is created per computer. Servers.No Contract

Monitors the event logs for a duplicate IP address and NC – TCP – that the computer has checked in within the last 1400 Service Plans.Windows Workstations.No Default – No Internal Duplicate IP in Dail minutes. If these conditions are met, a no contract ticket Contract Contract Ticket Monitors Network will be created.

Monitors for activity on specific ports that might indicate suspicious activity. Ports monitored: 1080, Service Plans.Windows Workstations.No 2283, 2535, 2745, 3127, Contract NC – TCP – Default – No Internal 3128, 3410, 5554, 8866, 9898, 12345, Service Plans.Windows Servers.No Contract Service Daily Suspicious Ports Contract Ticket Monitors 17300 and 27374. Creates a ‘no contract’ ticket if any Plans.MAC Workstations.No Contract Service Plans.MAC activity is detected on these ports and the computer Servers.No Contract has checked in within the last 1400 minutes.

Monitors for Windows Updates that have failed and NC – Updates – that the computer has checked in within the last 1400 Service Plans.Windows Workstations.No Default – No Internal Failed Daily minutes. If these conditions are met, a ‘no contract’ Contract Contract Ticket Monitors Automatic ticket is created.

PO Box 56506, Houston, TX 77256-6506 | p: 713.403.9150 | f: 713.621.1826 | www.aldridge.com | [email protected]

Service Plans.Windows Workstations.No NC – Updates – Monitors Windows and Macintosh machines for missing Contract Default – No Internal Missing Service service packs. If there are missing service packs, a ‘no Daily Service Plans.Windows Servers.No Contract Contract Ticket Monitors Pack contract’ ticket is created. Service Plans.MAC Workstations.No Contract

NC – Updates – Out Monitors Windows and VM machines for out of date Service Plans.Windows Workstations.No Default – No Internal Daily of Date updates. If out of date, a ‘no contract’ ticket is created. Contract Contract Ticket Monitors

Checks to see if the Appinit DLL is defined on a NC – computer and if so it could indicate that there is a virus Windows Default – No Registry infection on that computer or that the computer is a Service Plans.Windows Servers.No Contract Daily Appinit DLL Contract Ticket Monitors slow performing machine. If defined, a ‘no contract’ Defined* ticket is created.

Checks to see if the is being defined at NC – Windows Shell startup on a computer and if so it could indicate that Default – No Registry Service Plans.Windows Servers.No Contract Daily Defined there is a virus infection. If defined, a ‘no contract’ ticket Contract Ticket Monitors is created.

NC – Windows Monitors the number of startup programs. If greater Service Plans.Windows Workstations.No Default – No Registry Startup than 15 and contact has been made within the last 8 Daily Contract Contract Ticket Monitors Overloaded days, a ‘no contract’ ticket is created.

Checks to see if the Windows userinit is being defined Default – at startup on a computer and if so it could indicate that NC – Windows Service Plans.Windows Workstations.No No Registry there is a virus infection because userinit.exe can run Daily Userinit Defined Contract Contract Monitors logon scripts which could be malicious. If defined, a ‘no Ticket contract’ ticket is created.

PO Box 56506, Houston, TX 77256-6506 | p: 713.403.9150 | f: 713.621.1826 | www.aldridge.com | [email protected]

Performance Table 16: Internal Monitor Types—Performance Alert Report Monitor Name Description Groups Interval Template Category Default – Perf. Service Plans.Windows Servers.Managed 24x7 Daily Server 24x7 Checks Service Plans.Windows Workstations.Managed PF – Low Monitors the total memory. If less than 500, it will trigger the appropriate 24x7 Default – Memory Alert Template based on the service plan this computer belongs to. Service Plans.Windows Workstations.Managed Perf. Daily Workstation – HAAS Checks 24x7 Service Plans.Windows Workstations.Managed 8x5

Default – Perf. Service Plans.Windows Servers.Managed 24x7 Daily Server 24x7 Checks

Service Plans.Windows Workstations.Managed Default – PF – 90% Plus Monitors CPU usage greater than 90 percent and where the computer 24x7 Perf. Daily Workstation – Avg CPU has checked in within the last 15 minutes. Service Plans.Windows Workstations.Managed Checks 24x7 HAAS

Default – Service Plans.Windows Workstations.Managed Perf. Daily Workstation – 8x5 Checks 8x5

Processes Table 17: Internal Monitor Types—Processes

Alert Report Monitor Name Description Groups Interval Template Category Service Plans.Windows Servers.Managed 24x7 Service Plans.Windows Workstations.Managed PROC – Bad Monitors for blacklisted processes. If a blacklisted process is 24x7 ~Autofix Action Kill Process Processed detected, the ‘Monitor Kill Bad Process’ script is called to kill the bad Service Plans.Windows Workstations.Managed Daily Bad Process Monitors Detected process. 8x5 Service Plans.Windows Workstations. Managed HAAS

PO Box 56506, Houston, TX 77256-6506 | p: 713.403.9150 | f: 713.621.1826 | www.aldridge.com | [email protected]

Printers Table 18: Internal Monitor Types—Printers

Alert Report Monitor Name Description Groups Interval Template Category

Service Plans.Windows Default – PRT – Printer Monitors printer consumable levels. If less than 20 percent and where the Workstations.Managed 24x7 Workstation Internal Low max capacity is greater than 0, the monitor will trigger the appropriate Alert Daily Service Plans.Windows Workstations.Managed 24x7 (global Monitors Consumables Template based on the service plan this printer belongs to. HAAS default)

Passwords Table 19: Internal Monitor Types—Passwords

Alert Report Monitor Name Description Groups Interval Template Category

PWD – Expired Monitors the passwords table and checks to see if the expiration date is Service Plans.Windows Workstations.Managed Default – Expired Daily Passwords prior to today’s date. If any are expired, a ticket is created. 24x7 Create Ticket Items

Registry Table 20: Internal Monitor Types—Registry Alert Report Monitor Name Description Groups Interval Template Category

Checks to see if the Appinit DLL is defined on a computer and if so it REG – Service Plans.Windows Workstations.Managed could indicate that there is a virus infection on thatcomputer or that the Windows 24x7 ~Autofix Action Registry computer is a slow performing machine. If defined, the ‘Monitor Fix Daily Appinit DLL Service Plans.Windows Workstations.Managed Fix Appinit Monitors Appinit’ script will be called to fix the Appinit DLL that is defined in the Defined* registry and will delete them. HAAS

PO Box 56506, Houston, TX 77256-6506 | p: 713.403.9150 | f: 713.621.1826 | www.aldridge.com | [email protected]

Checks to see if the Windows cmd is defined to auto start on a Service Plans.Windows Workstations.Managed REG – Windows Default – computer and if so could indicate a virus infection. If defined, the 24x7 Registry CMD Autorun Daily Workstation monitor will trigger the appropriate Alert Template based on the Service Plans.Windows Workstations.Managed Monitors Defined 24x7 service plan this computer belongs to. HAAS

Checks to see if the Windows Shell is being defined at startup on a computer and if so it could indicate that there is a virus infection. If Service Plans.Windows Workstations.Managed REG – Windows defined, the ‘Monitor Fix Shell’ script will be called to fix the Windows 24x7 ~Autofix Action Registry Daily Shell Defined Shell Registry and set it back to Explorer.exe. Service Plans.Windows Workstations.Managed Fix Shell Monitors HKEY_LOCAL_MACHINE\SOF TWARE\Microsoft\Windows HAAS NT\CurrentVersion\\Shell

Default – Service Plans.Windows Servers.Managed 24x7 Create Ticket

Daily Monitors the number of startup programs. If greater than 15 and Default – REG- Windows Service Plans.Windows Workstations.Managed contact has been made within the last 8 days, the monitor will trigger Workstation Registry Startup 24x7 the appropriate Alert Template based on the service plan this 24x7 Monitors Overloaded Service Plans.Windows Workstations.Managed computer belongs to. Daily 8x5 Default – Service Plans.Windows Workstations.Managed Workstation HAAS 8x5

Checks to see if the Windows System is being defined at startup on a Service Plans.Windows Workstations.Managed REG – Windows computer and if so it could indicate that is a virus infection. If defined, 24x7 ~Autofix Action Registry System the ‘Monitor Fix System’ script will be called and will fix the defined Daily Service Plans.Windows Workstations.Managed Fix System Monitors Defined* system registry value. HKEY_LOCAL_MACHINE\SOF TWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Sy stem HAAS

PO Box 56506, Houston, TX 77256-6506 | p: 713.403.9150 | f: 713.621.1826 | www.aldridge.com | [email protected]

Checks to see if the Windows Taskman is being defined at startup on Service Plans.Windows Workstations.Managed REG – Windows Default – a computer and if so it could indicate that there is a virus infection. If 24x7 Registry Taskman Daily Workstation defined, the monitor will trigger the appropriate Alert Template based Service Plans.Windows Workstations.Managed Monitors Defined 24x7 on the service plan this computer belongs to. HAAS

Checks to see if the Windows userinit is being defined at startup on a computer and if so it could indicate that there is a virus infection Service Plans.Windows Workstations.Managed REG – Windows because userinit.exe can run logon scripts which could be malicious. 24x7 ~Autofix Action Service Userinit If defined, the ervice Plans.Windows Workstations.Managed Fix Userinit Monitors Defined ‘Monitor Fix Userinit’ script will be called and HAAS attempt to fix the issue.

Services Table 21: Internal Monitor Types—Services Monitor Alert Report Description Groups Interval Name Template Category

Checks the computer for auto services that are not running and the computer has checked in within the last 15 minutes and where the services.driver = 0 (to Service Plans.Windows Servers.Managed 24x7 verify that Service Plans.Windows.Servers.Managed 8x5 ~Autofix SVC – Auto drivers are not loading as services). Provided the service is not blacklisted and the Service Plans.Windows Workstations.Managed Every Action Service Services other conditions are met, the ‘Monitor Restart Service’ script will be called and it will hour Restart Monitors Stopped 24x7 attempt to restart the failed service no more than three times before generating an Service Plans.Windows Workstations.Managed Service alert and creating 8x5 a ticket.

PO Box 56506, Houston, TX 77256-6506 | p: 713.403.9150 | f: 713.621.1826 | www.aldridge.com | [email protected]

Software Table 22: Internal Monitor Types—Software

Alert Report Monitor Name Description Groups Interval Template Category Service Plans.Windows Workstations.Managed Default – 24x7 Daily Workstation Monitors the event logs for the event ID 1002 and source‘Application Service Plans.Windows Workstations.Managed 24x7 Hang’ with an event type 1(error) where the computer has checked in HAAS within the last 1400 minutes. Event ID Default – Service Plans.Windows Workstations.Managed SW – Application 1002 indicates hanging application Daily Workstation Internal Crash , version , hang module hungapp, version 8x5 8x5 Monitors 0.0.0.0, hang address . If defined, the monitor will trigger the appropriate Alert Template based on the service plan this computer belongs to. Default Server Service Plans.Windows Servers.Managed 24x7 Daily – 24x7

Service Plans.Windows Workstations.Managed Monitors the software table to check if the selected software that appears 24x7 on the Application Blacklist has been installed and if the computer has Service Plans.Windows Workstations.Managed Every SW – Blacklisted Default – Create Internal checked in within the last 8x5 12 Install Ticket Monitors 1400 minutes. If these conditions are met, a Service Plans.Windows Workstations.Managed hours ticket is created. HAAS Service Plans.Windows Servers.Managed 24x7

Service Plans.Windows Workstations.Managed 24x7 Monitors the product keys and checks the expiration date. If the Service Plans.Windows Workstations.Managed SW – Expired Default – Create Expired expiration date is less than 43200 minutes from now and the day of week 8x5 Daily ProductKeys* Ticket Items is not Sunday or Saturday, the monitor will create a ticket. Service Plans.Windows Workstations.Managed HAAS Service Plans.Windows Servers.Managed 24x7

Monitors new installations and determines if the application was installed Service Plans.Windows Servers.Managed 24x7 ~Autofix Action within the last day, if the computer has been addedover two days ago SW Installed and theapplication is not a patch. Many common apps excluded from Service Plans.Windows Workstations.Managed

SW – Installed alerting: java, Mozilla, , Flash Player, Chrome, Adobe Reader, HAAS Internal Daily Default – New* Apple application, CutePDF, Shockwave, QuickTime and iTunes. Service Plans.Windows Workstations.Managed Monitors Workstation Additional software can be added to 24x7 Service Plans.Windows Workstations.Managed 24x7 exclude. Information provided by this monitor may not be useful today 8x5 but may be useful later for troubleshooting purposes.

PO Box 56506, Houston, TX 77256-6506 | p: 713.403.9150 | f: 713.621.1826 | www.aldridge.com | [email protected]

Service Plans.Windows Workstations.Managed 24x7 Service Plans.Windows Workstations.Managed Every SW – Over Determines if the license count is greater than the allocated license count. Default – Create Internal 8x5 12 Licenses* If license count is greater, a ticket will be created. Ticket Monitors Service Plans.Windows Workstations.Managed hours HAAS Service Plans.Windows Servers.Managed 24x7

Monitors the software table for the selected software that appears on Service Plans.Windows Workstations.Managed the Application whitelist. If application appears on the 24x7 whitelist, the ‘Monitor Unclassified Apps’ script Service Plans.Windows Workstations.Managed SW – will be called to attempt to fix the issue. Refer to notes in Overview for 8x5 ~Autofix Action Internal Unclassified additional information on Autofix actions. Service Plans.Windows Workstations.Managed Unclassified Apps Monitors Apps HAAS Service Plans.Windows Servers.Managed 24x7 Service Plans.Windows Servers.Managed 8x5 S i Pl Li M hi M d 8

Service P lans.Windows Workstations.Manage d 24x7 Default – Internal Workstation Monitors Service P lans.Windows Workstations.M anage d 24x7 Checks for software that has been uninstalled within the last day. The 8x 5 monitor w ill t rigger the app ropr iate A lert Template bas ed o n th e ser v ice plan SW – this compu ter belong s to . If comput er be longs to a manage d grou p with the Uninstalled* ~Autof ix A ction as th e Alert T em pla te, the ‘Mon itor SW Unin stall’ s crip t is called and will a ttem pt to fix the issue. Refer to notes in Overview for additional information on Autofix actions. Service Plans.Windows Workstations.Managed ~Autofix Action HAAS SW Uninstalled Service Plans.Windows Servers.Managed 24x7

PO Box 56506, Houston, TX 77256-6506 | p: 713.403.9150 | f: 713.621.1826 | www.aldridge.com | [email protected]

TCP Table 23: Internal Monitor Types—TCP

Alert Report Monitor Name Description Groups Interval Template Category Service Plans.Windows Workstations.Managed 24x7 Default – Create Monitors for activity on specific ports that might indicate suspicious Service Plans.Windows Workstations.Managed Ticket activity. Ports monitored: 1080, 2283, 2535, HAAS TCP – Suspicious 2745, 3127, 3128, 3410, 5554, Service Plans.Windows Servers.Managed 24x7 Network Ports 8866, 9898, 12345, 17300 and Checks 27374. Monitor will trigger the appropriate Alert Template based on the Default – Service Plans.Windows Workstations.Managed service plan this computer belongs to. Workstation 8x5 8x5

Updates Table 24: Internal Monitor Types—Updates

Alert Report Monitor Name Description Groups Interval Template Category Service Plans.Windows Workstations.Managed 24x7 Service Plans.Windows Workstations.Managed Every Default – Do Internal UPDATES – This monitor detects Windows 8x5 hour Nothing Monitors Daytime Patch workstation agents that are online and have a pending Service Plans.Windows Workstations.Managed Reboot reboot due to applied Windows Updates. The machine HAAS Pending must be under patch contract. _System Automation.Windows Updates Patch Window Every ~Autofix Prompt Internal Control.Win Workstations.Windows Updates – Everyday hour User Reboot Monitors Daytime Patch Override

Service Plans.Windows Workstations.Managed Checks computer for Windows OS, patch window is empty 24x7 UPDATES – and computer has checked in within the past day. This Service Plans.Windows Workstations.Managed Every ~Autofix Empty Internal Empty Patch indicates that is messed up or installer is 8x5 four hours Patch Window Monitors Window out of date. Calls the ‘Monitor Empty Patch Window’ script Service Plans.Windows Servers.Managed 24x7 and will attempt to fix the issue. Service Plans.Windows Servers.Managed 8x5

PO Box 56506, Houston, TX 77256-6506 | p: 713.403.9150 | f: 713.621.1826 | www.aldridge.com | [email protected]

Service Plans.Windows Workstations.Managed Checks computer for updates that were pushed and failed 24x7 and where the computer has checked in within the past day. Service Plans.Windows Workstations.Managed ~Autofix Action UPDATES – If conditions are met, calls the ‘Monitor Missing Critical Antivirus 8x5 Daily Missing Critical Failed Patches’ script which will attempt to fix the issue. Refer to Checks Service Plans.Windows Workstations.Managed Patches notes in Overview for additional information on Autofix HAAS actions. Service Plans.Windows Servers.Managed 24x7 Service Plans.Windows Workstations.Managed Checks event logs for failed automatic updates and where 24x7 UPDATES – computer has checked in within the last 1400 minutes. If Service Plans.Windows Workstations.Managed ~Autofix Action Failed these conditions are met, the ‘Monitor Failed Patch Installs’ Internal 8x5 Daily Failed Patch Automatic script is called which will attempt to fix the issue. Refer to Monitors Service Plans.Windows Workstations.Managed Installs Updates notes in Overview for additional information on Autofix HAAS actions. Service Plans.Windows Servers.Managed 24x7 Service Plans.Windows Workstations.Managed 24x7 Service Plans.Windows Workstations.Managed UPDATES - Default – Do Updates Checks for patches installed within the last day. 8x5 Daily Installed Nothing Installed Service Plans.Windows Workstations.Managed HAAS Service Plans.Windows Servers.Managed 24x7 Service Plans.Windows Workstations.Managed 24x7 Service Plans.Windows Workstations.Managed UPDATES – Monitors Windows and Macintosh machines for missing 8x5 Default - Internal Missing Service service packs. If there are missing service packs, a ticket is Service Plans.Windows Workstations.Managed Daily Create Monitors Pack created. HAAS Ticket Service Plans.Windows Servers.Managed 24x7 Service Plans.MAC Workstations.Managed 24x7 S i Pl MAC W k i M d 8 UPDATES – ~Autofix Action Monitors new patches that have been detected Service Plans.Windows Servers.Server Internal New Daily New Unapproved within the past 24 hours. Roles.MSP Specific Servers.TAC Agent Server Monitors Unapproved* Patches

Service Plans.Windows Workstations.Managed 24x7 Checks for Windows updates that haven’t run in the last 30 Service Plans.Windows Workstations.Managed UPDATES – Default – Create Internal days. If there are updates that have not run in the past 30 8x5 Daily Out of Date Ticket Monitors days, a ticket is created. Service Plans.Windows Workstations.Managed HAAS Service Plans.Windows Servers.Managed 24x7

PO Box 56506, Houston, TX 77256-6506 | p: 713.403.9150 | f: 713.621.1826 | www.aldridge.com | [email protected]

Checks if patching requires a reboot and if computer is not a server and has checked in within the last 15 minutes will call the ‘Monitor Prompt User Reboot’ script which will prompt Service Plans.Windows Workstations.Managed UPDATES – 24x7 Every six ~Autofix Prompt Internal Reboot the user to restart the computer and if the user says no then hours User Reboot Monitors Pending it will reschedule itself for 60 Service Plans.Windows Workstations.Managed mins later. This script will continuously ask the 8x5 user to restart until the computer restarts and the flag is reset.

Uptime Table 25: Internal Monitor Types—Uptime

Alert Report Monitor Name Description Groups Interval Template Category

UPTIME - Service Plans.Windows Workstations.Managed Default - Over 1 Month Checks computer’s uptime to see if computer has not been rebooted in 24x7 Internal Daily Create Without over a month and if it hasn’t, creates a ticket. Service Plans.Windows Workstations.Managed Monitors Ticket Reboot* HAAS

UPTIME - SVR Default - Checks servers’ uptime to see if server has not been rebooted in over a Internal 1 Mo. Since Service Plans.Windows Servers.Managed 24x7 Daily Create month and if it hasn’t creates a ticket. Monitors Reboot* Ticket

UPTIME - Checks computer’s uptime to see if computer has not been rebooted in Service Plans.Windows Workstations. WKS 2 Weeks two weeks. If it has not, the ‘Monitor Reboot Computer’ script will be called Managed 24x7 ~Autofix Action Internal Daily Since to fix the issue. Refer to notes in Overview for additional information on Service Plans.Windows Workstations. Reboot Computer Monitors Reboot* Autofix actions. Managed HAAS

PO Box 56506, Houston, TX 77256-6506 | p: 713.403.9150 | f: 713.621.1826 | www.aldridge.com | [email protected]