Submit a ticketCall us

Systems Monitoring for Dummies
Our new eBook will teach you the fundamentals and help you create monitors and alerts that are effective, meaningful, and actionable. Monitoring is more than a checkbox on your to-do list. This free eBook will give you practical advice to help you succeed in all aspects of monitoring – discovery, alerting, remediation, and troubleshooting. Don’t miss out on this indispensable resource for newbies, experienced IT pros, and everyone in between. Register Now.

Home > Success Center > Archive > 2017October27 - Deletes > Using the User-based Active Response

Using the User-based Active Response

Created by Caroline Juszczak, last modified by Kevin.Swinson on Oct 27, 2017

Views: 23 Votes: 0 Revisions: 5

Use the following user-based active responses to perform Windows-based actions related to users, groups, and domains on your LEM agents.

  • Add Domain User To Group
  • Add Local User To Group
  • Create User Account
  • Create User Group
  • Delete User Account
  • Delete User Group
  • Disable Domain User Account
  • Disable Local User Account
  • Enable Domain User Account
  • Enable Local User Account
  • Log Off User
  • Remove Domain User From Group
  • Remove Local User From Group
  • Reset User Account Password

These actions are useful to respond to unauthorized change management activity and automate user-related maintenance. They can be automated in a LEM rule, or executed manually from the Respond menu in the LEM Console.

Configure an active response connector on a LEM agent

Configure the Windows Active Response connector on each LEM agent that require active responses.

You can deploy your LEM agents and configure the Windows Active Response connector based on where you want to perform these actions. To perform actions at the domain level, deploy a LEM agent to at least one domain controller. To perform actions at the local level, deploy a LEM agent to each computer that requires a response.

  1. Open your LEM console and log in to your LEM Manager as an administrator.
  2. Click Manage > Nodes.
  3. Locate the agent in the Nodes grid that requires a connector.
  4. Click File:Success_Center/Reusable_content_-_InfoDev/LEMUserGuide_MT/0E0/190/Button-Gear_18x15.png next to the agent and select Connectors.
  5. Enter Windows Active Response in the Search box at the top of the Refine Results pane.
  6. Click File:Success_Center/Reusable_content_-_InfoDev/LEMUserGuide_MT/0E0/190/Button-Gear_18x15.png next to the connector and select New.
  7. Enter a custom Alias for the new connector, or accept the default.
  8. Click Save.
  9. Click File:Success_Center/Reusable_content_-_InfoDev/LEMUserGuide_MT/0E0/190/Button-Gear_18x15.png next to the new connector and select Start.
  10. Click Close to exit the Connector Configuration window.

 

Last modified

Tags

Classifications

Public