Mumbai Security and Compliance User Group

Hi All,

There are list of Troubleshooting Articles which may be worth Reading for Installation & Troubleshooting the Issues related Windows 2008 vista collector in SSIM.

Connect Articles:

Troubleshooting for Windows 2008 R2 Event collection using Windows Vista Event Collector. :

https://www-secure.symantec.com/connect/articles/troubleshooting-windows-2008-r2-event-collection-using-windows-vista-event-collector

Contribution of Domain controllers in Integration of Windows 2008 with SSIM.

https://www-secure.symantec.com/connect/articles/contribution-domain-controllers-integration-windows-2008-ssim

Best practices for integrating windows 2008 server with domain account.

https://www-secure.symantec.com/connect/articles/best-practices-integrating-windows-2008-server-domain-account

KB Articles:

How to install the Microsoft Windows Vista collector to remotely collect from a Windows 2008 Server Domain Controller via off-box agent

http://www.symantec.com/docs/TECH94371

Authentication is failing when using a domain account with the Microsoft Vista and Microsoft Windows Server 2008 Collector

http://www.symantec.com/docs/TECH166517

How to enable Windows Remote Management (WinRM) via Group Policy Objects (GPO) in Windows 2008 R2 to get Windows 2008/Vista Collector working.

http://www.symantec.com/docs/TECH164831

msvista event collector 4.4 is not populating Windows Message and description field after March LU only on Windows 2008 SP2 using Kerberos

http://www.symantec.com/docs/TECH170221

Kerberos authentication with Symantec Event Collector 4.4 for Microsoft® Vista and Microsoft Windows Server 2008

http://www.symantec.com/docs/HOWTO42265

Collecting Events from a Windows 2008 R2 machine using the MS Vista Event Collector

http://www.symantec.com/docs/TECH134081

Can the Windows Event collector v 4.3 collect the events from a Windows 2008 server?

http://www.symantec.com/docs/TECH162793

The agentmgmt.bat utility does not work on Windows 2008

http://www.symantec.com/docs/TECH163957

Creating event filter for User Name field for Windows Vista and Windows Server 2008 Collector

http://www.symantec.com/docs/TECH165555

Symantec Event Collector for Microsoft Vista and Microsoft Windows Server 2008 missing description field

http://www.symantec.com/docs/TECH146383

Configuring the MS Vista collector to pull events from a Windows 2008 R2 member server using a domain account and kerberos authentication using the HTTP protocol.

http://www.symantec.com/docs/TECH156625

How to export a Windows 2008 certificate from a DC acting as CA, then importing the cert into the SSIM Agent

http://www.symantec.com/docs/TECH144321

Configuring Symantec Event Collector 4.4 for Microsoft Vista and Microsoft Windows Server 2008 to Collect Events Using HTTP Transport With Domain Accounts

http://www.symantec.com/docs/TECH136499

Authentication Types available with the Symantec Event Collector for Microsoft Vista 4.4

http://www.symantec.com/docs/TECH181039

Active Directory Integration with Symantec Security Information Manager 4.7 using a Domain Controller Certificate

http://www.symantec.com/docs/TECH171839

Windows Vista Collector is polling events only every 5 minutes

http://www.symantec.com/docs/TECH123571

MS Vista 4.4 collector only uses one KDC in a domain environment with multiple domain controllers

http://www.symantec.com/docs/TECH146587

How to delete a winrm Listener created with the quickconfig command

http://www.symantec.com/docs/TECH94458

How to create a winrm listener on a custom port

http://www.symantec.com/docs/TECH97514

Windows Vista Collector, CustomSD, SDDL, Security Log and how it works

http://www.symantec.com/docs/TECH98010

Hope this helps you all!!