deliver it as a service -...

Self

Service

Service

Delivery &

Automation

Deliver IT as a Service

Deploy

Configure

Service

Model

DC

Admin

Operate

Monitor

Virtual

Physical

Public Cloud

Private

Cloud

Virtual Machine Manager

Operations Manager

App Controller

Service Manager Service Manager

Orchestrator

Configuration

Manager

Data Protection

ManagerApp

Owner

Application Management Service Delivery & Automation Infrastructure Management

REPORTINGPROCESS

AUTOMATIONINTEGRATION

Monitor & Operate Service Delivery

Integration across System Center and the enterprise to give end to end visibility of IT services and components

End-to-end visibility of IT services and components

Business rules built into service level agreements,

assignment and notification rules, and activity workflows to drive standardized and consistent service support,

change, and release management

Service level agreements

Release management

Proactive & Reactive Operations

Consolidated data warehouse for reporting on

performance of service delivery activities across

multiple products

Configuration Manager

Operations Manager

Virtual Machine Manager

Service Manager

Active Directory

Any SQL Server database

ProcessesRequest Template

Standardize Offerings

SERVICE REQUESTS REQUEST OFFERINGS AUTOMATION

Define the services that IT

will deliver to its

consumers.

Specify requests available

for each service and what

information will be

required to fulfill each

request.

Define the supporting

organizational activities

needed to deliver on the

request and ensure

traceability and

compliance.Cloud

services

Server

services

Storage

services

Request to

extend VM

Decommis

sion VMs

Request

new VM

Cost and SLA

information

Knowledge

articles

Input values

Assignment

Notification

Approval

PUBLISHED TO THE SERVICE CATALOG

Systems

automation

•

•

•

•

Classifications

Routing

Process AutomationNo

tifi

cati

on

s

Run books

Reporting

Application Monitoring

(Transactions, Components & Dependencies)

End User Experience

(First to Last Mile)

Infrastructure Monitoring

(Network, Servers, OS & Workloads)

Co

nsi

sten

t U

X

(Co

nso

le, W

eb

, Sh

are

Po

int)

Service Owner

Infra Owner

CIO

SCOM 2012 Audit Collection Services

What does SCOM offer ?

• Best in class Server, OS and Workload

monitoring

• Existing Management Packs

• Agentless Exception Monitoring (AEM)

• Distributed Application Designer

(DAD)

• Reporting & Data Warehouse

• Synthetic Transactions & Templates

• Gateway Servers

• PowerShell

• Service Level Tracking (SLA/SLO)

• Active Directory Integration

• Notifications & Subscriptions

- Default Audit Reports from A.C.S on Active Directory

Account Management

• User account created/deleted, enabled/disabled

• Administrator groups changes

• Group membership changes

• Changing someone else’spassword

• Computer accountcreated/deleted

Access Violation

• Unauthorized access attempts

• Account locked

Policy Changes• Audit policy changed

• Object permissions changed

• Account policy changed

• Privilege added/removed

System Integrity• Lost events

• Audit failure

• Log cleared

User Account Creation Audit Report

System Center Audit Collection

Password Changes by non-owners Audit Report


User Accounts Disabled Audit Report


Mail Box Account Creation Audit Report

Mail Box Account Deletion Audit Report

SCOM 2012 Auditing on Exchange Server 2010

MS Exchange 2010 Changes by Server Audit Report

Exchange Server 2010 Auditing

Microsoft Exchange Server 2010 Delegation Audit

Report


File Server Permission Change Report


File Server Copy & Paste Report


• Send Cisco command and log audit change records by System Center

2012

• Web-based interface for change request submission

• Workflow approval engine

• Role-based authorization

• Change reports

Email notification upon

new form submitted

Columns can be sorted. Column names can be customized

Form DMS feature (check-in and check-out)

Documents can be categorized into different

folders for easy management and permission control

Portal information can be searched

By pressing the “New Document” to open a

new service “RequestForm”

Customer information from

database

“Selection Tap” to select

different companies

All the “Actions” will be converted

into Telnet Commands

Specific a “Date” & “Time” to

perform actions

Approver can be retrieved from AD /

other external data source without

manual input

Approval Status

After the “Service Request

Form” has been submitted, the

approver will receive an Email

Alert and a linkage for

redirecting into the SharePoint

Form

After submitting

the form, all the

customer

information and

configuration

changes will be

grey out and won’t

be able to change

it

Different “Configuration

Change Requests” will be

also added into the

SharePoint’s Calendar

Once the Orchestrator

Workflow Engine has been

tracked by the approved

“Change Request Form”, it

will automatic run the

predefined “Run book” and

send out different Telnet

commands to network

devices

Data can be passed

between action

objects to simulate

parameter passing in

programming. Time is

dramatically saved

without any single

program coding

Parameters are formatted as macro variable for whole workflow re-use and

easy for reading and tracing

[email protected]@microsoft.com (Microsoft VTSP)