This commit is contained in:
Mike McFetridge
2026-07-20 09:23:17 -04:00
parent c1315882da
commit 72272e4006
3179 changed files with 562960 additions and 14 deletions
@@ -0,0 +1,5 @@
I created an Orchestration Group in MECM named “AD Domain Controllers” and added all the AD domain controllers to this group. I created two scripts, one that will stop and disable the service (AATPsensor) before the server is patched and restarted and another one that will run after the server is restarted to re-enable and start the service (AATPsensor).
 
I added to the script an entry that will create an eventlog event in the System eventlog. EventID number is 21589 that we can search in Splunk to see if this works.
 
write-eventlog -LogName system -source $source -EventId 21589 -EntryType Information -Message $mesg