Compose-Files/Backups/Miker/.trash/DFI Health alerts when Domain Controllers are patched and restarted.md

I created an Orchestration Group in MECM named “AD Domain Controllers” and added all the AD domain controllers to this group. I created two scripts, one that will stop and disable the service (AATPsensor) before the server is patched and restarted and another one that will run after the server is restarted to re-enable and start the service (AATPsensor).
 
I added to the script an entry that will create an eventlog event in the System eventlog. EventID number is 21589 that we can search in Splunk to see if this works.
 
write-eventlog -LogName system -source $source -EventId 21589 -EntryType Information -Message $mesg