PTA Agent Hostbased Monitoring

Question

PTA Agent Hostbased Monitoring

Mahesh Aralelemath 386

Hi All,

Any recommendation or refernece document on PTA Agent and AADConnect to not to monitor through Host Based Logging? Are there any issues identified or impact?

• For PTA Agent and AADConnect Servers - “Do Microsoft specifically state that Host Based Logging should be avoided?”

AmanpreetSingh-MSFT 56,936 Reputation points Moderator

2021-01-22T07:53:17.363+00:00

Hi @Mahesh Aralelemath · Could you please elaborate more on the Host based Monitoring/Logging you are talking about?
Mahesh Aralelemath 386 Reputation points

2021-01-22T08:25:40.86+00:00

Hi Amanpreet,

Host based monitoring is referred to Monitoring PTA Agent/AADConnect Server using Security tools like Carbon Black. This is to ensure the security controls.
AmanpreetSingh-MSFT 56,936 Reputation points Moderator

2021-01-25T17:48:32.55+00:00

Hi @Mahesh Aralelemath · I couldn't find this information. I have reached out to the product team. I will post the answer once I have an update on this.
Mahesh Aralelemath 386 Reputation points

2021-01-25T17:51:44.287+00:00

Thanks @AmanpreetSingh-MSFT

Will wait to hear if anything new to learn :)

Regards
Mahesh

Answer accepted by question author

0 additional answers

Your answer

AmanpreetSingh-MSFT 56,936 Reputation points Moderator

2021-01-22T07:53:17.363+00:00

Hi @Mahesh Aralelemath · Could you please elaborate more on the Host based Monitoring/Logging you are talking about?
Mahesh Aralelemath 386 Reputation points

2021-01-22T08:25:40.86+00:00

Hi Amanpreet,

Host based monitoring is referred to Monitoring PTA Agent/AADConnect Server using Security tools like Carbon Black. This is to ensure the security controls.
AmanpreetSingh-MSFT 56,936 Reputation points Moderator

2021-01-25T17:48:32.55+00:00

Hi @Mahesh Aralelemath · I couldn't find this information. I have reached out to the product team. I will post the answer once I have an update on this.
Mahesh Aralelemath 386 Reputation points

2021-01-25T17:51:44.287+00:00

Thanks @AmanpreetSingh-MSFT

Will wait to hear if anything new to learn :)

Regards
Mahesh

Answer 1

AmanpreetSingh-MSFT 56,936 Moderator

Hi @Mahesh Aralelemath · Thank you for your patience.

In regards to Microsoft/OS tools, we only have Perfmon counters that you could run to monitor #PTA authentications, #PTA failed authentications and #PTA successful authentications and Error counters (# PTA authentication errors). Other than this, all our errors are recorded on the Azure AD Portal.

You could always monitor the service status from a host based logging.

-----------------------------------------------------------------------------------------------------------

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Mahesh Aralelemath 386 Reputation points

2021-01-27T15:04:07.687+00:00

Thanks Amanpreet

Regards
Mahesh

Share via

PTA Agent Hostbased Monitoring

0 additional answers

Your answer