Accenture MDR Quick Start Guide for Microsoft® ACS

This quick start guide will help Accenture MDR customers configure Microsoft® ACS to allow log collection from the Log Collection Platform (LCP).

The document includes the following topics:

Supported Versions

A list of supported versions is available in the Accenture MDR Supported Products List document (Accenture_MDR_Supported_Products_List.xlsx) which can be found in

Accenture MDR Portal - https://mss.accenture.com/PortalNextGen/Reports/Documents

Port Requirements

Table 1-1: Port requirements for LCP communication.

Configuring Microsoft ACS

To configure Microsoft ACS, follow the steps below.

I. Configure for log collection.

1. Go to Control Panel > Administrative Tools > Local Security Settings > Local Policies > Audit Policy.

2. For every policy, enable or disable audit logging; if you enable audit logging, choose Log Audit Failure and Audit Success messages, if required.

  Note: For more information, refer to the following documents: 

• Microsoft System Center 2012 for Operations Manager and

• How to Deploy Audit Collection Services (ACS) in SCOM 2012.

II. Create a read-only database user account for Microsoft SQL Server.

    LCPs that fetch data from databases require that you create a read-only database user account so that the LCP can query for events.

    To create a read-only database user for Microsoft SQL Server:

1. From the Windows Start menu, choose Run, and then type the following command: cmd

2. Navigate to the directory that contains the OSQL.EXE file.

  3. Log in as the system administrator and type the following command: sqlcmd -S ip_address_or_host_name -U <admin user> -P <admin_user_password>

  4. At the command prompt, type the following commands:

         EXEC sp_addlogin '<username>', '<Password>', '<databasename>'

         USE <databasename>

         CREATE USER <username> FOR LOGIN <username>

         EXEC sp_addrolemember 'db_datareader', '<username>'

         GRANT SELECT ON dtPartition to <username>;

         GRANT SELECT ON dtCategory to <username>;

         GRANT SELECT ON dtMachine to <username>;

         GRANT SELECT ON dtSource to <username>;

         go

LCP Configuration Parameters

Table 1-2: The Microsoft ACS event collector(DB-3480) properties to be configured by MDR are shown in the table.