Hello there,
I am currently seeing this problem on Server 2008 R2 DCs. I've got a SCOM 2012 R2 environment running, monitoring 4 Exchange 2013 boxes, running Server 2012 R2 and 5 DCs running Server 2008 R2. All Systems have McAfee VirusScan installed.
The Exchange Servers are running fine - no problems in Agent communication.
For the DCs, I've set an action account which is Domain Admin. I know thats not the best way, but for now, it will do. The Agents run fine at first (running under local system) and then, after a while, return no information and in SCOM, they are greyed out as not being monitored. We've been able to rule out McAfee, as this happens, even if VirusScan is completely removed.
I've found this article: http://ianblythmanagement.wordpress.com/2009/02/16/health-service-unloaded-system-rules-event-1102/
But I don't have that problem on the server. No C:\program file, just the normal folders. This is driving me insane, as I have no idea, why the SCOM Agent ist acting this way on the DCs only.
Does anyone have any helpfull ideas, where I could possibly look?
Best Regards,
Fred