1.2 Understanding Windows Knowledge Script Categories

AppManager for Windows provides Knowledge Script categories for different versions of the Microsoft Windows operating system. These Knowledge Script categories are grouped according to functional areas.

Typically the Knowledge Script categories are upward-compatible. For example, the NT Knowledge Scripts and NTAdmin Knowledge Scripts run on Windows Server 2003, Windows XP, Windows Vista, Windows Server 2008, Windows Server 2008 R2, Windows 7, Windows 8, Windows 10, and Windows Server 2012. The WIN2000 Knowledge Scripts run on Windows Server 2003, Windows Server 2008, and Windows Server 2012.

Use the existing categories of Knowledge Scripts, such as NT, NTAdmin, and WIN2000, to monitor Windows Server 2008 and Windows Server 2012 computers.

There is no separate category of Knowledge Scripts for Windows Server 2008 or later.

1.2.1 NT Knowledge Scripts

Knowledge Scripts in the NT category perform monitoring functions for all Windows versions in the following areas:

Tasks Performed	Knowledge Scripts to Use
Discovery of resources for monitoring	Discovery_NT Run the Discovery_NT Knowledge Script before you run any other Knowledge Script.
Disk resource monitoring	LogicalDiskStats, DiskSpace, PhysicalDiskStats, PagingHigh
File system monitoring	FileChanged, FilesCompare, FileSizeSum, FilesOpen, FindFiles, FolderFileCount, FolderSize, SharedFiles
Services monitoring	ConfigRemoteServiceDown, ConfigServiceDown, RemoteServiceDown, RemoteServiceDownLR, ServiceChange, ServiceDown, ServiceDownLR, ServiceHung, ServiceRemove
Server monitoring	ServerBusy, ServerBytes, ServerError, ServerTimeout
CPU, memory, and process monitoring	CpuByProcess, CpuLoaded, CpuResource, MemByProcess, MemUtil, ProcessDown, Processes, ProcessUp, RunAwayProcesses, TopCpuProcs, TopMemoryProcs, UnixRemoteProcessDown
Network connectivity monitoring	DNSConnectivity, FailedLogon, NetSession, NetworkBusy, PortHealth
Printer monitoring	PrinterHealth, PrinterQueue
System monitoring	IntervalCounter, RegistryChange, SystemUpTime, TrustRelationship

1.2.2 NTAdmin Knowledge Scripts

Knowledge Scripts in the NTAdmin category perform system administration functions, including create, update, and delete functions, in the following areas:

Tasks Performed	Knowledge Scripts to Use
Monitoring of users, user groups, and passwords	AddUser, AddUserViaAD, DeleteUser, AddGroup, AddGroupViaAD, DeleteGroup, ChangePassword
File maintenance monitoring	CloseSharedFiles, FileCheck
Service monitoring	ModifyServiceConfig, RestartService
System monitoring	CheckServicePack, RegistrySet, RunDOS, SNMPSet, SyncTime

1.2.3 WIN2000 Knowledge Scripts

Knowledge Scripts in the WIN2000 category add or extend monitoring in the following areas:

Tasks Performed	Knowledge Scripts to Use
Domain Name Service (DNS) monitoring	ADDNSRegistrationEventLog, DNSAXFRStat, DNSDatabaseNodeMemory, DNSDynaUpdateError, DNSDynaUpdateStat, DNSEventLog, DNSRecursiveQuery, DNSSecureUpdate, DNSTotalQuery, DNSWINSStat, DNSZoneTransfer
File system monitoring	DFSLinkDown, DFSServiceDown, DiskQuotaStatus
File Replication Service (FRS) monitoring	FrsBusy, FrsEventLog, FrsReplicaError, FrsServiceDown
Group Policy monitoring	GroupPolicyAddRemove, GroupPolicyCount, GroupPolicyLinkSnapshot, GroupPolicyRefresh, GroupPolicySnapshot
Security monitoring	IASServiceDown, LSASSWatch
Remote Storage service monitoring	RemoteStorageEventLog, RemoteStorageServiceDown
Quality of Service (QoS) and Resource Reservation Protocol (RSVP) monitoring	RSVPEventLog, RSVPServiceDown
Simple Message Transfer Protocol (SMTP) monitoring	SMTPEventLog, SMTPQueues, SMTPServiceDown
Microsoft Windows Installer monitoring	MSIPackagesChange
Printer monitoring	PrinterErrors, PrinterEventLog, PrinterQueue, PrinterUtil

1.2.4 WIN2003 Knowledge Scripts

Knowledge Scripts in the WIN2003 category perform monitoring functions in the following areas:

Tasks Performed	Knowledge Scripts to Use
Automatic Update service monitoring	AUDownLoaded, AUOptionChange, AUServiceDown, AUVerifyHotFix
Background Intelligent Transfer Service monitoring	BITSJobProgress, BITSJobsActive, BITSJobsError, BITSJobState, BITSJobStats, BITSServiceDown
Common Language Runtime monitoring	CLRConnectionPools, CLRContention, CLRExceptions, CLRHeap, CLRJit, CLRMemProfile, CLRNetworking, CLRRemoting, CLRThreads
FAX service monitoring	FaxActivity, FaxEventLog, FaxServiceDown, FaxTotalFailed, FaxTotalTime
Plug-and-Play monitoring	PNPDeviceChange, PNPDeviceErrors
System Restore service monitoring	SRDiskPercent, SREventLog, SRLifeInterval, SRPoints, SRScheduledInterval, SRServiceDown
Printer monitoring	PrinterStuckJobs
System monitoring	ActivationGracePeriod, DCOMAppChange, OpenSystemSlots

1.2.5 ASYNC Knowledge Scripts

Knowledge Scripts in the ASYNC category monitor Microsoft Windows servers and workstations for events as they occur:

Tasks Performed	Knowledge Scripts to Use
File system monitoring	FilesChanged
Event monitoring	NTEventLog, NTEventLogRx
Simple Network Message Protocol (SNMP) monitoring	SNMPTrap

1.2.6 NetServices Knowledge Scripts

Knowledge Scripts in the NetServices category provide monitoring functions in the following areas:

Tasks Performed	Knowledge Scripts to Use
Distributed Host Configuration Protocol monitoring	DHCPHealthCheck, DHCPLeases
Domain Name System monitoring	DNSHealthCheck, DNSSync
Remote Access Server monitoring	RASConnections, RASErrors, RASHealthCheck, RASStat
WINS monitoring	WINSConflict, WINSFailure, WINSHealthCheck, WINSQueries, WINSReplication, WINSStat

1.2.7 General Knowledge Scripts

Knowledge Scripts in the General category provide monitoring functions in the following areas:

Tasks Performed	Knowledge Scripts to Use
File system monitoring	AsciiLog, AsciiLogRX
Event monitoring	EventLog, EventLogRX, ShortEventLog
Service monitoring	ServiceChange, ServiceDown, ServiceHung
Network connectivity monitoring	ADAuthentication, ConfigMachineDown, MachineDown, MachineDownLR, PingMachine
System monitoring	Counter, CounterCorrelate, WMICounter
Simple Network Message Protocol (SNMP) monitoring	SNMPGet