Is it possible to decouple monitoring of Active Directory lsass.exe from the bundled Windows System process group?

[jeremy_cook]

We are after specific monitoring of lsass.exe but even creating a custom process monitor does not reveal anything. I understand the special group Windows Services can not have processes added to it, but can we separate some of them out?

[Lukasz_Wrona · Accepted solution]

Hi. Unfortunately this is not possible in current version of our product.

Process Groups are created via a sequence of classifiers, and Windows System is created near the beginning of this process. Changing how lsass.exe is grouped would need to be handled as a feature request, but from code perspective, there are no huge obstacles to implementing it.

[jean_louis_lorm]

Hello,

There is a RFE /

https://answers.dynatrace.com/spaces/483/dynatrace...

Regards,

JLL