SCOM 2012R2 DW retention

utility and method still works in 2012R2

https://blogs.technet.microsoft.com/kevinholman/2010/01/05/understanding-and-modifying-data-warehouse-retention-and-grooming/

IIS security

If you have an account like contoso\sharepoint-farm  in your IIS be aware that you can run locally appcmd command and obtain the password in clear text.  Message: never use powerfull accounts in IIS. There are some people that use Domain Admin accounts there.