Kitaab

We faced an issue with Discovery wizard getting stuck on discovering Windows objects in SCOM 2016 Turned out that we were running out of space for OpsmgrDB Make sure OpsmgrDB is set for autogrowth as it is not by default Hope this helps

I was trying to install SCOM  2012 R2 agent from the console on a couple of our remote DR servers, However we received the following error message every time we tried the install. "The operations manager server cannot process the install/uninstall request for computer. Failure of operating system version verification." As checked RDP  and  Ping worked fine, There was no firewall issue as it was disabled. Permissions for Agent account were correct. However when we tried to access the \\server\C$ it failed. It turned out WAN optimization  software was blocking CIFS access As soon as we made changes to allow CIFS access , SCOM agent installation worked fine. Hope this helps.

We faced an issue with SCOM 2012 SP1 Reporting Pane. When an Admin user was launching the console from one of the client Machines that had SCOM 2012 console installed locally and Clicking on the Reporting pane , it didn't display the reporting tree structure. Just blank reporting Pane was displayed. SCOM 2012 SP1 console was installed on the client machine and the user used Run As different user (the user that had admin privileges in SCOM) As we checked more into the issue , it seemed that IE proxy was causing it. We opened IE under the Admin user Account credentials (Run As Different user) , changed the proxy settings to include correct proxy details. After that the reports tree showed up for the Admin user. Hope this helps.

We faced an issue where in the users who were part of the  SCOM 2012 Report Operators were unable to run some Custom Reports. These reports were using a Custom DataSource created for the OpsMgrDB Whenever user tried to open the report ,we received following alert on the SQL Reporting server. he Permission on SSRS is "System User" for 2537B367-6D74-4110-B0B5-1F51C1B1B09E Log Name:      Application Source:        MSSQLSERVER Date:          10-05-2013 15:41:01 Event ID:      18456 Task Category: Logon Level:         Information Keywords:      Classic,Audit Failure Description: Login failed for user 'Domain\User01'. Reason: Token-based server access validation failed with an infrastructure error. Check for previous errors. [CLIENT: <local machine>] This is what we did and it worked for us: In the Datasource we modified the C...

We faced this issue with  SOCM 2012 SP1  very recently. I received an alert the Operation manager resource pool has some issue , checked and found that the SDK and Data Access Service (OMSDK) and System Center Management Configuration were stopped on one of the management servers and do not start at all. When i try to start them manually , it comes up with the the message as shown: I saw the following Events on the Management servers: Event ID: 1000 Faulting application name: Microsoft.EnterpriseManagement.Monitoring.Console.exe, version: 7.0.9538.0, time stamp: 0x50903ed4 Faulting module name: KERNELBASE.dll, version: 6.1.7601.18015, time stamp: 0x50b8479b Exception code: 0xe0434352 Fault offset: 0x0000000000009e5d Faulting process id: 0x1d3c Faulting application start time: 0x01ce41887f1cbc6c Faulting application path: X:\Program Files\System Center 2012\Operations Manager\Console\Microsoft.EnterpriseManagemen...

If you face a condition where in the C:\ on server 2008 x64 (in my case SCOM 2007 R2 CU5 RMS server) becomes full and you have no more space and don't know what to delete : This is what i deleted and think didn't affect my sever. Clean up Winsxs a little bit: C:\Windows\winsxs http://blogs.technet.com/b/askcore/archive/2008/09/17/what-is-the-winsxs-directory-in-windows-2008-and-windows-vista-and-why-is-it-so-large.aspx Deleted the files under C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp  (5GB)  -- the file modified dates were 3 years ago. So i took a chance Move the archive Security Logs to other location : C:\Windows\System32\winevt\Logs (5GB) You can run Disk Cleanup utility (however you need to Install Desktop Experience feature on the server as Disk cleanup is not part of Windows 2008 and need to be added as a feature) Uninstalled programs from the server that no longer were needed. (e.g management...

Sometimes we need to create a rule for alerts using the Windows Event Ids I had a situation to alert on one such event: Event 6008  which is logged as a dirty shutdown. It gives the message "The previous system shutdown at time on date was unexpected" In order to create a Rule for unexpected Shutdown : i used the following method http://dynamicdatacenter.wordpress.com/2012/10/09/quick-win-scom-alert-rule-to-detect-server-reboot-shutdown/ Configuration for the Rule:  -System Log - Event ID: 6008 - Event Source: EventLog In order to test the monitor we can create a fake event using many methods: e.g using vbscript , eventcrete , logevent , powershell ,OpsMgr Script Each one has its Pro's and Con's http://ianblythmanagement.wordpress.com/2008/08/25/create-events/ I used the following powershell to create the fake event Write-EventLog -Logname System -Source EventLog -EventId 6008 -Message "This is a Fake Event"-EntryType ERROR Ho...

We implemented SCOM 2012 SP1 , We imported the latest Managemnet pack for monitoring Active Directory Somehow the topology views in AD management pack always remained not monitored. Here is what i checked : The agents on DC's was installed from within SCOM console after discovery We used a domain Administrator to install the agent and then the local system account as action account the DC's started alerting and we couldn't find any errors in the event logs , however the topology views all remained not Monitored. AD helper Object was installed on all the domain controllers as the agents were pushed from SCOM Console. I ran  hslockdown /L on the Domain controllers Local System Account (our default Action account) was not denied permission. Still i tried running Hslockdown "ManagemnetGroupName" /A "NT AUTHORITY\SYSTEM" But the topology views did not update. -Verified Agent proxy was enabled on all DC's and MS -All the agent...

When we enable ACS on the in SCOM environment , after a couple of days we can see what all is being collected. For us we were seeing a lot of events being collected and most of them were not useful for us to monitor: the final NOT Query filter i applied was: AdtAdmin /setquery /query:"SELECT * FROM AdtsEvent WHERE NOT (EventId=4776 OR EventId=4689 OR EventId=4688 OR EventId=4768 OR EventId=4769 OR EventId=4770 OR EventId=4771 OR EventId=4772 OR EventId=4696 OR EventId=5159 OR EventId=5152 OR EventId=5157 OR  PRIMARYUSER LIKE '%SVC%' OR PRIMARYUSER LIKE '%$%' OR TARGETUSER LIKE '%$%')" This reduced a lot of Noise in our environment. In order to enable this filter what we need to do is . Login to the ACS collector: Open command prompt Browse to the following directory: C:\Windows\System32\Security\AdtServer> Then Run the Query that i mentioned above. In the query i used PrimaryUser and TargetUser as filter PrimaryUser = Prim...

While Implementing monitoring for Schedule tasks with SCOM 2012 , we utilized a community management pack http://rburri.wordpress.com/2008/02/14/windows-scheduled-tasks-management-pack-for-opsmgr-2007/ After we imported the MP , we started receiving a lot of alerts related to some tasks which no one knew about . It was a schedule task related to User profile manager software that we had tested. We wanted to delete this schedule task on all the machines that raised the alert In order to find the machines , we used the following SQL query against Opsmgr db SELECT  MonitoringObjectPath,MonitoringObjectName, AlertStringName, AlertStringDescription, MonitoringRuleId, Name FROM Alertview WITH (NOLOCK) WHERE TimeRaised is not NULL AND AlertStringName like 'Scheduled Task failed to complete successfully' And MonitoringObjectName like '\updater.exe' Then i created a batch file with the following content schtasks /delete /F /TN "updater.exe" wher...

Noticed a strange behavior with new SCOM 2012 SP1 Web Application transaction and Availability Monitoring If we create a Web Application monitor for internal websites without the FQDN it doesn't work. e.g if we try and create the Web Application monitor to monitor : http://ourwebsite it Fails However http://ourwebsite.domain.com Works In SCOM 2007 R2 ,we dint face this issue. Maybe a Bug of somekind Hope this helps

Faced an issue when we created the Service Level Dashboard in SCOM 2012 As SLD can be created in the SCOM console in 2012 version of it , i went ahead and created a Distributed Application , then associated Service level monitoring with it. Finally i went ahead and created the SLD from SCOM Console. However once the dashboard was created it did not show any data. The Image is shown here: As i was checking online i found a thread on technet forum: http://social.technet.microsoft.com/Forums/en-US/operationsmanagergeneral/thread/def9592c-0de6-47e5-9312-5a5fbbc8df34 Accordingly i checked the Data Warehouse Synchronization Server Discovered Inventory in our case. It was empty. Image as shown: Ran the Powershell Script given in the technet forum: #Note: change these values appropriately $OperationalDbSqlServerInstance = "SDOHHQDBA107.mog.maerskoil.com" $OperationalDbDatabaseName = "OperationsManager" $DataWarehouseSqlServerInstance = "SDOHH...

We had a requirement to monitor the the output of a Query (Stored Procedure in our case) and the Alert based on the result it generated. In Our case we wanted to monitor something like SELECT statusno from XXX table  If statusno > 0 alert = OK Else Alert = fail End if So it was like If the Output is anything but 0 we wanted an alert. I referenced these 2 articles to create our Script based Monitor http://systemcenter.no/?p=190 http://www.systemcentercentral.com/downloads/downloadsdetails/tabid/144/indexid/7362/default.aspx I faced some issues where in the script gave errors and did not execute correctly. The Script i used and that worked for us is a slight modification of one listed here  http://systemcenter.no/?p=190  to suit our requirement. ****************************************************************************** Dim objCN, strConnection Dim objAPI, oBag Set objCN = CreateObject("ADODB.Connection") Set objAPI = CreateObject("MOM.Scr...

Update Sept 23 2012 ******************************** This may not work as i have started to see this issue again ******************************************* I am facing issues while trying to access the AppAdvisor after Installing SCOM 2012 After troubleshooting for a while now i have seen different behaviors and errors that have changed over times. First Error: While Trying to access the http://servername/AppAdvisor or http://servername/AppDiagnostics site locally or remotely it gave an error The event log on the SCOM Server Showed the following Log Name:      Application Source:        ASP.NET 4.0.30319.0 Date:          20-08-2012 11:27:41 Event ID:      1309 Task Category: Web Event Level:         Warning Keywords:      Classic User:          N/A Computer:      SCOMSERVE...