Skip to main content

Posts

SCOM Custom reports Event ID 18456

We faced an issue where in the users who were part of the  SCOM 2012 Report Operators were unable to run some Custom Reports. These reports were using a Custom DataSource created for the OpsMgrDB Whenever user tried to open the report ,we received following alert on the SQL Reporting server. he Permission on SSRS is "System User" for 2537B367-6D74-4110-B0B5-1F51C1B1B09E Log Name:      Application Source:        MSSQLSERVER Date:          10-05-2013 15:41:01 Event ID:      18456 Task Category: Logon Level:         Information Keywords:      Classic,Audit Failure Description: Login failed for user 'Domain\User01'. Reason: Token-based server access validation failed with an infrastructure error. Check for previous errors. [CLIENT: <local machine>] This is what we did and it worked for us: In the Datasource we modified the C...

Data Access Service (OMSDK) and System Center Management Configuration do not start Event Id 1000 and 1026

We faced this issue with  SOCM 2012 SP1  very recently. I received an alert the Operation manager resource pool has some issue , checked and found that the SDK and Data Access Service (OMSDK) and System Center Management Configuration were stopped on one of the management servers and do not start at all. When i try to start them manually , it comes up with the the message as shown: I saw the following Events on the Management servers: Event ID: 1000 Faulting application name: Microsoft.EnterpriseManagement.Monitoring.Console.exe, version: 7.0.9538.0, time stamp: 0x50903ed4 Faulting module name: KERNELBASE.dll, version: 6.1.7601.18015, time stamp: 0x50b8479b Exception code: 0xe0434352 Fault offset: 0x0000000000009e5d Faulting process id: 0x1d3c Faulting application start time: 0x01ce41887f1cbc6c Faulting application path: X:\Program Files\System Center 2012\Operations Manager\Console\Microsoft.EnterpriseManagemen...

Low disk space on C: on windows 2008 x64 server

If you face a condition where in the C:\ on server 2008 x64 (in my case SCOM 2007 R2 CU5 RMS server) becomes full and you have no more space and don't know what to delete : This is what i deleted and think didn't affect my sever. Clean up Winsxs a little bit: C:\Windows\winsxs http://blogs.technet.com/b/askcore/archive/2008/09/17/what-is-the-winsxs-directory-in-windows-2008-and-windows-vista-and-why-is-it-so-large.aspx Deleted the files under C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp  (5GB)  -- the file modified dates were 3 years ago. So i took a chance Move the archive Security Logs to other location : C:\Windows\System32\winevt\Logs (5GB) You can run Disk Cleanup utility (however you need to Install Desktop Experience feature on the server as Disk cleanup is not part of Windows 2008 and need to be added as a feature) Uninstalled programs from the server that no longer were needed. (e.g management...

Exporting Group Membership from AD

Sometimes you may find yourself in a situation where you have to export the members of a security group from AD. In such a situation we can use following commands : (On a server were AD tools - remote Administration tools are installed) dsquery group -name “Group Name” | dsget group -members > users.csv However this will give results with the respective LDAP paths e.g CN=Server01,OU=V,OU=Servers,OU=Computers,OU=Loc,DC=domain,DC=com You might have only wanted to get the name not the netire path. Just open the csv file you exported and  (Press Ctrl + H )  i.e Find and  Replace these 1 by 1 Use Replace All option , the image is shown here: OU=* CN= , Additionally you may also use the following command: net group “Group Name” /domain > users.csv Again you have to do some formatting of the results. Hope this helps.

XenApp 6.5 Apply Full Load Evaluator for Server Maintenance

In XenApp 6.5 in case you want to drain the sessions so that eventually you could reboot the server for maintenance. there is an option in the XenApp console , where in you can do the following: This is same as the (drain mode) of Microsoft RDS 2008 R2. However i have had mixed results with this and sometimes when i prohibit logons it changes it back to Allow logons . Also this disables the functionality of RDP as well. I have found using load Evaluator is a better and good option to accomplish maintenance mode for Citrix Xenapp Servers. In XenApp 6.5 we cant assign load Evaluators to Servers directly , so have to use Worker Groups. Firstly I created a Load Evaluator (named it Full Load) and used Scheduling Rule. This Load evaluator if applied to a Worker Group , will apply Full Load (10000) to all servers in the Worker Groups. I then Created a Worker Group and Named It -- Full Load Worker Group I used Farm Server as Select Source instead...

Chrome Spell Check Notification Error

Google Chrome Spell Check Alert :) It dint spell Better (bettar)

SCOM Test Event Based Rule by creating a Fake event

Sometimes we need to create a rule for alerts using the Windows Event Ids I had a situation to alert on one such event: Event 6008  which is logged as a dirty shutdown. It gives the message "The previous system shutdown at time on date was unexpected" In order to create a Rule for unexpected Shutdown : i used the following method http://dynamicdatacenter.wordpress.com/2012/10/09/quick-win-scom-alert-rule-to-detect-server-reboot-shutdown/ Configuration for the Rule:  -System Log - Event ID: 6008 - Event Source: EventLog In order to test the monitor we can create a fake event using many methods: e.g using vbscript , eventcrete , logevent , powershell ,OpsMgr Script Each one has its Pro's and Con's http://ianblythmanagement.wordpress.com/2008/08/25/create-events/ I used the following powershell to create the fake event Write-EventLog -Logname System -Source EventLog -EventId 6008 -Message "This is a Fake Event"-EntryType ERROR Ho...