<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0">
	<channel>
	<title>Cameron Fuller</title>
	<link>http://www.systemcentercentral.com/Community/Blogs/tabid/150/rss/1/userId/357/CategoryId/61/Default.aspx</link>
	<description></description>
	<language>en-us</language>
	<copyright>Copyright 2009 System Center Central All Rights Reserved.</copyright>
	<lastBuildDate>Fri, 12 Mar 2010 12:50:26 GMT</lastBuildDate>
		<item>
			<title><![CDATA[Blog: What's New in the OpsMgr MP? (6.1.7599.0)]]></title>
			<link><![CDATA[/BlogDetails/tabid/143/IndexId/60338/Default.aspx]]></link>
			<description><![CDATA[<p>Normally I don’t blog on updated versions of management packs (the only notable exception is the By Example series which discusses how to install, configure and tune management packs). However, the updated OpsMgr management pack implements some solid enhancements which may be overlooked because they don’t stand out at first glance.</p>
<p>In terms of installation, the updated MP was available from the catalog and imported without issue as shown below.</p>
<p><a href="http://www.systemcentercentral.com/portals/0/VivoIndexItem/Index60338/WLW-WhatsNewintheOpsMgrMP_EB64-01_2.jpg"><img title="01" border="0" alt="01" width="468" height="284" style="border-right-width: 0px; display: inline; border-top-width: 0px; border-bottom-width: 0px; border-left-width: 0px" src="http://www.systemcentercentral.com/portals/0/VivoIndexItem/Index60338/WLW-WhatsNewintheOpsMgrMP_EB64-01_thumb.jpg" /></a></p>
<p><a href="http://www.systemcentercentral.com/portals/0/VivoIndexItem/Index60338/WLW-WhatsNewintheOpsMgrMP_EB64-02_2.jpg"><img title="02" border="0" alt="02" width="464" height="420" style="border-right-width: 0px; display: inline; border-top-width: 0px; border-bottom-width: 0px; border-left-width: 0px" src="http://www.systemcentercentral.com/portals/0/VivoIndexItem/Index60338/WLW-WhatsNewintheOpsMgrMP_EB64-02_thumb.jpg" /></a></p>
<p>There is new functionality in this version of the management pack in the areas of new reports, monitors and performance counters.</p>
<p><strong>New reports:</strong></p>
<p>There is a new ODR report called “Alerts Per Day” shown below. ODR reporting is an important but commonly overlooked function within Operations Manager. One of the OpsMgr team is currently working on a blog entry which will better explain what ODR is, what it does and the benefits for activating it. </p>
<p>Additionally, there are new reports which are available as part of the System Center Core Monitoring. These are the Data Volume by Management pack and Data Volume by Workflow and Instance reports shown below. </p>
<p><strong>New monitors:</strong></p>
<p>Several new monitors were added including one that checks for the agent version (i386, amd64 as an example) and compatibility of the version for the Operating System (i386, amd64, etc) as shown below.</p>
<p>Also, a monitor was added to provide notification if the agent version number installed is older than the expected agent version number. </p>
<p><strong>New performance counters:</strong></p>
<p>A new performance counter was added which tracks the total agent processor utilization for all OpsMgr services (health service, monitoring hosts, cscripts, powershell). This counter will help greatly to identify the total impact of the deployment of an OpsMgr agent.</p>
<p>There is a default view for this shown below. </p>
<p>I also created a custom one to show just this counter (my Agent Processor Utilization numbers may be higher than in a production environment because I’m running several virtuals on a single laptop environment).</p>
<p>Overall, there’s some pretty cool new stuff in here! The actual management pack is available for download at: <a title="http://pinpoint.microsoft.com/en-US/PartnerDetails.aspx?PartnerId=4297702754&ProductId=12884901986&CurrentTab=1" href="http://pinpoint.microsoft.com/en-US/PartnerDetails.aspx?PartnerId=4297702754&ProductId=12884901986&CurrentTab=1">http://pinpoint.microsoft.com/en-US/PartnerDetails.aspx?PartnerId=4297702754&ProductId=12884901986&CurrentTab=1</a> and the guide is available <a href="http://download.microsoft.com/download/1/B/C/1BCCEFC7-A046-4CFB-9D50-D2D1706946EB/OM2007_MP_OpsMgrR2.doc">here</a>.</p>
<p>An excerpt from the Management Pack guide follows which details the full set of changes in this MP.</p>
<p><a name="_Toc253995113"><strong>Changes in This Update</strong></a><a name="zfd0f2599669643a6b0f07d569ccb87fe"></a></p>
<p>Version 6.1.7599.0 of the Operations Manager Management Pack for Operations Manager 2007 R2 includes the following changes:</p>
<p>Added functionality that monitors data volume by management pack, workflow, and instance. For details, see the “Monitoring data volume” scenario in <a href="#zed25d508419a460f85bcd3954cb7d505">Key Monitoring Scenarios</a>.</p>
<p>Added monitoring of agent version and compatibility of agent and operating system. For details, see the “Monitoring agent version and architecture mismatch” scenario in <a href="#zed25d508419a460f85bcd3954cb7d505">Key Monitoring Scenarios</a>.</p>
<p>Added monitoring of CPU use by agents and related processes . For details, see the “Monitoring CPU utilization” scenario in <a href="#zed25d508419a460f85bcd3954cb7d505">Key Monitoring Scenarios</a>.</p>
<p>This release of the Operations Manager Management Pack also includes an updated version of the Operational Data Reports Management Pack, which is installed with Operations Manager. The Operational Data Reporting Management Pack gathers information and sends reports to Microsoft on a weekly basis (if you select to send reports). Microsoft uses these reports to improve the quality of its management packs and Operations Manager 2007. Participation in the program is strictly voluntary. For more information, see <a href="#z0d15c208e1a24aa4a4b713eef482b298">Appendix: Operational Data Reporting Management Pack</a>.</p>
<p>Added or updated product knowledge, descriptions, display names, and alert details.</p>
<p>Changed the Critical Parameter Replacement Failure During Alert Creation rule to disabled by default because is not actionable; review the product knowledge before enabling this rule.</p>
<p>Updated criteria to only show active alerts in the “AD based Agent Assignment Module Alerts” view, which is part of the “AD-based Agent Assignment Module Events Dashboard” view.</p>
<p>Aligned monitor states with alert severity for following monitors:</p>
<ul>
    <li>Run As Account/Password Expiration Check</li>
    <li>Alert Subscription Acknowledgement Running Slow</li>
    <li>Alert Subscription Query Performance Monitor</li>
    <li>Processing Backlogged Events Taking a Long Time</li>
    <li>Communication Certificate Expiration Check</li>
</ul>
<p>Enabled auto-resolution for the Run As Account/Password Expiration Check monitor.</p>
<p>All monitors have been made public so users can add custom diagnostics and recoveries.</p>
<p>Updated the Collects Opsmgr SDK Service\Client Connections rule to sample data every 900 seconds (previously was 300 seconds).</p>
<p>Changed the interval for Sql Broker Availability Monitor Type from 10 seconds to 3600 seconds.</p>
<p>Renamed the "Health Service Configuration" view folder to "Run As Configuration" to more accurately reflect the folder's new (revised) purpose.</p>
<p>Disabled the following event collection rules and removed the associated views because they caused a large amount of data collection that was of limited use to customers:</p>
<ul>
    <li>Collect Health Service Configuration Updated Events</li>
    <li>Collect Management Configuration Service Configuration Updated Events</li>
    <li>Collect Run As Account Failure Events</li>
    <li>Collect IIS Discovery Probe Module Events</li>
</ul>
<p>Tuned alert suppression for following rules to reduce alert volumes:</p>
<ul>
    <li>Scheduler Condition Module Initialization Failure</li>
    <li>Scheduler Data Source Module Initialization Failure</li>
    <li>Timer Condition Module Initialization Failure</li>
</ul>
<p>fixed bug with the Run As Account(s) Expiring Soon monitor that was preventing state changes and causing event 11903.</p>
<p><strong>UPDATE</strong>: Some of the graphics on this article won't show up for some reason that I've been unable to debug. A full version of this article with the graphics is available at: <a href="http://blogs.catapultsystems.com/cfuller/archive/2010/02/25/what’s-new-in-the-opsmgr-mp-6-1-7599-0.aspx">http://blogs.catapultsystems.com/cfuller/archive/2010/02/25/what’s-new-in-the-opsmgr-mp-6-1-7599-0.aspx</a>.</p>]]></description>
			<pubDate>Sat, 27 Feb 2010 23:32:51 GMT</pubDate>
			<guid>/BlogDetails/tabid/143/IndexId/60338/Default.aspx</guid>
		</item>
		<item>
			<title><![CDATA[Blog: QuickTricks - Select/unselect all in Reports]]></title>
			<link><![CDATA[/BlogDetails/tabid/143/IndexId/60283/Default.aspx]]></link>
			<description><![CDATA[<p>This may be one of those “well-duh!” posts, but I was watching a guy work through reports last week and he right-clicked on a blank space in the set of management packs and it popped up the option to Select all or Unselect all as shown below. I’ve spent my share of time checking in these boxes and never realized that was an option so keep it in mind when working with reports in OpsMgr!</p>
<p><a href="http://www.systemcentercentral.com/portals/0/VivoIndexItem/Index60283/WLW-QuickTricksReportsandselectunselectall_CFDA-image_2.png"><img title="image" border="0" alt="image" width="739" height="285" style="border-bottom: 0px; border-left: 0px; display: inline; border-top: 0px; border-right: 0px" src="http://www.systemcentercentral.com/portals/0/VivoIndexItem/Index60283/WLW-QuickTricksReportsandselectunselectall_CFDA-image_thumb.png" /></a></p>]]></description>
			<pubDate>Thu, 25 Feb 2010 23:16:53 GMT</pubDate>
			<guid>/BlogDetails/tabid/143/IndexId/60283/Default.aspx</guid>
		</item>
		<item>
			<title><![CDATA[Blog: High Processor Utilization from the OpsMgr Agent?]]></title>
			<link><![CDATA[/BlogDetails/tabid/143/IndexId/59350/Default.aspx]]></link>
			<description><![CDATA[<p> </p>
<p>I received an email from a co-worker of mine who is seeing domain controllers which have high levels of processor utilization when the Operations Manager agent is running on a domain controller. I have seen this occasionally in different environments and for different reasons. The following is a summary of conditions which I have seen that can cause high processor utilization and items that may be required to resolve the situation.</p>
<ul>
    <li>First off, there is a hotfix available which is entitled: <a href="http://support.microsoft.com/kb/968967">“The CPU usage of an application or a service that uses MSXML 6.0 to handle XML requests reaches 100% in Windows Server 2008, Windows Vista, Windows XP Service Pack 3, or other systems that have MSXML 6.0 installed”.</a></li>
    <li>I have dealt with situations where McAfee Scriptscan was enabled on the servers and it caused this condition. The same situation is discussed <a href="http://www.eggheadcafe.com/software/aspnet/31738498/scom-2007-and-mcafee.aspx">here</a>.</li>
    <li>Anti-virus exclusions are also commonly an issue. Details on what to exclude from anti-virus scanning are available <a href="http://blogs.technet.com/kevinholman/archive/2007/12/12/antivirus-exclusions-for-mom-and-opsmgr.aspx">here</a>.</li>
    <li>Old versions of the anti-virus software can also cause this condition. We saw this with a client who had an older version of Symantec. After they upgraded the issue did not recur.</li>
    <li>Old management packs can also contribute to this condition. Check the online catalog either inside of the OpsMgr R2 administration pane, or on the <a href="http://pinpoint.microsoft.com/en-US/systemcenter/managementpackcatalog">updated management pack catalog</a>.</li>
    <li>If you are running the OpsMgr on light hardware it’s possible that the OpsMgr agent pushes the system from close to bottlenecked to actually bottlenecked. This is discussed <a href="http://cameronfuller.spaces.live.com/Blog/cns!A231E4EB0417CB76!1015.entry">here</a>.</li>
    <li>Finally, there are some solid blog articles available on this such as:
    <ul>
        <li><a href="http://blogs.technet.com/kevinholman/archive/2009/07/20/do-you-randomly-see-a-monitoringhost-exe-process-consuming-lots-of-cpu.aspx">Do you randomly see a MonitoringHost.exe process consuming lots of CPU?</a></li>
        <li><a href="http://thoughtsonopsmgr.blogspot.com/2009/07/opsmgr-sp1-is-process-healthservice-of.html">OpsMgr SP1: Is the process HealthService of certain Agents taking away all cpu-cycles?</a></li>
    </ul>
    </li>
</ul>
<p> </p>
<p>What else have people found out there which can be causes for this type of a condition?</p>]]></description>
			<pubDate>Thu, 11 Feb 2010 11:38:13 GMT</pubDate>
			<guid>/BlogDetails/tabid/143/IndexId/59350/Default.aspx</guid>
		</item>
		<item>
			<title><![CDATA[Blog: Tip when creating a self tuning threshold]]></title>
			<link><![CDATA[/BlogDetails/tabid/143/IndexId/59296/Default.aspx]]></link>
			<description><![CDATA[<p>During some recent tests with creating my own self tuning threshold I found out that once you create the self tuning threshold you cannot change the settings for the sensitivity via the gui. You can still use overrides which alter the sensitivity but the slider bar shown below is grayed out after the monitor was created.</p>
<p>For background before we move on, what does sensitivity mean from a self tuning threshold perspective? Kevin Holman provides great information on this which is available at: <a href="http://blogs.technet.com/kevinholman/archive/2008/03/19/self-tuning-thresholds-love-and-hate.aspx.">http://blogs.technet.com/kevinholman/archive/2008/03/19/self-tuning-thresholds-love-and-hate.aspx.</a> In Kevin’s blog he details what the various slider bars mean compared to what you can set using an override as follows:</p>
<p><strong>Low:  Inner: 4.01  Outer: 4.51   Rule Sensitivity:  4.01</strong></p>
<p><strong>Low-Mid:  Inner: 3.77  Outer: 4.27   Rule Sensitivity:  3.77</strong></p>
<p><strong>Mid:  Inner: 3.29   Outer: 3.79   Rule Sensitivity:  3.29</strong></p>
<p><strong>Mid-High: Inner: 2.81  Outer: 3.31  Rule Sensitivity:  2.81</strong></p>
<p><strong>High:  Inner: 2.57  Outer: 3.07  Rule Sensitivity:  2.57</strong></p>
<p>So once we have created our own self tuning threshold, if we want to change the value we can either delete it and re-create it or we can use overrides to change the values. I put together the following graphic below to show what each level translates to so that you can set the matching numbers for the override.</p>
<p><a href="http://www.systemcentercentral.com/portals/0/VivoIndexItem/Index59296/WLW-Creatingaselftuningthreshold_12EEB-clip_image001_2.png"><img title="clip_image001" border="0" alt="clip_image001" width="502" height="525" style="border-right-width: 0px; display: inline; border-top-width: 0px; border-bottom-width: 0px; border-left-width: 0px" src="http://www.systemcentercentral.com/portals/0/VivoIndexItem/Index59296/WLW-Creatingaselftuningthreshold_12EEB-clip_image001_thumb.png" /></a></p>]]></description>
			<pubDate>Wed, 10 Feb 2010 00:35:25 GMT</pubDate>
			<guid>/BlogDetails/tabid/143/IndexId/59296/Default.aspx</guid>
		</item>
		<item>
			<title><![CDATA[Blog: Updated ReSearch This Management Pack]]></title>
			<link><![CDATA[/BlogDetails/tabid/143/IndexId/59254/Default.aspx]]></link>
			<description><![CDATA[<div class="ExternalClassE575979795184C239E09B03FB5AC5F00">
<p>An updated version for the ReSearch This management pack has been created for the R2 version of the management pack and has been updated to work for MOM 2005 as well. There had been issues with this management pack and how it integrated with the new systemcentercentral.com website which should be addressed with the updated version. This management pack provides an easy way to investigate alerts in Operations Manager (and System Center Essentials, and MOM) and search for resolutions which the community has found when the alert occurs. The updated version of this management pack is available at: <a href="/PackCatalog/PackCatalogDetails/tabid/145/IndexID/21716/Default.aspx">http://www.systemcentercentral.com/PackCatalog/PackCatalogDetails/tabid/145/IndexID/21716/Default.aspx</a>.</p>
<p>I am working on a version which will work on OpsMgr 2007 RTM – hopefully later in the week.</p>
<p> </p>
</div>]]></description>
			<pubDate>Mon, 08 Feb 2010 22:17:41 GMT</pubDate>
			<guid>/BlogDetails/tabid/143/IndexId/59254/Default.aspx</guid>
		</item>
		<item>
			<title><![CDATA[Blog: Community Written Books]]></title>
			<link><![CDATA[http://www.systemcentercentral.com/tabid/143/IndexId/59184/Default.aspx]]></link>
			<description><![CDATA[<p>One of the things that I’ve learned in the last few years is that there isn’t anyone I have met who does not know more than I do about at least one thing. The topic itself may vary (technology, life, marriage, spirituality, politics or even identifying what ran into my car most recently) but in all cases there is someone out there who knows more than I do on on at least one topic.</p>
<p>This also applies when focusing on an area of specialization. I am a Microsoft Operations Manager geek. I am at the point in my life where from a technical perspective I am living and breathing this particular technology on a daily basis. However, I am well aware that even within a specific technology there are people who truly alpha-geeks in an area within that technology. Within Operations Manager there are guys who know a lot more about management pack development, targeting, scripting in OpsMgr, ACS and other topics.</p>
<p><em>So what the heck does that have to do with community written books? </em></p>
<p>Over the last year a group of us who had written on System Center Operations Manager 2007 Unleashed (<a href="http://www.tinyurl.com/27mqnm"><font color="#669966">www.tinyurl.com/27mqnm</font></a>) came to the conclusion that there was enough new stuff within Operations Manager 2007 R2 to justify writing a book on what is new in the R2 release. We originally were going to take our four core authors, map out what was new in R2 and divide and hopefully conquer. We didn’t think it made sense to revise the current book to cover the content because the original book was comprehensive for the original product so we decided to write a supplement to the original book which would cover R2.</p>
<p><em>So what the heck does that have to do with community written books? </em></p>
<p>I’m getting there I promise. As a group we decided to try something different on this book. Instead of just writing on what was new in R2 we decided to also delve into where the community had evolved the product since the original book had been written. To make this happen, we went into the community and sought out the best of the best in their specific areas of subject matter expertise. We brought in SME’s in targeting, management pack authoring, ACS and other areas. In total this book was directly written by almost a dozen different authors or contributors who physically spanned the globe. We also received technical input and reference technical blogs which also span the globe. What I eventually realized is what should be readily apparent by now – this book was written by the community for the community.</p>
<p>Technology adapts quickly, and people who focus on a specific aspect of technology can quickly become the go-to-SME in that technology. With blogging people are sharing new developments more quickly and others can build on those advancements. A community written book (shepherded by a lead author for coordination) may make a lot of sense as a model for the technical book industry.</p>
<p>Microsoft System Center Operations Manager 2007 R2 Unleashed is currently (and unofficially) estimated to be available in mid-March so about 40 days from now we’ll see what the feedback is on this concept. Regardless of how it goes, it’s been an incredible experience being part of this technical community and to have the opportunity to work with such incredibly talented people who are part of it.</p>]]></description>
			<pubDate>Mon, 08 Feb 2010 19:02:28 GMT</pubDate>
			<guid>http://www.systemcentercentral.com/tabid/143/IndexId/59184/Default.aspx</guid>
		</item>
		<item>
			<title><![CDATA[Blog: ReSearch This! KB - DNS 2008 Server External Addresses Resolution Alert]]></title>
			<link><![CDATA[http://www.systemcentercentral.com/BlogDetails/tabid/143/IndexId/59076/Default.aspx]]></link>
			<description><![CDATA[<p><b>Alert:</b> DNS 2008 Server External Addresses Resolution Alert</p>
<p>Issue: The rule performs a DNS query of type “NS” (as provided in the Query Type parameter), which means the query is search for the name servers of the domain provided in the Host parameter. The problem here is that the domain name provided is “www.microsoft.com”. Since this is a host name rather than a domain, the query returns a referral rather than a list of DNS servers. This results in the error message referenced above. This was occurring in MP version number 6.0.6480.0.</p>
<p>Resolution: You can fix the error in one of two ways (pick one, not both):</p>
<ul>
    <li>Set the Host parameter to “microsoft.com” (without the quotes). Then the query returns a list of DNS servers for the microsoft.com domain OR</li>
    <li>Set the Query Type parameter to “A”. Then the query returns the IP address(es) for <a href="http://www.microsoft.com">www.microsoft.com</a></li>
</ul>
<p>For additional explanation and screenshots see </p>
<p><span style="font-size: medium; "><span class="Apple-style-span" style="font-family: Georgia, 'Times New Roman', Times, serif; color: rgb(51, 51, 51); line-height: 21px; "><a href="http://www.systemcentercentral.com/BlogDetails/tabid/143/indexid/13204/Default.aspx" title="SCOM 2007: Resolving False DNS 2003 Server External Addresses Resolution Alert" style="text-decoration: underline; color: rgb(0, 135, 219); font-family: Georgia, 'Times New Roman', Times, serif; font-size: 16pt; margin-bottom: 3px; margin-top: 15px; line-height: 16pt; "><span style="font-size: small; "><strong>SCOM 2007: Resolving False DNS 2003 Server External Addresses Resolution Alert</strong></span></a></span></span></p>]]></description>
			<pubDate>Sat, 06 Mar 2010 15:20:31 GMT</pubDate>
			<guid>http://www.systemcentercentral.com/BlogDetails/tabid/143/IndexId/59076/Default.aspx</guid>
		</item>
		<item>
			<title><![CDATA[Blog: ReSearch This! KB - Health Service Unloaded System Rule(s)]]></title>
			<link><![CDATA[http://www.systemcentercentral.com/BlogDetails/tabid/143/IndexId/58885/Default.aspx]]></link>
			<description><![CDATA[<p><b>Alert</b>: Health Service Unloaded System Rule(s)</p>
<p><b>Issue</b>: Agents were reporting error number 7002 (The Health Service could not log on the RunAs account for management group because it has not been granted the ‘Log On Locally’ right.</p>
<p>Agents were grey. There were errors reporting on the Health Service Unloading System Rule(s). The agents were in the root domain, the gateway action account was in the root domain.</p>
<p><b>Resolution</b>: Added the GWAA account to the domain administrators in the root domain. We also ended up needing to uninstall and re-install the agents reporting the error after making this change.</p>]]></description>
			<pubDate>Tue, 26 Jan 2010 20:02:37 GMT</pubDate>
			<guid>http://www.systemcentercentral.com/BlogDetails/tabid/143/IndexId/58885/Default.aspx</guid>
		</item>
		<item>
			<title><![CDATA[Blog: QuickTricks: Not Monitored Servers in OpsMgr]]></title>
			<link><![CDATA[http://www.systemcentercentral.com/BlogDetails/tabid/143/IndexId/58855/Default.aspx]]></link>
			<description><![CDATA[<p>If you have servers in your environment which appear as “Not Monitored” in the Agent Managed section of the Operations Manager/Administration console you may want to check this out. We found that agents which had been installed with the wrong Management Group Name appear as “Not Monitored” in the Agent Managed section. In our case these were manually deployed agents which had a typo in the management group name. We wanted to avoid uninstalling the agent if possible because installation/uninstallation of software often requires submission of a change control. To fix this agent we took the following steps:</p>
<p>1) Logged into the server via RDP.</p>
<p>2) To determine the settings for the agent we opened control panel, Add/Remove programs and started a change (not uninstall) of the agent. This provides a quick way to see what management group was specified during the installation.</p>
<p>3) When we found these we incorrect, we did the change in Add/Remove programs again and added the second management group name with the correct name.</p>
<p>4) Once that was done we re-opened Add/Remove programs, and removed the incorrect management group name from the agent.</p>
<p>5) To complete the process we restarted the System Center Management service on the agent.</p>]]></description>
			<pubDate>Mon, 25 Jan 2010 23:58:46 GMT</pubDate>
			<guid>http://www.systemcentercentral.com/BlogDetails/tabid/143/IndexId/58855/Default.aspx</guid>
		</item>
		<item>
			<title><![CDATA[Blog: OpsMgr RMS for Forefront with the OpsMgr R2 agent installed?]]></title>
			<link><![CDATA[http://www.systemcentercentral.com/BlogDetails/tabid/143/IndexId/58807/Default.aspx]]></link>
			<description><![CDATA[<p>Recently I was working in an environment where the root management server for the Forefront environment would regularly restart the health service. At first I figured it was one of the RMS thresholds (private bytes or some such thing – see the end of this article for great link from Kevin Holman). </p>
<p>However, this debug took a new direction when I looked in add/remove programs and saw that this system had both the Operations Manager RMS installed, and had the Operations Manager R2 Agent installed on it. We figured out that when the private bytes counter went too high, it restarted the "client" which is ALSO the Health service for the OpsMgr RMS – Ouch. I ended doing a workaround for this by removing one of the management groups which was assigned to this server (the RMS was actually reporting to three different management groups, but only one of them was really functional).</p>
<p>After I tracked this down and was preparing to write this up, I ran across Walter Eikenboom’s article which addresses this specific issue in his  “How to monitor another management groups OpsMgr infrastructure” article. Walter summarizes the issue I ran well as follows:</p>
<p>“When the monitoring opsmgr looks at the health service of the RMS or MS from another management group it thinks its just an agent and is not aware that’s a health service of another opsmgr infrastructure.”</p>
<p>So when a health service goes higher than the threshold for an agent, it automatically restarts the agent which in this case is the RMS’s Health Service. Which is what we were seeing here.</p>
<p>So, if you have both Forefront an an Operations Manager environment which is monitoring the Forefront RMS make sure that you check out Walter’s blog available at:<br />
 </p>
<p><a title="http://weblogwally.spaces.live.com/blog/cns!A913F865098E0556!1574.entry" href="http://weblogwally.spaces.live.com/blog/cns!A913F865098E0556!1574.entry">http://weblogwally.spaces.live.com/blog/cns!A913F865098E0556!1574.entry</a></p>
<p> </p>
<p>Additional solid reading material related to how the health service restarts is available at:</p>
<p><a title="http://blogs.technet.com/kevinholman/archive/2009/12/21/the-new-and-improved-guide-on-healthservice-restarts-aka-agents-bouncing-their-own-healthservice.aspx" href="http://blogs.technet.com/kevinholman/archive/2009/12/21/the-new-and-improved-guide-on-healthservice-restarts-aka-agents-bouncing-their-own-healthservice.aspx">http://blogs.technet.com/kevinholman/archive/2009/12/21/the-new-and-improved-guide-on-healthservice-restarts-aka-agents-bouncing-their-own-healthservice.aspx</a> </p>
<p> </p>
<p><strong>Can you just installed the OpsMgr R2 agent from the RMS if you don’t the server to be monitored by OpsMgr?</strong></p>
<p>I also curious what would happen if you have an environment like this (RMS with agent installed) and you decided to uninstall the Operations Manager R2 agent… My uncertainty came from the fact that both the RMS server and the Agent both run the same service name (System Center Management in R2, OpsMgr Health Service in RTM/SP1). I was wondering if the uninstallation of the agent could result in the destruction of the RMS as an unfortunate side-effect. </p>
<p>To test this configuration I took an RMS which I have in a lab environment and I installed the OpsMgr R2 agent on it. Next I uninstalled the OpsMgr R2 agent from the RMS, and it uninstalled without an issue and didn’t cause a problem for my RMS. [This was just my lab environment, don’t try this in production without a solid backup methodology in place just in the off-chance my lab didn’t reflect real-world production environments!]</p>]]></description>
			<pubDate>Sat, 23 Jan 2010 01:46:22 GMT</pubDate>
			<guid>http://www.systemcentercentral.com/BlogDetails/tabid/143/IndexId/58807/Default.aspx</guid>
		</item>
		<item>
			<title><![CDATA[Blog: Tuning &ldquo;A SQL job failed to complete successfully&rdquo;]]></title>
			<link><![CDATA[http://www.systemcentercentral.com/BlogDetails/tabid/143/IndexId/58647/Default.aspx]]></link>
			<description><![CDATA[<p>In Operations Manager 2007 R2, one of the most common alerts that I am running into is the<strong> </strong>“SQL job failed to complete successfully” alert which is part of the SQL server management pack. In one of our environments, the request was made to provide an alert if this issue occurred for a specific job name. This is a custom job which is business critical for the environment. As background, the following is a summary of how I normally tune this alert:</p>
<p> </p>
<ul>
    <li>On decommissioned servers these alerts are not required and can be disabled as discussed here: <a title="http://www.systemcentercentral.com/BlogDetails/tabid/143/IndexID/25009/Default.aspx" href="/BlogDetails/tabid/143/IndexID/25009/Default.aspx">http://www.systemcentercentral.com/BlogDetails/tabid/143/IndexID/25009/Default.aspx</a> </li>
    <li>On some servers (such as test servers) these alerts are not required and can be disabled as discussed here: <a title="http://www.systemcentercentral.com/BlogDetails/tabid/143/IndexID/25006/Default.aspx" href="/BlogDetails/tabid/143/IndexID/25006/Default.aspx">http://www.systemcentercentral.com/BlogDetails/tabid/143/IndexID/25006/Default.aspx</a></li>
    <li>On production servers these alerts are not necessarily critical (see <a title="http://www.systemcentercentral.com/BlogDetails/tabid/143/IndexID/26595/Default.aspx" href="/BlogDetails/tabid/143/IndexID/26595/Default.aspx">http://www.systemcentercentral.com/BlogDetails/tabid/143/IndexID/26595/Default.aspx</a> for reference on defining what’s critical in an environment). For these I recommend the creation of overrides to set these to informational as discussed here: <a title="http://www.systemcentercentral.com/BlogDetails/tabid/143/IndexID/25007/Default.aspx" href="/BlogDetails/tabid/143/IndexID/25007/Default.aspx">http://www.systemcentercentral.com/BlogDetails/tabid/143/IndexID/25007/Default.aspx</a> </li>
</ul>
<p> </p>
<p>To accomplish the requirement we plan to use a subscription to provide an email notification when the specific job fails to complete successfully – by limiting the subscription to this alert, and by limiting to only those which match a portion of the description field. As an example, we create a subscription for “A SQL job failed to complete successfully” where description contains “abcjob”. This approach allows us to categorize the alerts as informational (keeping the environment green and reducing email alert volume), but to still receive notifications for specific long running jobs which are identified as critical to the business.</p>]]></description>
			<pubDate>Mon, 18 Jan 2010 20:18:00 GMT</pubDate>
			<guid>http://www.systemcentercentral.com/BlogDetails/tabid/143/IndexId/58647/Default.aspx</guid>
		</item>
		<item>
			<title><![CDATA[Blog: QuickTricks - What server has my OpsMgr database?]]></title>
			<link><![CDATA[http://www.systemcentercentral.com/BlogDetails/tabid/143/IndexId/58604/Default.aspx]]></link>
			<description><![CDATA[<p>I’ve had several times recently when I was on a client site, and nobody knew what server was hosting the Operations Manager database (the usual response is “I’ve slept since then”). Each time I end up digging around for a while so I thought it would make sense to post this. There are multiple ways to locate which server is providing the Operations Manager database:</p>
<p>1) Registry: Regedit to key HKLM\Software\Microsoft\Microsoft Operations Manager\3.0\Setup in the DatabaseServerName string. (Chapter 12, page 566 in System Center Operations Manager 2007 Unleashed book) on a management server.</p>
<p>2) Command prompt: From a command prompt type netstat and look for “Ms-sql-s”.</p>
<p>3) OpsMgr UI: Open the Monitoring node, Operations Manager folder, Management Group Diagram. Open the SystemCenterOperationsManager icon, highlight the RMS server underneath it, and at the bottom of the screen it shows the Operational Database Server Name and the Operational Database Name as well.</p>
<p>Thanks to Steve Ross, Kerrie Meyler, and Adam Rafels for their help gathering these up and hopefully I’ll be able to remember this next time I run into it as well!</p>]]></description>
			<pubDate>Mon, 18 Jan 2010 20:21:59 GMT</pubDate>
			<guid>http://www.systemcentercentral.com/BlogDetails/tabid/143/IndexId/58604/Default.aspx</guid>
		</item>
		<item>
			<title><![CDATA[Blog: ReSearch This! KB - Root Management Server Unavailable]]></title>
			<link><![CDATA[http://www.systemcentercentral.com/BlogDetails/tabid/143/IndexId/58565/Default.aspx]]></link>
			<description><![CDATA[<p><strong>Alert:</strong> Root Management Server Unavailable</p>
<p><strong>Issue:</strong> We ran into an issue recently where we saw issues with most of our distributed applications changing to a grey state seemingly for no reason. After a little digging we determined that the RMS server itself was actually in a grey state. We tried things that have worked in the past like reviewing the Operations Manager logs on the RMS, restarting services on the RMS, rebooting the RMS and even went so far as to reboot pretty much all OpsMgr related servers just to be thorough. Still grey. We verified that database connectivity was functional, there was plenty of free space in the Operations Manager database and we found no indications of the root cause. Just grey, grey and more grey.</p>
<p><strong>Resolution: </strong>I doubt if this is supported, but at least it allowed us to bring back up our Operations Manager environment. We stopped each of the three services on the RMS, renamed the %programfiles%\system center operations manager 2007\health service state\health service store\ to another file name, and then restarted the services. This re-created the health service store folder, and rebuilt the files within it. This is the second time I have seen this in one environment in less than a year.</p>]]></description>
			<pubDate>Thu, 21 Jan 2010 15:33:36 GMT</pubDate>
			<guid>http://www.systemcentercentral.com/BlogDetails/tabid/143/IndexId/58565/Default.aspx</guid>
		</item>
		<item>
			<title><![CDATA[Blog: Management packs won't import into OpsMgr]]></title>
			<link><![CDATA[http://www.systemcentercentral.com/BlogDetails/tabid/143/IndexId/57462/Default.aspx]]></link>
			<description><![CDATA[<p><strong>Issue</strong>: Trying to one or more management packs into Operations Manager and they are all failing?</p>
<p><strong>Resolution</strong>: Check the free space on the OperationsManager database. There are alerts to provide warning if there is less than 40% available free disk space however if an OpsMgr environment is completely out of disk space all management packs will fail to import until there is sufficient free disk space. Best practice wuld be to increase it at least another 50% if possible since the database was  already out of space and OpsMgr wants 40% for indexing.</p>
<p> </p>
<p>P.S. Thanks to Blake and Anders who originally tracked this down/I just re-posted this as I hadn’t seen it happen recently and didn’t remember the cause until I found their discussions on the topic.</p>
<p>P.P.S. Marnix already blogged on this a while ago as well! <span style="font-family: 'Calibri','sans-serif'; color: #1f497d; font-size: 11pt; mso-fareast-font-family: Calibri; mso-fareast-theme-font: minor-latin; mso-ansi-language: EN-US; mso-fareast-language: EN-US; mso-bidi-language: AR-SA"><a href="http://thoughtsonopsmgr.blogspot.com/2009/09/mps-wont-import-any-more-is-opsmgr.html">http://thoughtsonopsmgr.blogspot.com/2009/09/mps-wont-import-any-more-is-opsmgr.html</a> </span></p>]]></description>
			<pubDate>Thu, 10 Dec 2009 16:26:27 GMT</pubDate>
			<guid>http://www.systemcentercentral.com/BlogDetails/tabid/143/IndexId/57462/Default.aspx</guid>
		</item>
		<item>
			<title><![CDATA[Blog: QuickTricks - Configuration Manager query for Adobe Apps]]></title>
			<link><![CDATA[http://www.systemcentercentral.com/BlogDetails/tabid/143/IndexId/57424/Default.aspx]]></link>
			<description><![CDATA[<p>I spent some time today working through a query that would gather what applications that I had in my environment which were from Adobe. I worked through the existing reports and couldn’t find anything that would give me the results for all Adobe% applications for a specific collection and would provide that information down to the file level. The following is the results which can be pasted into a report (add a parameter for Collection so it will prompt for the collection). So if you are looking for a starting point to get your Adobe apps listed from SCCM try this one:</p>
<p> </p>
<p><em>Select distinct</em></p>
<p><em>v_R_System_Valid.Netbios_Name0 AS "Netbios Name",</em></p>
<p><em>v_GS_INSTALLED_EXECUTABLE.ExecutableName0 AS "File Name",</em></p>
<p><em>v_GS_INSTALLED_EXECUTABLE.Product0 AS "File Description",</em></p>
<p><em>"File Version" = CASE when (v_GS_INSTALLED_EXECUTABLE.Product0 is NULL or v_GS_INSTALLED_EXECUTABLE.Product0  = '-1') then 'Unknown'</em></p>
<p><em>Else v_GS_INSTALLED_EXECUTABLE.Product0 End,</em></p>
<p><em>"File Size" = CASE when (v_GS_INSTALLED_EXECUTABLE.FileSize0 IS NULL or v_GS_INSTALLED_EXECUTABLE.FileSize0 = '-1') then 'Unknown'</em></p>
<p><em>Else v_GS_INSTALLED_EXECUTABLE.FileSize0 End,</em></p>
<p><em>"Modified Date" = CASE when (v_GS_INSTALLED_EXECUTABLE.TimeStamp is NULL ) then 'Unknown'</em></p>
<p><em>Else CAST(v_GS_INSTALLED_EXECUTABLE.TimeStamp as varchar)End,</em></p>
<p><em>"File Path" = CASE when (v_GS_INSTALLED_EXECUTABLE.InstalledFilePath0 IS NULL or v_GS_INSTALLED_EXECUTABLE. InstalledFilePath0= '-1') then 'Unknown'</em></p>
<p><em>Else v_GS_INSTALLED_EXECUTABLE. InstalledFilePath0 End</em></p>
<p><em>FROM v_GS_INSTALLED_EXECUTABLE</em></p>
<p><em>INNER JOIN v_R_System_Valid</em></p>
<p><em>on v_R_System_Valid.ResourceID = v_GS_INSTALLED_EXECUTABLE.ResourceID</em></p>
<p><em>INNER JOIN v_FullCollectionMembership</em></p>
<p><em>on v_R_System_Valid.ResourceID= v_FullCollectionMembership.ResourceID</em></p>
<p><em>Where Product0 like 'Adobe%'</em></p>
<p><em>and v_FullCollectionMembership.CollectionID  = @Collection</em></p>
<p><em>order by v_GS_INSTALLED_EXECUTABLE.Product0, 'File Version'</em></p>
<p> </p>
<p>Big thanks to Weston and Julian for working with me on this!</p>]]></description>
			<pubDate>Wed, 09 Dec 2009 23:23:08 GMT</pubDate>
			<guid>http://www.systemcentercentral.com/BlogDetails/tabid/143/IndexId/57424/Default.aspx</guid>
		</item>
		<item>
			<title><![CDATA[Blog: QuickTricks - Determining what thresholds exist for the processor in OpsMgr]]></title>
			<link><![CDATA[http://www.systemcentercentral.com/BlogDetails/tabid/143/IndexId/57022/Default.aspx]]></link>
			<description><![CDATA[<p>Another one of the common questions asked is what are the thresholds which OpsMgr users to alert from a processor usage perspective? Similarly to the thresholds for a disk (<a title="http://blogs.catapultsystems.com/cfuller/archive/2009/10/09/quicktricks-–-determining-what-thresholds-exist-for-a-specific-drive-in-opsmgr.aspx" href="http://blogs.catapultsystems.com/cfuller/archive/2009/10/09/quicktricks-–-determining-what-thresholds-exist-for-a-specific-drive-in-opsmgr.aspx">http://blogs.catapultsystems.com/cfuller/archive/2009/10/09/quicktricks-–-determining-what-thresholds-exist-for-a-specific-drive-in-opsmgr.aspx</a>) the are two different values which are used to determine when a processor is bottlenecked. So, first question.</p>
<p><strong>Question</strong>: How do I determine what the processor thresholds are for a specific server in my OpsMgr environment?</p>
<p><strong>Answer</strong>:</p>
<p>In the Operations Console under Monitoring / Microsoft Windows Server / Windows Server State / find the server(s) you are looking for.</p>
<p>Open health explorer / Entity Health / Performance / Operating System Performance Rollup / Performance / Total CPU Utilization Percentage (shown below) and right-click on the monitor and go to properties.</p>
<p><a href="http://www.systemcentercentral.com/portals/0/VivoIndexItem/Index57022/WLW-QuickTricksDeterminingwhatthresholdsexis_98A1-processor6_2.jpg"><img title="processor6" border="0" alt="processor6" width="445" height="274" style="border-right-width: 0px; display: inline; border-top-width: 0px; border-bottom-width: 0px; border-left-width: 0px" src="http://www.systemcentercentral.com/portals/0/VivoIndexItem/Index57022/WLW-QuickTricksDeterminingwhatthresholdsexis_98A1-processor6_thumb.jpg" /></a></p>
<p>Some of the default thresholds are shown on the thresholds screen and are summarized below:</p>
<p><a href="http://www.systemcentercentral.com/portals/0/VivoIndexItem/Index57022/WLW-QuickTricksDeterminingwhatthresholdsexis_98A1-image_2.png"><img title="image" border="0" alt="image" width="508" height="438" style="border-right-width: 0px; display: inline; border-top-width: 0px; border-bottom-width: 0px; border-left-width: 0px" src="http://www.systemcentercentral.com/portals/0/VivoIndexItem/Index57022/WLW-QuickTricksDeterminingwhatthresholdsexis_98A1-image_thumb.png" /></a></p>
<p>Alert on CPU utilization percentage of 95% over 3 samples.</p>
<p><a href="http://www.systemcentercentral.com/portals/0/VivoIndexItem/Index57022/WLW-QuickTricksDeterminingwhatthresholdsexis_98A1-Processor03.png"><img title="Processor03" border="0" alt="Processor03" width="514" height="521" style="border-right-width: 0px; display: inline; border-top-width: 0px; border-bottom-width: 0px; border-left-width: 0px" src="http://www.systemcentercentral.com/portals/0/VivoIndexItem/Index57022/WLW-QuickTricksDeterminingwhatthresholdsexis_98A1-Processor03_thumb.png" /></a></p>
<p>And alert when we see the CPU Queue Threshold which is a value of 15 over two samples.</p>
<p> <a href="http://www.systemcentercentral.com/portals/0/VivoIndexItem/Index57022/WLW-QuickTricksDeterminingwhatthresholdsexis_98A1-processor04.png"><img title="processor04" border="0" alt="processor04" width="531" height="537" style="border-right-width: 0px; display: inline; border-top-width: 0px; border-bottom-width: 0px; border-left-width: 0px" src="http://www.systemcentercentral.com/portals/0/VivoIndexItem/Index57022/WLW-QuickTricksDeterminingwhatthresholdsexis_98A1-processor04_thumb.png" /></a></p>
<p>We combine this with how often the monitor is scheduled to run (every 2 minutes shown below).</p>
<p><a href="http://www.systemcentercentral.com/portals/0/VivoIndexItem/Index57022/WLW-QuickTricksDeterminingwhatthresholdsexis_98A1-processor05.png"><img title="processor05" border="0" alt="processor05" width="525" height="531" style="border-right-width: 0px; display: inline; border-top-width: 0px; border-bottom-width: 0px; border-left-width: 0px" src="http://www.systemcentercentral.com/portals/0/VivoIndexItem/Index57022/WLW-QuickTricksDeterminingwhatthresholdsexis_98A1-processor05_thumb.png" /></a></p>
<p>So, if we put that all together what is our default configuration?</p>
<p><strong>OpsMgr Processor Utilization Threshold default:</strong></p>
<p>Alert when CPU utilization is > 95% for 6 minutes (3 samples at a 2 minute schedule) AND when CPU Queue is > 15% for 4 minutes (2 samples at a 2 minute schedule)</p>
<p><strong>2nd Level Question</strong>: How do I set this to override to create a critical high priority alert when a server is using more than 80% cpu over a ten minute period?</p>
<p><strong>Answer</strong>:</p>
<ol>
    <li>In the Operations Console under Monitoring / Microsoft Windows Server / Windows Server State / find the server(s) you are looking for.</li>
    <li>Open health explorer / Entity Health / Performance / Operating System Performance Rollup / Performance / Total CPU Utilization Percentage (shown below) and right-click on the monitor and go to properties.</li>
    <li>Open the Overrides tab and create an override for the object (in this case the Total CPU Utilization Percentage for the specific server I want to override).</li>
    <li>For the override define Alert on State as Critical, Alert Priority as High, CPU Utilization Percentage Threshold to 80, CPU Queue Length Threshold to 1, and Number of Samples to 5.</li>
</ol>]]></description>
			<pubDate>Tue, 08 Dec 2009 17:44:24 GMT</pubDate>
			<guid>http://www.systemcentercentral.com/BlogDetails/tabid/143/IndexId/57022/Default.aspx</guid>
		</item>
		<item>
			<title><![CDATA[Blog: QuickTricks - How to find out what groups a computer is a member of in OpsMgr]]></title>
			<link><![CDATA[http://www.systemcentercentral.com/BlogDetails/tabid/143/IndexId/54904/Default.aspx]]></link>
			<description><![CDATA[<p> I was asked recently how to add a new server to the same groups which another server was already of member of in OpsMgr (add Server 5 to the same groups that Server 1 is a member of). At first glance this looks like a simple request – look at each group and see if the server is a member of the group and then add the new server to the same groups as the first server. However, if you have a large number of groups this isn’t as simple as it sounds. I started investigating doing this through the console and did not find an easy way to do this. Next I investigated doing this through powershell but came up blank. Finally a co-worker located this SQL query which can be run with the actual computer name (replace %computername% with the actual computer name to check in each group for):</p>
<p> </p>
<p>SELECT SourceMonitoringObjectDisplayName AS 'Group'</p>
<p>FROM RelationshipGenericView</p>
<p>WHERE TargetMonitoringObjectDisplayName like ('<strong>%computername%</strong>')</p>
<p>AND (SourceMonitoringObjectDisplayName IN</p>
<p>(SELECT ManagedEntityGenericView.DisplayName</p>
<p>FROM ManagedEntityGenericView INNER JOIN</p>
<p>(SELECT     BaseManagedEntityId</p>
<p>FROM          BaseManagedEntity WITH (NOLOCK)</p>
<p>WHERE      (BaseManagedEntityId = TopLevelHostEntityId) AND (BaseManagedEntityId NOT IN</p>
<p>(SELECT     R.TargetEntityId</p>
<p>FROM          Relationship AS R WITH (NOLOCK) INNER JOIN</p>
<p>dbo.fn_ContainmentRelationshipTypes() AS CRT ON R.RelationshipTypeId = CRT.RelationshipTypeId</p>
<p>WHERE      (R.IsDeleted = 0)))) AS GetTopLevelEntities ON</p>
<p>GetTopLevelEntities.BaseManagedEntityId = ManagedEntityGenericView.Id INNER JOIN</p>
<p>(SELECT DISTINCT BaseManagedEntityId</p>
<p>FROM          TypedManagedEntity WITH (NOLOCK)</p>
<p>WHERE      (ManagedTypeId IN</p>
<p>(SELECT     DerivedManagedTypeId</p>
<p>FROM dbo.fn_DerivedManagedTypes(dbo.fn_ManagedTypeId_Group()) AS fn_DerivedManagedTypes_1))) AS GetOnlyGroups ON</p>
<p>GetOnlyGroups.BaseManagedEntityId = ManagedEntityGenericView.Id))</p>
<p>ORDER BY 'Group'</p>
<p> </p>
<p>Thanks to Hamid Yusuff for find this and to the original author who’s article is available at: <a title="http://www.virmansec.com/forums/p/97/247.aspx" href="http://www.virmansec.com/forums/p/97/247.aspx">http://www.virmansec.com/forums/p/97/247.aspx</a></p>]]></description>
			<pubDate>Mon, 30 Nov 2009 15:39:47 GMT</pubDate>
			<guid>http://www.systemcentercentral.com/BlogDetails/tabid/143/IndexId/54904/Default.aspx</guid>
		</item>
		<item>
			<title><![CDATA[Blog: ReSearch This! KB - DHCP Scope Addresses Available Monitor]]></title>
			<link><![CDATA[http://www.systemcentercentral.com/BlogDetails/tabid/143/IndexId/52195/Default.aspx]]></link>
			<description><![CDATA[<p><b>Alert: </b>DHCP Scope Addresses Available Monitor</p>
<p><b>Issue: </b>In an environment with two DHCP servers with the scope split we had one of the DHCP scopes that were completely empty while the other scope had only three addresses in use. We determined that the IP helper information was incorrect for the second DHCP server.</p>
<p><b>Resolution: </b>In the network environment, re-configured the iphelper configuration to point to both DHCP servers with the correct IP addresses.</p>]]></description>
			<pubDate>Mon, 16 Nov 2009 20:00:14 GMT</pubDate>
			<guid>http://www.systemcentercentral.com/BlogDetails/tabid/143/IndexId/52195/Default.aspx</guid>
		</item>
		<item>
			<title><![CDATA[Blog: OpsMgr - No Cluster for you!]]></title>
			<link><![CDATA[http://www.systemcentercentral.com/BlogDetails/tabid/143/IndexId/51752/Default.aspx]]></link>
			<description><![CDATA[<p>Once in a while I through myself into a situation what while deep-dive debugging an OpsMgr issue, when I finally find the resolution I get a good chance to laugh at myself. This blog entry is a goodd example to laugh at and hopefully it will help someone else who ends up in the same situation I was in. So, here we go.</p>
<p> </p>
<p><u><em>Situation</em></u>: I was not seeing any of my clustered Exchange databases in the Exchange management pack. I initially thought that this was an issue within the Exchange 2007 management pack.</p>
<p> </p>
<p><u>Debug STEP 1</u>: I started with the assumption that I had not not enabled the appropriate discovery rules on the clustered Exchange pieces, but after checking on those I found that I had already enabled them.</p>
<p> </p>
<p><u>Debug STEP 2</u>: Next I checked the clustering management pack and saw that only <u>one</u> of my <u>six</u> clusters in the environment were appearing in the clustering management pack/so I figured it was cluster Management Pack related.</p>
<p> </p>
<p><u>Debug STEP 3</u>: To debug the clustering MP I opened the Operations Manager logs on the agent and found the following:</p>
<p><strong>Client event</strong>: 1102 Source HealthService</p>
<p>Rule/Monitor "System.Mom.BackwardCompatibility.Computer.IsHostingMSCS.Discovery" running for instance "SERVER" with id:"{ED873637-669D-57E6-6645-1872603D143E}" cannot be initialized and will not be loaded. Management group "MG1"</p>
<p> </p>
<p><u>Debug STEP 4</u>: I dug into the RMS and ran across these events which would recur every time I restarted the System Center Management service on the cluster nodes.</p>
<p><strong>RMS event</strong>: 33333 DataAccess Layer</p>
<p>Data Access Layer rejected retry on SqlError:</p>
<p>Request: p_RelationshipDiscovered -- (RelationshipId=24d9c744-f0f0-f598-16a5-c2f224db276d), (SourceEntityId=8cee6f8d-a6dc-3000-9879-af0b6fbf427b), (TargetEntityId=f6623c80-23a7-77e7-21ac-894396297850), (RelationshipTypeId=6284518a-90cc-fadd-e56b-26669e2a0a8f), (DiscoverySourceId=08e62d16-8a8d-c913-e23d-767a046cb17d), (HealthServiceEntityId=4c0bc849-29e2-f792-ba3d-36c840629c50), (PerformHealthServiceCheck=True), (TimeGenerated=11/12/2009 8:50:48 PM), (RETURN_VALUE=1)</p>
<p>Class: 16</p>
<p>Number: 777980002</p>
<p>Message: The specified relationship doesn't have a valid source.</p>
<p><strong>RMS event</strong>: 10801 Health Service Modules</p>
<p>Discovery data couldn't be inserted to the database. This could have happened because of one of the following reasons:</p>
<p>- Discovery data is stale. The discovery data is generated by an MP recently deleted.</p>
<p>- Database connectivity problems or database running out of space.</p>
<p>- Discovery data received is not valid.</p>
<p>The following details should help to further diagnose:</p>
<p>DiscoveryId: 0f1fba2c-d205-edb2-2259-1430d6206c10</p>
<p>HealthServiceId: 4c0bc849-29e2-f792-ba3d-36c840629c50</p>
<p>Invalid relationship source specified in the discovery data item.</p>
<p>RelationshipSourceBaseManagedEntityId: 8cee6f8d-a6dc-3000-9879-af0b6fbf427b</p>
<p>RuleId: 0f1fba2c-d205-edb2-2259-1430d6206c10</p>
<p>Instance:</p>
<p><?xml version="1.0" encoding="utf-16"?><RelationshipInstance TypeId="{6284518a-90cc-fadd-e56b-26669e2a0a8f}" SourceTypeId="{ea99500d-8d52-fc52-b5a5-10dcd1e9d2bd}" TargetTypeId="{f6c65f1e-01b5-151a-f469-c05d0518b972}"><Settings /><SourceRole><Settings><Setting><Name>5c324096-d928-76db-e9e7-e629dcc261b1</Name><Value>HPSMXCLUSTER01.hps.com</Value></Setting></Settings></SourceRole><TargetRole><Settings><Setting><Name>5c324096-d928-76db-e9e7-e629dcc261b1</Name><Value>HPSMXCLUSTER01.hps.com</Value></Setting><Setting><Name>a27b57c5-6479-9ce8-8682-b83228266ceb</Name><Value>CCR Cluster</Value></Setting></Settings></TargetRole></RelationshipInstance>.</p>
<p> </p>
<p><u>Debug STEP5</u>: After reviewing these events I needed to translate some of the GUID type numbers into something that I could figure out what it was.</p>
<p> </p>
<p><em>Using this query I determined what systems were reporting errors: (where the actual GUID value is specified in the alert)</em></p>
<p>Select * from dbo.BaseManagedEntity where BaseManagedEntityID = <em>'GUID'</em></p>
<p> </p>
<p><em>Using this query I determined what discovery was failing: (where the actual GUID value is specified in the alert)</em></p>
<p>select MP.MPName, D.DiscoveryName, MT.TypeName from Discovery D with (nolock)</p>
<p>join ManagementPack MP with(nolock) on MP.ManagementPackId = D.ManagementPackId</p>
<p>join ManagedType MT with(nolock) on MT.ManagedTypeId = D.DiscoveryTarget</p>
<p>where D.DiscoveryId = <em>'GUID'</em></p>
<p> </p>
<p><em>Using this query I determined what the relationshiptypeid was: (where the actual GUID value is specified in the alert)</em></p>
<p>select * from relationshiptype where RelationshipTypeId=<em>'GUID'</em></p>
<p> </p>
<p><u>Debug STEP 6</u>: From web research based upon what I received in the event logs and the systems reporting the error it seemed to be pointing out that I had not enabled proxy on these servers  (<a title="http://systemcenterinfo.blogspot.com/2008/06/scom-alert-agent-proxying-needs-to-be.html" href="http://systemcenterinfo.blogspot.com/2008/06/scom-alert-agent-proxying-needs-to-be.html">http://systemcenterinfo.blogspot.com/2008/06/scom-alert-agent-proxying-needs-to-be.html</a>). So I verified that I had enabled proxy on the systems. I tried enabling proxy both from the UI, and even from ProxyCfg (<a title="http://wchomak.spaces.live.com/blog/cns!F56EFE25599555EC!738.entry" href="http://wchomak.spaces.live.com/blog/cns!F56EFE25599555EC!738.entry">http://wchomak.spaces.live.com/blog/cns!F56EFE25599555EC!738.entry</a>). But any way I investigated this it was enabled.</p>
<p> </p>
<p><u>Debug STEP 7</u>: Figuring that this might be a bad agent configuration, I tried to uninstall the OpsMgr Agents and delete them from the console. Then I re-deployed the agents, re-configured proxy (which was still enabled) and re-tested. The same events were occurring on the RMS and client systems.</p>
<p> </p>
<p><u>Side-Thoughts</u>: At about this point in time my mind started rambling to the title of this blog article because it seemed like anything I tried wouldn’t get the darn cluster identified: <font size="3">No Cluster for You!</font></p>
<p>(for those who haven’t seen this or it’s before your time see below)</p>
<div id="scid:5737277B-5D6D-4f48-ABFC-DD9C333F4C5D:bf44a565-30a5-453a-8899-d642df87a04f" class="wlWriterEditableSmartContent" style="padding-bottom: 0px; margin: 0px; padding-left: 0px; padding-right: 0px; display: inline; float: none; padding-top: 0px">
<div id="793fe725-f7c9-4027-a3a3-1e848571e344" style="padding-bottom: 0px; margin: 0px; padding-left: 0px; padding-right: 0px; display: inline; padding-top: 0px">
<div><a target="_new" href="http://www.youtube.com/watch?v=kNwbjcuQUv8"><img alt="" galleryimg="no" onload="var downlevelDiv = document.getElementById('793fe725-f7c9-4027-a3a3-1e848571e344'); downlevelDiv.innerHTML = "<div><object width=\"235\" height=\"175\"><param name=\"movie\" value=\"http://www.youtube.com/v/kNwbjcuQUv8&hl=en\"><\/param><embed src=\"http://www.youtube.com/v/kNwbjcuQUv8&hl=en\" type=\"application/x-shockwave-flash\" width=\"235\" height=\"175\"><\/embed><\/object><\/div>";" style="border-bottom-style: none; border-right-style: none; border-top-style: none; border-left-style: none" src="http://www.systemcentercentral.com/portals/0/VivoIndexItem/Index51752/WLW-OpsMgrNoClusterforyou_85E5-video27e3ada22bef.jpg" /></a></div>
</div>
</div>
<p> </p>
<p><u>Debug STEP 8</u>: I finally figured out what the issue was and I sounded similar to this.</p>
<div id="scid:5737277B-5D6D-4f48-ABFC-DD9C333F4C5D:0a0c2134-b160-4926-b74c-190e049ab7ec" class="wlWriterEditableSmartContent" style="padding-bottom: 0px; margin: 0px; padding-left: 0px; padding-right: 0px; display: inline; float: none; padding-top: 0px">
<div id="cda06bbc-92d5-4872-9c7f-3617cc0ef6f7" style="padding-bottom: 0px; margin: 0px; padding-left: 0px; padding-right: 0px; display: inline; padding-top: 0px">
<div><a target="_new" href="http://www.youtube.com/watch?v=g6GuEswXOXo"><img alt="" galleryimg="no" onload="var downlevelDiv = document.getElementById('cda06bbc-92d5-4872-9c7f-3617cc0ef6f7'); downlevelDiv.innerHTML = "<div><object width=\"234\" height=\"175\"><param name=\"movie\" value=\"http://www.youtube.com/v/g6GuEswXOXo&hl=en\"><\/param><embed src=\"http://www.youtube.com/v/g6GuEswXOXo&hl=en\" type=\"application/x-shockwave-flash\" width=\"234\" height=\"175\"><\/embed><\/object><\/div>";" style="border-bottom-style: none; border-right-style: none; border-top-style: none; border-left-style: none" src="http://www.systemcentercentral.com/portals/0/VivoIndexItem/Index51752/WLW-OpsMgrNoClusterforyou_85E5-video2050d89157a4.jpg" /></a></div>
</div>
</div>
<p>The system was identified as a cluster (which can be seen by opening the Operations Manager Console/Monitoring/Discovered Inventory and choosing the target type of Windows Cluster Services) but could not configure it as a cluster because I had not configured the RunAs account for this domain! We have a multiple-forest configuration with clusters running in each forest. The one cluster which was working was the only cluster in that forest. The rest of the clusters were in another forest. I had put a question about this when I had initially deployed the clustering management pack but I had not tracked this issue back to that root cause yet (article available at: <a title="http://social.technet.microsoft.com/Forums/en-US/operationsmanagermgmtpacks/thread/b9bc85de-8403-4c28-a1cf-9397cd66582f" href="http://social.technet.microsoft.com/Forums/en-US/operationsmanagermgmtpacks/thread/b9bc85de-8403-4c28-a1cf-9397cd66582f">http://social.technet.microsoft.com/Forums/en-US/operationsmanagermgmtpacks/thread/b9bc85de-8403-4c28-a1cf-9397cd66582f</a>).</p>
<p> </p>
<p>Once the cluster was identified, the Exchange discovery occurred correctly so that the next morning when I went back to the console my Exchange clustered mailbox servers now were appearing correctly in the Exchange management pack.</p>
<p> </p>
<p>So… What’s my lessons learned from this?</p>
<p> </p>
<p>1) Check the assumptions at the door. Just because I wasn’t seeing the server in the Exchange MP didn’t mean it was an Exchange issue to debug. Start with the basics. Does it have an agent on it? Is the agent working? If it’s an Clustered application, is it visible in the clustering management pack?</p>
<p>2) On the RMS, regularly check for error/warning/critical alerts in the Operations Manager log and debug based upon them. That log contains all sorts of hints for strange issues which may occurring in the OpsMgr environment.</p>
<p>3) From the Operations Manager event log entries use SQL queries to translate GUID’s into something more understandable.</p>
<p>4) <strong>Read the management pack guides.</strong> The clustering MP specifically stated to configure the RunAs account and to enable proxy for each node in the cluster.</p>]]></description>
			<pubDate>Fri, 13 Nov 2009 16:12:09 GMT</pubDate>
			<guid>http://www.systemcentercentral.com/BlogDetails/tabid/143/IndexId/51752/Default.aspx</guid>
		</item>
		<item>
			<title><![CDATA[Blog: ReSearch This! KB - Application of Group Policy Alert]]></title>
			<link><![CDATA[http://www.systemcentercentral.com/BlogDetails/tabid/143/IndexId/51749/Default.aspx]]></link>
			<description><![CDATA[<p><b>Alert: </b>Application of Group Policy Alert</p>
<p><b>Issue: </b>Windows failed to apply the Folder Redirection settings. The alert context tab shows the computer logging the issue and the user account which it is occurring for. In this case it was an event number 1085 from the source of Microsoft-Windows-GroupPolicy. The alert context indicates that it failed to complete the function of folder redirection. This appears to only occur on Windows Server 2008 systems when users that have Folder Redirection settings in place log into the system. The same users do not have this issue when logging into Windows Server 2003 systems. This error is not causing the users issues when they are logged into the Windows 2008 server systems.</p>
<p><b>Resolution: </b>Created an override to disable this alert for Windows Server 2008 Computer Group.</p>
<p><b>Submitted By: </b>Cameron Fuller (MVP)</p>]]></description>
			<pubDate>Fri, 13 Nov 2009 15:07:42 GMT</pubDate>
			<guid>http://www.systemcentercentral.com/BlogDetails/tabid/143/IndexId/51749/Default.aspx</guid>
		</item>
	</channel>
</rss>
