Thursday, October 11, 2012

Blog Update!!!

Because I moved on and started working with Microsoft, I am shutting down this blog, and will be blogging on the Microsoft's System Center Operations Manager team blog.

http://blogs.technet.com/b/momteam/

I am looking forward in putting out great stuff.
look for me Lynne Taggart

Thursday, February 23, 2012

Blog Status

 

I’ve been really busy with many things and many things are changing, to include this blog. I will end this blog here, and be starting up / moving to a new location. More to follow.

Thursday, February 2, 2012

Starting Snap-in from the command line

I can not take the total credit for this, a co-worker provided this list for everyone and I thought it was something good to share

 

You can start programs from the command line using these commands for those that need to:

Active Directory Management [admgmt.msc]

ADSI Edit snap-in [adsiedit.msc]

Application Server snap-in [appsrv.msc]

Authorization snap-in [azman.msc]

Certificates snap-in [certmgr.msc]

Certificate Authority snap-in [certsrv.msc]

Certificate Templates snap-in [certtmpl.msc]

Indexing Service snap-in [ciadv.msc]

Component Services snap-in [comexp.msc]

Computer Management snap-in [compmgmt.msc]

Default Domain Controller Security Settings snap-in [dcpol.msc]

Device Manager snap-in [devmgmt.msc]

Disk defragmenter snap-in [dfrg.msc]

Distributed File System snap-in [dfsgui.msc]

DHCP snap-in [dhcpmgmt.msc]

Disk Management snap-in [diskmgmt.msc]

DNS snap-in [dnsmgmt.msc]

Active Directory Domains and Trusts snap-in [domain.msc]

Default Domain Security Settings snap-in [dompol.msc]

Active Directory Users and Computers snap-in [dsa.msc]

Active Directory Sites and Services snap-in [dssite.msc]

Event Viewer snap-in [eventvwr.msc]

Exchange System Manager snap-in [Exchange System Manager.msc]

File Server Management snap-in [filesvr.msc]

Shared Folders snap-in [fsmgmt.msc]

Microsoft Fax Service Manager snap-in [fxsadmin.msc]

Group Policy snap-in [gpedit.msc]

Group Policy Management snap-in [gpmc.msc]

Internet Authentication Service snap-in [ias.msc]

Internet Information Services snap-in [inetsrviis.msc]

IP Address Management snap-in [ipaddrmgmt.msc]

Local Users and Groups snap-in [lusrmgr.msc]

.NET Configuration 1.1 snap-in [mscorcfg.msc]

Removable Storage snap-in [ntmsmgr.msc]

Removable Storage Operator Requests snap-in [ntmsoprq.msc]

Performance snap-in [perfmon.msc]

Enterprise PKI snap-in [pkiview.msc]

Public Key Management snap-in [pkmgmt.msc]

Routing and Remote Access snap-in [ rrasmgmt.msc]

Remote Storage snap-in [rsadmin.msc]

Resultant Set of Policy snap-in [rsop.msc]

Active Directory Schema snap-in [schmmgmt.msc]

Local Security Settings snap-in [secpol.msc]

Services snap-in [services.msc]

Sidwalk snap-in [sidwalk.msc]

Telephony snap-in [tapimgmt.msc]

Services Configuration/Connections snap-in [tscc.msc]

Remote Desktops snap-in [tsmmc.msc]

UDDI Services Console snap-in [uddi.msc]

Active Directory Users & Computers (Exch ver)snap-in [users and computers.msc]

WINS snap-in [winsmgmt.msc]

Windows Management Infrastructure (WMI) snap-in [wmimgmt.msc]

Tuesday, January 17, 2012

SCOM Zombie PSA#30: Event ID 21042

 

A few weeks ago someone (aka zombie) thought they were manually uninstalling a SCOM agent from a managed server. What they didn’t know was that they were NOT on the server they thought they were on but it was the Root Management Server. What comes next? They uninstalled the SCOM software from the Root Management Server. I knew this because I was on the server troubleshooting bad agents and everything closed out on me. I immediately check my event logs to see why, and the Operations Manager event log was GONE. I know, RIGHT! (aka Zombie Apocalypse)

But luck was on our side, and we were able to re-install SCOM back and apply the backup keys. everything was going good so we thought.

About 24 hours later the Root Management Server had the following alerts in the Operations Manager event log. I mean nothing but this event; it was pouring a lot of these event id every second.

There was not much out there in the world on this event id that we could find.


Event Type:       Information

Event Source:    OpsMgr Connector

Event Category: None

Event ID:           21042

Computer:        RMS.FQDN

Description:

Operations Manager has discarded 1 item in management group <Management Group Name>, which came from $$ROOT$$. These items have been discarded because no valid route exists at this time. This can happen when devices are added to the topology but the completed topology has not been distributed yet. the discarded items will be regenerated.


Funny thing was each of the management Servers that had agents report to them were being flooded with these alerts.


Event Type:       Information

Event Source:    OpsMgr Connector

Event Category: None

Event ID:           20000

Computer:         RMS.FQDN

Description:

A device which is not part of this management group has attempted to access this Health Service. Requesting Device Name: ServerName.FQDN 


The quick fix was to “”Re-Enter”” each of the Run-As accounts back manually. Once this was done, the 21042 alert went away. However many of the event id 20000 didn’t all clear up. it took some manual process of stopping the agent service and deleting the Health Service State folder and re-starting the service again to make the some of the agents communicate back.

In my lab I was able to re-create the issue and correct it by doing this. I don’t fully understand all the details just yet but I’m working on that, if I can get some more time to it.

SCOM Zombie PSA#29: Alerts in console not showing up

 

This caught me off guard just now. When I opened my web console, there was a couple of alerts but when I opened my console up no alerts displayed. funny since it stated 8 active alerts.

image

The quick fix was that my Alert Detail tab was all the way up, so I just dragged and dropped it down to expose my alerts.

image