HOUSTONTECHBLOG.REDECONSULTANTS.COM

Operations Manager 2007: List of Resource Kit Tools

2008-03-12T22:25:00Z

Looking for the complete list of Resource Kit tools for System Center Operations Manager 2007? Here you go:

Name: Sample Vista Gadget

Link: http://www.microsoft.com/downloads/details.aspx?FamilyID=0f5a060b-635d-4355-b0ac-32ee2943bfd9&DisplayLang=en

Description: A Vista Gadget that enables you to view the active alerts and health states for a specified set of objects from a computer running Windows Vista.

Name: Operations Manager Inventory

Link: http://www.microsoft.com/downloads/details.aspx?FamilyID=10e79763-6906-4f44-86c6-fbabb0bf1b9f&DisplayLang=en

Description: A command-line utility that captures the configuration of your Operations Manager 2007 Management Servers and stores it in a .cab file that can be sent to Microsoft support to assist in problem analysis.

Name: Operations Manager Cleanup Tool

Link: http://www.microsoft.com/downloads/details.aspx?FamilyID=14ff7073-c71b-4ad0-805a-a8e458d2c9e0&DisplayLang=en

Description: A command-line utility that enables you to remove any or all of the components of Operations Manager from a local computer in cases where the normal method of uninstallation has failed.

Name: AEM Validation

Link: http://www.microsoft.com/downloads/details.aspx?FamilyID=db979eb5-b423-4b14-8664-b16dc8157e8d&DisplayLang=en

Description: A command line utility that will allow you to perform end-to-end validation of Agent-less Exception Monitoring to verify that AEM is properly configured and operational.

Name: AEM Management Pack

Link: http://www.microsoft.com/downloads/details.aspx?FamilyID=6f0ba772-8521-4717-ab54-80ecd1f75aec&DisplayLang=en

Description: A Management Pack that enables you to identify generic errors sent by Windows Error Reporting (WER) clients to Management Servers that are AEM-enabled. Without this mapping function these errors appear in Operations Manager as "unknown application" and "unknown version".

Name: Active Directory Integration Sample Script

Link: http://www.microsoft.com/downloads/details.aspx?FamilyID=b3aa2d5a-b56c-40e8-8b63-139865a1749b&DisplayLang=en

Description: A sample script that enables you to extract a list of computer names from your custom SQL Server database and add them to an Active Directory security group. The security group can then be referenced in the Agent Assignment and Failover Wizard to automate agent assignments to Management Servers.

Name: Effective Configuration Viewer

Link: http://www.microsoft.com/downloads/details.aspx?FamilyID=a9db4dca-6716-478d-89b9-42f27ebc76a8&DisplayLang=en

Description: A tool that displays the set of rules and monitors that are running on a computer, distributed application, or any other managed entity after any configured overrides have been applied.

Name: Action Account Tool

Link: http://www.microsoft.com/downloads/details.aspx?FamilyID=1d9a8d81-0e42-4076-88a9-8e6c08993054&DisplayLang=en

Description: A PowerShell script that allows you to set the action account on groups of computers.

The Wait is over! System Center Operations Manager Cluster MP is now available!

2008-03-06T20:24:00Z

If you have installed Operations Manager 2007 SP1, there are no prerequisites to be met before loading the System Center Operations Manager Cluster Management Pack.

If you have not yet upgraded your SCOM installation to SP1, apply the KB945312 QFE ON EACH Management server prior to installing the Cluster management pack.

Download the Cluster Management Pack from www.microsoft.com/downloads/details.aspx?FamilyID=ac7f42f5-33e9-453d-a923-171c8e1e8e55&DisplayLang=en.

For information on the premier technology consulting group in Houston, contact Rede Consulting at 713-965-7288 or via email at info@redeconsult.com

Operations Manager SP1 RTM command shell requires Powershell scripts to be digitally signed

2008-03-02T18:22:00Z

After installing SP1 RTM, we noticed that Powershell scripts that we frequently run will no longer run unless they are digitally signed or the execution policy is modified. For those who do not have code signing certificates and want to modify the execution policy, run the command set-executionpolicy unrestricted.

This is not a suggested setting!, but will allow you to run scripts whilst you work through the procedure to buy or create your own authority. For details on creating your own signing certificate, run get-help about_signing.

For information on the premier technology consulting group in Houston, contact Rede Consulting at 713-965-7288 or via email at info@redeconsult.com

Operations Manager 2007 Agent upgrade from SP1 RC to SP1 RTM

2008-02-26T14:37:00Z

It was brought to my attention this morning that the upgrade documentation shipped with SP1 RTM failed to call out a change in the upgrade method of SP1 RC agents (6246) to SP1 RTM (6278). An update to the upgrade guide and release notes are pending, but below is the proper procedure to follow if you are upgrading from RC to RTM – do NOT use the approval method from pending management.

To upgrade agents from Operations Manager 2007 SP1 RC (build 6246) to Operations Manager 2007 SP1 (build 6278) using the Operations Console

1. Log on to the computer hosting the Operations Console with an account that is a member of the Operations Manager Administrators role for the Operations Manager 2007 management group.

2. In the Operations Console, click Administration.

Note

When you run the Operations Console on a computer that is not a management server, the Connect To Server dialog box appears. In the Server name text box, type the name of the Operations Manager 2007 management server to which you want to connect.

3. In the Administration pane, expand Device Management, and then click Agent Managed.

4. In the Agent Managed pane, select the agents that are listed as version 6.0.6246.0, right-click them, and then select Repair.

5. In the Repair Agents dialog box, select the appropriate agent action account, and then click Repair.

For information on the premier technology consulting group in Houston, contact Rede Consulting at 713-965-7288 or via email at info@redeconsult.com

System Center Operations Manager 2007 SP1 RTM

2008-02-23T18:20:00Z

After much anticipation from the Ops Mgr community, Microsoft has made System Center Operations Manager SP1 RTM available for download at www.microsoft.com/downloads/details.aspx?FamilyID=ede38d83-32d1-46fb-8b6d-78fa1dcb3e85&DisplayLang=en.

What's new (Source: What's New in Ops Mgr 2007 SP1)

Operations Manager 2007 SP1 addresses critical customer-initiated issues, including improved deployment, performance, reporting, and enhanced support.

Highlighting some of the key new features and enhancements:

New capability to export Operations Manager 2007 diagrams to Microsoft Visio VDX file format.
New ability to publish reports to multiple locations, such as Microsoft Windows SharePoint Services Web sites.
Improved performance and reliability across the product, such as when working with alerts, overrides, and searches.
Enhanced "advanced search" by improved the ability to search across monitors and rules by their overrides.
Simplifying the creation of new management packs by allowing users to copy views from existing management packs to an unsealed management pack.
New ability view performance data through the Operations Manager Web console, and setup filters for desired performance counters to ease searching and navigation.
New discoveries and views added to the Audit Collection Services (ACS), along with new monitors and alerts to track the health of ACS collectors.
Enhanced backup and recovery with the introduction of an easier-to-use Secure Storage Backup Wizard.

For information on the premier technology consulting group in Houston, contact Rede Consulting at 713-965-7288 or via email at info@redeconsult.com

Windows Server 2008 Released to Manufacturing!

2008-02-05T22:06:00Z

Windows Server 2008 was released to manufacturing today and will be available for purchase to new customers on March 1. MVL customers with active SA coverage or an EA will be able to download the software by the end of February.

For information on the premier technology consulting group in Houston, contact Rede Consulting at 713-965-7288 or via email at info@redeconsult.com

Vista SP1 Released

2008-02-05T03:17:00Z

Windows Vista Service Pack 1 (SP1) was released to manufacturing today and will start being available to customers in March, starting with Microsoft Volume Licensing customers. Read more at http://www.microsoft.com/presspass/press/2008/feb08/02-04VistaSP1MA.mspx

For information on the premier technology consulting group in Houston, contact Rede Consulting at 713-965-7288 or via email at info@redeconsult.com

System Center Operations Manager 2007 Service Pack 1 Training Videos

2008-01-21T18:01:00Z

The first wave of OpsMgr 2007 Sp1 training videos are now live on TechNet.

There are 9 different OpsMgr 2007 Sp1 videos available on the link below:

http://technet.microsoft.com/en-us/opsmgr/bb986763.aspx

For information on the premier technology consulting group in Houston, contact Rede Consulting at 713-965-7288 or via email at info@redeconsult.com

Install ACS Forwarder on RMS or Management Server

2008-01-03T15:50:00Z

Below is a quick and dirty procedure to install and enable ACS Forwarding on a System Center Operations Manager RMS or Management Server.

1. Copy adtagent.exe to C:\windows\system32
2. Run command adtagent -install
3. Edit HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\AdtAgent\Parameters

    a. Ensure/Add DWORD key EventlogLoggingLevel is set to 2
    b. Add DWORD key LocalConfig and set to 2
    c. Add DWORD key NoCache and set to 2
    d. Add Multi-String Value key AdtServers and enter name of the collector to  forward to.

4. In Services CP, set Operations Manager Audit Forwarding Service to Automatic and start.
5. Verify by running SELECT * FROM dbo.dtMachine on the OperationsManagerAC database and finding the management server name. Could also run SELECT * FROM dbo.dtMachine WHERE Description = 'DOMAINNAMEHERE\MACHINENAMEHERE$'

For information on the premier technology consulting group in Houston, contact Rede Consulting at 713-965-7288 or via email at info@redeconsult.com

Help! I have lost my RMS encryption key

2007-12-13T18:12:00Z

So let's say I have a functional OpsMgr 2007 infrastructure in place and then for whatever reason have to reinstall/replace the Root Management Server (RMS), but I didn't backup my RMS encryption key. What are the exact ramifications of this and what would I need to do to correct it?

Prior to Service Pack 1 (SP1), if something happened to your RMS and it had to be replaced, and you didn't backup your key, you were basically out of luck. Your only recourse was to rebuild from scratch - not a pretty picture. That's why we always told people to make sure they backed up their key as soon as they installed:

Backing up your RMS encryption key: http://technet.microsoft.com/en-us/library/bb309563.aspx.

Now with SP1, we have a new CREATE_NEWKEY command line switch that can make recovering from a situation like this potentially much easier. We also made running the encryption key backup process a mandatory process of setup, just so you'll have a friendly reminder.

So let's take a look at a couple scenario's:

1. The Root Management Server is replaced or reinstalled and the key is not backed up or the password to the key is lost. There are no other Management Servers to promote.

Solution: Install a new Management Server (the RMS replacement) and be sure the computer name is the same name as the previous Root Management Server that is being replaced. Setup will detect that the machine name is same as the Root Management Server in the database so it will recreate a new key and register the licenses.

2. The Root Management Server is replaced or reinstalled and the key is not backed up or the password to the key is lost. There is at least one Management Server to promote to Root Management Server.

Solution: On the Management Server that will become the new Root Management Server, run MOM.msi with the CREATE_NEWKEY switch (msiexec.exe /i <Path to MOM.msi> CREATE_NEWKEY=1). Configure the account for SDK/Config services (this account should have permission to the database, the SDK service account should be added to the SDK_users role, and the config service account should be added to the configsvc_users role). Promote the Management Server to Root Management Server.

3. The registry on the Root Management Server got corrupted, thus the encryption key is lost.
Solution: Run MOM.msi with special switch (msiexec.exe /i <Path to MOM.msi> CREATE_NEWKEY=1)

So does this mean you don't have to worry about backing up your keys? No, you should always backup your keys and keep them in a safe place as doing so will potentially save you a lot of trouble down the road, but now if something happens there's possibly a way to recover without having to rebuild.

For information on the premier technology consulting group in Houston, contact Rede Consulting at 713-965-7288 or via email at info@redeconsult.com

Operations Manager 2007 SP1 Released

2007-11-05T12:10:00Z

Source: Stefan Stranger's Weblog

Release Candidate details:
· This will be publicly available release. Customers can download the Service Pack 1 RC from Microsoft Connect. Signup for this is public and available at http://connect.microsoft.com/systemcenter
· This release will be fully supported. Support options include:
o Microsoft Customer Support Services (CSS) – you can use your standard support options to get support on this edition
o Newsgroups – there will be a dedicated SP1 newsgroup
o Hotfixes requests that are accepted will be incorporated into the final RTM version
· This release is fully upgradable to the final RTM version of the Service Pack.
What's New in Operations Manager 2007 Service Pack 1
This topic describes some of the improvements and major changes in functionality that are included in Operations Manager 2007 Service Pack 1 (SP1). Operations Manager 2007 SP1 is available in two ways. First, it is offered as a standalone executable file that you use to upgrade an existing Microsoft System Center Operations Manager 2007 installation. Second, it has been "slipstreamed" into the Operations Manager 2007 installation media, which means that you can install Operations Manager 2007 from scratch and the final installed version will be Operations Manager 2007 SP1. Operations Manager 2007 SP1 is available for both x86-based and x64-based computers.
New Features
The new features that are in Operations Manager 2007 SP1 are:
· Improved performance and reliability when working with alerts, overrides, and searches.
· In all Alert views, performance has been increased through better fetching and yields alert row selection that is three times quicker. Actions and reports are fetched in the background, which further improves performance. Alert knowledge that is displayed in the Alert Details pane can be shown or hidden according to the user's preference.
· Operations Manager 2007 advanced search has been improved by enabling the ability to search across monitors and rules by their overrides.
· Support for the discovery and monitoring of both SNMP v1 and SNMP v2 network devices. Users can select which SNMP Community Version to search for in the Discovery Wizard.
· Support for exporting Operations Manager 2007 diagrams to Microsoft Visio VDX file format. Note that the Visio button is located on the toolbar when in a diagram view. Diagram layouts can now be saved and will be remembered when the diagram view is selected again.
· Support for copying and pasting (CTRL+C and CTRL+V) from the Alert details pane.
Setup and Recovery
The following are improvements in setup and recovery:
· To make backup and recovery easier, setup in Operations Manager 2007 SP1 starts the Secure Storage Backup Wizard at the end of setup, by default, to back up the RMS encryption keys. This is the same command-line tool used in the original version of Operations Manager 2007, but with an easier-to-use wizard interface. The wizard is actually started by using the command-line version of the tool when no parameters are passed to the tool or it is started from Windows Explorer. The Secure Storage Backup tool is located on the installation media in the Support Tools directory. The Secure Storage Backup Wizard can be started according to the user's preference.
· To make the recovery of a clustered RMS easier, Operations Manager 2007 SP1 enables the repromotion of the RMS cluster to the RMS role after it is fixed. This addresses the situation where a clustered RMS has failed and another management server in the management group has been promoted into the RMS role.
User Interface and Experience
The following are improvements in user interface and experience:
· To make the creation of new management packs easier, Operations Manager 2007 SP1 introduces the ability to copy views from any existing management pack to an unsealed management pack. This is done in the Monitoring view. For example, if you have created a management pack for SQL Server overrides and want to use one of the SQL Server management pack views in the SQL Server overrides management pack, you would simply select the desired view, right-click to copy it, and then paste it into the target management pack folder.
· In all Alert views in the Monitoring space and in the Web console, Operations Manager 2007 SP1 ensures that the Repeat Count value is incremented correctly.
· After you have created an override for any management pack object, you can look at the summary of overrides for the object type in the Overrides Summary box. Operations Manager 2007 SP1 ensures that the description of the override target is complete. For example, if you create an override for Logical Disk Free Space for the C:\ of Server1, the summary will display 'server1/c:'
Core Product
The following are improvements in the core Operations Manager 2007 product:
· SP1 ensures that when agents are uninstalled from a computer in the Administration space\Device Management container\Agent Managed node of the Operations Console, that they are also removed from the computer views in the Monitoring space.
· Scripts can now be used for diagnostic tasks.
· View names, data and, display strings in the Operations Console that have been collected from computers running different language versions of Microsoft Windows operating systems are displayed correctly.
Reporting
The following are improvements to reporting:
· When you are in a report, you can now choose to publish the report by selecting Publish from the File menu. This will allow you to publish reports to multiple locations, such as Microsoft Windows SharePoint Services Web sites.
Web Console
The following are improvements in the Operations Manager 2007 Web console:
· The Operations Manager Web console provides access to performance data. Users can then select specific counters to graph. In Operations Manager 2007 SP1, it is now possible to construct a filter for the desired performance counters to ease searching and navigation. This ability is available when a performance view is selected and displays in the Performance legend pane. The search options available are All items, Items in the Chart, Items not in the Chart, and Items by text search.
· The Web console has been further improved so that the Favorite Reports container is now available in My Workspace.
Audit Collection Services (ACS)
The following are improvements for ACS:
· New discoveries and views have been added. These features detect and indicate which agents and servers are ACS-forwarding enabled.
· There are more monitors and alert generating rules to track the health state of the ACS collectors. For example, Operations Manager 2007 SP1 includes the ability to watch the DB Queue % full level against default thresholds, such as the back-off threshold or disconnect threshold.
· The ACS forwarder feature is now supported on the Management and Gateway Server roles. The ACS Forwarder is disabled by default. When enabled, it will allow the inclusion of security auditing data for these server roles.
· When using ACS, one of the most common tasks is to enable forwarding on ACS agents. In Operations Manager 2007 SP1, an Operations Manager Command Shell script can be used to enable forwarding for entire computer groups, thereby greatly easing the deployment and administration of ACS. Agentless Exception Monitoring (AEM) AEM now provides an improved appearance and functionality of AEM reports.

For information on the premier technology consulting group in Houston, contact Rede Consulting at 713-965-7288 or via email at info@redeconsult.com

MOM 2005 versus SCOM 2007 – A bandwidth utilization challenge

2007-10-23T18:09:00Z

Satya Vel has posted a good entry on the Operations Manager Product Team Blog concerning Network Bandwidth Utilization for the various OpsMgr 2007 Roles. As a follow-up to Satya's comments on bandwidth utilization, I have posted the below graphic illustrating bandwidth used by 150 agents of each MOM version (MOM 2005 and SCOM 2007). Excellent improvement to say the least.

For information on the premier technology consulting group in Houston, contact Rede Consulting at 713-965-7288 or via email at info@redeconsult.com

TechEd IT Forum 2007

2007-10-19T20:34:00Z

A number of us from Rede Consulting will be attending Europe's top Microsoft conference - IT Forum. It is held in Barcelona this year. If any customers, or anyone reading this blog, are attending, drop us a line so that we can meet.

For information on the premier technology consulting group in Houston, contact Rede Consulting at 713-965-7288 or via email at info@redeconsult.com

System Center Operations Manager Firewall Requirements

2007-10-19T18:05:00Z

We've recently had a few queries on firewall ports from SCOM. The following table describes the necessary firewall requirements for the Root/Management Server, Agent, Operations Console and Web Console components:

Point A	Point B	Port
Root/Management Server	Operations Manager Database	1433
Management Server	Root Management Server	5723
Agent	Management Server	5723
Operations Console	Root Management Server	5724
Web Browser	Web Console Server	51908

The following table describes the necessary firewall requirements when using Gateway Severs:

Point A	Direction	Point B	Port
Root Management Server	<->	Gateway Server	5723
Gateway Server	<-	Agent	5723
Management Server	<->	Gateway Server	5723
Gateway Server	<->	Gateway Server	5723

For information on the premier technology consulting group in Houston, contact Rede Consulting at 713-965-7288 or via email at info@redeconsult.com

SQL Failed Jobs report

2007-05-30T17:05:00Z

I went to pull a listing of failed SQL jobs from Operations Manager a while back and found that there is no report to provide this information. I wrote a quick report to gather this information from the Operations Manager data warehouse. Grab the rdl and/ sql script from the links below.

--SQL Failed Jobs SQL query (.sql)

--Failed SQL Jobs report (.rdl)

For information on the premier technology consulting group in Houston, contact Rede Consulting at 713-965-7288 or via email at info@redeconsult.com

Enable Detailed Logging for ACS Forwarder

2007-05-10T17:03:00Z

In order to troubleshoot various ACS issues this past week, I enabled detailed logging on the ACS forwarder. The below steps will write detailed log entries to C:\Windows\Temp\AdtAgent.log.

Browse to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AdtAgent\Parameters
Create DWORD value = TraceFlags
Edit the TraceFlags entry and enter decimal value 524420
Restart the AdtAgent service

For information on the premier technology consulting group in Houston, contact Rede Consulting at 713-965-7288 or via email at info@redeconsult.com

Auditing Events on Untrusted Computers - Audit Collection Services (ACS)

2007-05-08T15:01:00Z

After having successfully deployed Operations Manager framework to a customer's primary domain and a few untrusted computers in a workgroup, I went to enable ACS and begin collecting audit events. While the documented procedure works fine for those servers within the trusted domain (using Kerberos), the workgroup computers posed a bit of a challenge. Specifically, after enabling audit services on the workgroup computers, numerous security events 529 and 680 began appearing and the computers were refused connection to the collector.

Microsoft mentions in the ACS documentation that Kerberos is used by adtagent.exe to authenticate to the collector, by default, but offers no workaround for computers that are not joined to the domain. The document below steps one through the process of using certificate authentication with ACS. As you will see from the steps required this could be troublesome, from a management standpoint, when you have many untrusted agents forwarding events.

As time allows, I will publish a more through guide. This document, in the interim, should help those that are struggling with this issue.

http://www.redeconsult.com/ACS-Certificates.pdf

For information on the premier technology consulting group in Houston, contact Rede Consulting at 713-965-7288 or via email at info@redeconsult.com

WSUS 3.0 Released!

2007-04-30T18:12:00Z

Today, Microsoft released Windows Server Update Services version 3.0 to their website for download. Below are links to where you can get it as well as read more about it:

Download:

http://www.microsoft.com/downloads/details.aspx?familyid=e4a868d7-a820-46a0-b4db-ed6aa4a336d9&displaylang=en&tm

Overview:

http://www.microsoft.com/downloads/details.aspx?familyid=1b5eac37-bd48-41fd-869b-f9b06fa64a61&displaylang=en&tm

Readme:

http://www.microsoft.com/downloads/details.aspx?familyid=093f89c5-a887-4fcd-9b98-47d898b5295f&displaylang=en&tm

Step-by-Step Guide:

http://www.microsoft.com/downloads/details.aspx?familyid=c8fa2fd1-72f6-4f19-a1b0-f689dae14be6&displaylang=en&tm

Operations Guide:

http://www.microsoft.com/downloads/details.aspx?familyid=66d250fa-670f-4a49-95ec-2ffda7691f55&displaylang=en&tm

Deploying Microsoft Windows Server Update Services 3.0:

http://www.microsoft.com/downloads/details.aspx?familyid=208e93d1-e1cd-4f38-ad1e-d993e05657c9&displaylang=en&tm

For information on the premier technology consulting group in Houston, contact Rede Consulting at 713-965-7288 or via email at info@redeconsult.com

Citrix Management Pack for SCOM 2007

2007-04-26T19:41:00Z

The Citrix management pack for SCOM 2007 has been posted. It may be downloaded by logging into My Citrix.

For information on the premier technology consulting group in Houston, contact Rede Consulting at 713-965-7288 or via email at info@redeconsult.com

Citrix Management Pack Documentation for SCOM 2007

2007-04-23T19:21:00Z

While the actually binary is not yet posted to My Citrix for download, the new Citrix Management Pack guide is available for download here.

For information on the premier technology consulting group in Houston, contact Rede Consulting at 713-965-7288 or via email at info@redeconsult.com