SSL Certifikate Error – WS-Management Certificate Health

  Lately I have been working a bit with UNIX/Linux in SCOM 2012. I feel about it almost the same way I feel about certificates. Usually it works fine, but anything wrong or any errors, and it can quickly be a time consuming process.   Today I ran into the “SSL Certificate Error”. I got this alert on servers already monitored for a week, so I seemed a little strange. I had also done the scxconfig –export and –import, so I couldn’t see how it should be a certificate issue. Also, the Product Knowledge was of very little help, as [...]

By | 2013-06-18T09:25:31+00:00 June 18th, 2013|Operations Manager (SCOM)|0 Comments

SCOM 2012 web console prompts for username and password

  I have seen this issue several times, but as I always forget it after I’ve fixed it, I decided to make a blog post about it. As far as I have learned this issue is due to a Kerberos double-hop. But, fear not! The solution is pretty simple: Open IIS Manager, go to Operations Manager and click Authentication:     Mark Windows Authentication and then click “Providers…” in the right side     Move up NTLM so it is first.   No restart of the server or IIS is necessary. This action must be performed on all management servers [...]

By | 2013-06-17T15:38:33+00:00 June 17th, 2013|Operations Manager (SCOM)|9 Comments

Create a rule to collect Scheduled Task event log entries in SCOM 2012

  One of the biggest advantages of SCOM is how easy it is to pick up event from the event log and how flexible this can be. Simply go to Event Viewer, choose between the logs and find the event ID you want to alert upon.   But what about Scheduled Tasks? The status of the tasks is not written to any of the standard logs. So how does one pick them up? There is actually an event log for this; it is just not shown by default. In Event Viewer, right click Create Custom Views and scroll down to [...]

By | 2013-04-29T15:44:31+00:00 April 29th, 2013|Operations Manager (SCOM)|6 Comments

The Web Recorder tab is gone when recording a browser session in SCOM 2012

I was going to create a quite simple browser session for a customer today, but when IE opened the Web Recorder tab wasn’t present. As usual I minimize the 32 bit version and open the 64 bit version of IE instead, but with same result. I also made sure the “Enable third-party browser extensions*” was checked off. Odd! Clicking around in blind a little, I went to View and Explorer bars and noticed…. Web Recorder! Open that and enabled the Microsoft Web Recorder Helper And voila! I can now record sessions: NOTE: a little trick is also to edit the following [...]

By | 2013-04-24T14:27:46+00:00 April 24th, 2013|Operations Manager (SCOM)|0 Comments

Consolidate several performance counter objects to one in a performance rule in SCOM

  Creating a performance counter rule is fairly easy using the Select button to get the object and counter. However, some “systems” create a new performance counter for each of a given object.   One of these systems is SQL and the Buffer Manager object. This object is created for each instance you are running on a SQL server, as shown below with my instances:   So, if you have five instances on a server you don’t want to create a performance rule five times with different names (at least I assume so). To avoid this you can use wildcards [...]

By | 2013-04-12T13:49:29+00:00 April 12th, 2013|Operations Manager (SCOM)|1 Comment

SCOM 2012 R2 – Advanced Operations Manager Training

The new instructor led training (Now in R2) are ready and scheduled. I have scheduled training in both US, Norway, Sweden and Denmark. So please contact me or one of the training centers about this training. If you have questions to the content or want more information – please send me an email. And exactly as on the Mastering training – you will get a training book with more than 25 real life Labs. And samples of every Rule and Monitor in SCOM 2012 R2.   Training Schedule: SCOM Advanced Denmark: Coretech: 30. April – 2. may 2013 SCOM [...]

By | 2013-03-22T09:38:47+00:00 March 22nd, 2013|Operations Manager (SCOM)|1 Comment

Running Tasks with PowerShell and $ID$

Whenever you want to run a Task against an Alert, its so easy to use the $ID$ variable: Create the powershell script c:\scripts\UpdAlert.ps1 with at least the following lines: Param($ID) Import-module OperationsManager GET-SCOMAlert –id “$ID” | SET-SCOMAlert –TicketID ‘100’ –ResolutionState 249 And create the following Task: Stay on one of your Alerts and Run the tasks Refresh (F5) before you check the Alert You could extend the script with other parameters like Logging Computer and User etc. Check the Powershell help with the command: Get-Help Setp-SCOMAlert – Detailed to see more parameters. See you a MMS Kåre

By | 2013-03-09T11:10:22+00:00 March 9th, 2013|Operations Manager (SCOM)|0 Comments

Both True and False is enforced on a rule/monitor – who wins?

Got this question today: A rule/monitor is created and disabled by default The rule/monitor is overridden and enforced to False for a class The rule/monitor is then overridden and enforced to True for a specific object of the class Will the rule be True or False? I created a rule and disabled it by default. I then made an override for All Windows Server and enabled marked the ”Enforced” box.   I then made an override for a specific object of Windows Server, and changed the Override Value to True. I applied this change, but the Effective Value would still [...]

By | 2013-02-22T12:23:35+00:00 February 22nd, 2013|Operations Manager (SCOM)|1 Comment

Install a SCOM 2012 agent – silent

  As a part of a script, I wanted to install the SCOM agent on several servers. All these servers are in workgroup/dmz/other domains, which means I had to do a manual installation. Now, there’s a lot of guides on how to install an agent using a command line, the official one from Microsoft: Install Agent Using the Command Line: However, this one doesn’t describe any silent parameters. The only way to use the /silent parameter is when installing an OpsMgr component (server, gateway etc). I tried with the /qn option, which made my command look like this: msiexec.exe [...]

By | 2013-02-21T15:14:53+00:00 February 21st, 2013|Operations Manager (SCOM)|3 Comments

Solution for The certificate specified in the registry at HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Microsoft Operations Manager\3.0\Machine Settings cannot be used for authentication. The error is The credentials supplied to the package were not recognized(0x8009030D)

  Certificates. Fairly easy to setup if you do it from scratch, but if something fails at some point, it can be a little tricky to troubleshoot. Today, I had one of the moments. At a customer we had a running OpsMgr environment with three gateway servers in the DMZ and some agents also in the DMZ, everything running smooth for a couple of months. Now, all of a sudden, no gateway servers could authenticate. We had changed nothing, we could telnet, the certificates weren’t expired etc. Weird!   On the management server I then noticed this error: Source: OpsMgr [...]

By | 2013-02-19T12:25:53+00:00 February 19th, 2013|Operations Manager (SCOM)|4 Comments

Working with regular expressions and ip addresses in OpsMgr 2012

Today, one of my costumers asked me to create some groups and Live Maps views containing network devices with a specific ip address range. Now, im a big fan of the “work smarter, not harder” principle, so I wanted the groups and views to be dynamic using regular expressions. I’ve worked with regular expressions before, which is fairly manageable with a table of the meta characters on your hand. However, I find ip addresses a lot more tricky, which is why I’m posting different solutions. Before advancing, I would like to introduce you to a dear friend of mine: [...]

By | 2013-02-12T17:16:48+00:00 February 12th, 2013|Operations Manager (SCOM)|7 Comments

Operations Manager 2012 Maintenance Mode

  ”How can I schedule maintenance mode in SCOM 2012?” “How can I put a server in maintenance mode without using the Operations Console?” These are fairly common questions from my costumers. A lot of tools was developed to Operations Manager 2007, but not for 2012, hence this blog. Tool: SCOM Remote Maintenance Mode Scheduler 2.0 by Tim McFadden I can’t take any credit for this one, as it was developed by Tim McFadden, but it is the best (only) scheduler I can find. Furthermore, it has an UI, which makes it far easier to put servers or group in [...]

By | 2017-08-22T13:06:40+00:00 February 7th, 2013|Operations Manager (SCOM)|9 Comments

Property reference with id {XXXXXXX-XXXX-XXXX-XXXX-XXXXXXXXXXXX} in workflow cannot be resolved

  Today i was creating a new management pack in the Authoring Console. When I saved I didn’t get any errors, neither did I when I imported it. Shortly after event 1201 (management pack received), I received this event:     I know this is a problem with my newly created management pack, but the property reference id {8F538D63-86DA-C149-3C84-1F1AACE2DF930} doesn’t make any sense to me (I doubt it does for anybody). Resolution: To resolve this id, run this query against the OperationsManager database.   SELECT MT.TypeName, MTP.ManagedTypePropertyName FROM ManagedTypeProperty as MTP, ManagedType as MT WHERE MTP.ManagedTypePropertyId = '8F538D63-86DA-C149-3C84-1F1AACE2DF930' AND MTP.ManagedTypeId = [...]

By | 2013-01-28T14:48:28+00:00 January 28th, 2013|Operations Manager (SCOM)|1 Comment

Common issues when working with certificates in OpsMgr

The last couple of weeks I have been working a lot with certificates in Operations Manager 2012 – agents and gateways in workgroup. I have worked so much with this that it feels like I have seen all the possible issues one can meet when configuring this. Both for helping you guys, and as a notepad for myself, here’s the issues (and solution) I met on my way: First of all, make sure no firewall is blocking the communication. You can test this by telnetting port 5723 both ways.   Issue: no certificates available in the certificates dropdown list when [...]

By | 2013-01-14T16:22:31+00:00 January 14th, 2013|Operations Manager (SCOM)|13 Comments

Set-SCOMLicense : Requested registry access is not allowed

  My colleague Kåre has already blogged about how to set the Operations Manager 2012 license, to be read here. However, I have experienced this command fails – even when running from an elevated Operations Manager Shell – giving error about registry access:   Solution: Instead of spending hours messing up the the security in registry, simply run Windows Powershell as Administrator, and import the Operations Manager module, by using the “Import-Module OperationsManager” cmdlet. When this has been imported, run the Set-SCOMLicense command and you should succeed:

By | 2012-12-11T13:38:37+00:00 December 11th, 2012|Operations Manager (SCOM)|18 Comments

Powershell to change Resolution State in Operations Manager 2012

A powershell sample used at a customer for semi-automatically changing the Resolution States: [crayon-5bcf9b612b41e326352057/] [crayon-5bcf9b612b42e756703145/] [crayon-5bcf9b612b434280027429/] [crayon-5bcf9b612b43a132318453/] [crayon-5bcf9b612b43f330617568/] [crayon-5bcf9b612b444877094170/] [crayon-5bcf9b612b44a542961937/] [crayon-5bcf9b612b44f440675000/] [crayon-5bcf9b612b454459016529/] [crayon-5bcf9b612b459095115474/] [crayon-5bcf9b612b45f428937706/] [crayon-5bcf9b612b464692766006/] [crayon-5bcf9b612b469178099945/] [crayon-5bcf9b612b46e035742806/] [crayon-5bcf9b612b474804682816/] [crayon-5bcf9b612b479726862307/] [crayon-5bcf9b612b47e745723667/] [crayon-5bcf9b612b483030616400/] [crayon-5bcf9b612b489167799679/] [crayon-5bcf9b612b48e741053397/] [crayon-5bcf9b612b493236004613/] [crayon-5bcf9b612b498603516635/] [crayon-5bcf9b612b49d120003782/] [crayon-5bcf9b612b4a2976610657/] [crayon-5bcf9b612b4a7103030677/] [crayon-5bcf9b612b4ac004702419/] [crayon-5bcf9b612b4b1989843815/] [crayon-5bcf9b612b4b6905879447/] [crayon-5bcf9b612b4bb762981231/] [crayon-5bcf9b612b4c1158874029/] [crayon-5bcf9b612b4c6831574162/] [crayon-5bcf9b612b4cb885432708/] [crayon-5bcf9b612b4d0384352245/] And have a great Day Kåre

By | 2017-08-22T13:05:40+00:00 November 13th, 2012|Automation, Operations Manager (SCOM), Powershell|3 Comments

New Application/Tool to create Health Rollups of groups, Classes and Distributed Applications

In the past couple of years I have seen how companies are dealing with presenting their Services, Distributed Applications, Multi-Tired Applications; Many names for the same object. This Diagram Creation has often been a bit difficult, either you could create a group and use the group in Distributed Apps, which could give you a possibility of enabling the rollup and let the group be green, yellow, red or you could export the Management Pack after the creation and change the content  there are some good blogs around. And now for the Challenge of creating a nice Diagram with servers in [...]

By | 2012-11-08T13:13:31+00:00 November 8th, 2012|Operations Manager (SCOM)|6 Comments

Could not retrieve a valid database or server scenario for this install

A costumer of mine had an OpsMgr breakdown, due to misconfiguration of run as accounts. We got the first management server up and running again, but I couldn’t get the second to run. I then removed the Operations Manager installation completely and restarted. I logged back on, opened the setup as administrator to install the management role again, but I got the following error:     Could not retrieve a valid database or server scenario for this install – What?   Even though I was logged on as administrator, the most logical explanation would be insufficient privileges. So, I created [...]

By | 2012-10-23T12:07:02+00:00 October 23rd, 2012|Operations Manager (SCOM)|5 Comments

Delete OpsMgr 2007 Management Group information

  Scenario: - A running OpsMgr 2007 environment with agents – to be degraded. - New OpsMgr 2012 environment without agents. You start pushing agents from OpsMgr 2012, to the same servers which are monitored in OpsMgr 2007. - You successfully install the agent on all servers, which means the agents now report to both OpsMgr 2007 and 2012. You then uninstall all the agents from OpsMgr 2007. This works fine, but the problem is that the management group information for the 2007 environment doesn’t disappear: I digged into the registry, where i could see that these keys are not [...]

By | 2017-08-22T13:04:58+00:00 October 19th, 2012|Operations Manager (SCOM)|0 Comments