A device which is not part of this management group has attempted to access this Health Service.

Question

Has anyone found an answer to this yet?  I have uninstalled/reinstalled the agents both manually and through the push. Rebooted the client, rebooted the  sce server. Forced the group policy to reapply, forced the health agent to /reportnow and I still get the error. The client shows up under the agent managed section but under the health state column it shows not monitored. The clients can ping the SCE server by FQDN and RDP to it as well so name resolution is working fine.
On the the SCE server I get this in the log
Event Type: Information
Event Source: OpsMgr Connector
Event Category: None
Event ID: 20000
Date:  6/25/2009
Time:  10:09:40 AM
User:  N/A
Computer: *******
Description:
A device which is not part of this management group has attempted to access this Health Service.
Requesting Device Name : *****
And this
Event Type:            Information
Event Source:           OpsMgr Connector
Event Category:       None
Event ID: 21042
Date:                        6/25/2009
Time:                       10:25:14 AM
User:                        N/A
Computer:                ***********
Description:
Operations Manager has discarded 1 items in management group Servername_MG, which came from $$ROOT$$.  These items have been discarded because no valid route exists at this time.  This can happen when new devices are added to the topology but the complete topology has not been distributed yet.  The discarded items will be regenerated.
On the client I get
Event Type: Error
Event Source: OpsMgr Connector
Event Category: None
Event ID: 20070
Date:  06/25/2009
Time:  10:06:13 AM
User:  N/A
Computer: ******
Description:
The OpsMgr Connector connected to ****** but the connection was closed immediately after authentication occured.  The most likely cause of this error is that the agent is not authorized to communicate with the server, or the server has not received configuration.  Check the event log on the server for the presence of 20000 events, indicating that agents which are not approved are attempting to connect.
And this as well
Event Type:            Error
Event Source:           OpsMgr Connector
Event Category:       None
Event ID: 21016
Date:                        06/25/2009
Time:                       10:06:18 AM
User:                        N/A
Computer:                ******
Description:
OpsMgr was unable to set up a communications channel to **** and there are no failover hosts.  Communication will resume when ******* is both available and allows communication from this computer.
And this
OpsMgr has no configuration for management group Servername_MG and is requesting new configuration from the Configuration Service.

Answer 1

Hey Nathan,
Yea I have sent the script to eveyone that has aked for it. I dont know if its helped anybody else as none has given me any feedback either way.
I guess I can post it here for everyone to use.
Please keep in mind that if you use this script from MS its at your own risk, If your DB blows up, massive catastrophic failure ensues and so forth ITS YOUR OWN FAULT. MAKE SURE YOU HAVE GOOD BACKUPS
Step 1) Run this against your SCE 2007 DB
DECLARE @BaseManagedEntityInternalId int
DECLARE @BaseManagedEntityId uniqueidentifier
DECLARE @ViewName sysname
DECLARE @Statement nvarchar(max)
SET @BaseManagedEntityInternalId = 0
WHILE EXISTS (SELECT * FROM BaseManagedEntity WHERE (BaseManagedEntityInternalId >
@BaseManagedEntityInternalId))
BEGIN
SELECT TOP 1
@BaseManagedEntityInternalId = bme.BaseManagedEntityInternalId
,@BaseManagedEntityId = bme.BaseManagedEntityId
,@ViewName = met.ManagedTypeViewName
FROM BaseManagedEntity bme
JOIN ManagedType met ON (bme.BaseManagedTypeId = met.ManagedTypeId)
WHERE (bme.BaseManagedEntityInternalId > @BaseManagedEntityInternalId)
AND (bme.IsDeleted = 0)
ORDER BY BaseManagedEntityInternalId
SELECT @Statement = 'IF NOT EXISTS (SELECT * FROM ' + QUOTENAME(@ViewName) + '
WHERE BaseManagedEntityId = ''' + CAST(@BaseManagedEntityId AS varchar(50)) + ''')
PRINT ''' + CAST(@BaseManagedEntityId AS varchar(50)) + ' ' + @ViewName + ''''
EXECUTE(@Statement)
END
STEP 2) 
If your problem was the same a mine you should get some GUID’s returned.  (For example 93790c0B-09C4-3A4D-CE72-F4E3Dd917D78 MTV_DeploymentSettings)
Using the GUID that we got in the output file
Execute the below given query:
==========================
select fullname
from basemanagedentity
where basemanagedentityid = ‘<GUID>’
==========================
Verify that the device or the object mentioned in the above output is not displayed in Operations console.
Only in case if the object is not displayed then use the below given query to delete it from database.
==========================
update basemanagedentity
set isdeleted = 1
where basemanagedentityid = ‘<GUID>’
==========================
Before executing the above query please ensure that you have the backup of the database. Also note that you need to run the above said query only incase if you do not see the object in the Operations console.
After executing this query, run this stored procedure:
==========================
exec p_Detectandfixinstancespaceinconsistencies
==========================
Once it is done:
> Stop all the three OpsMgr services: health, Config and SDK on Management Server
> Cleared the health service state folder.
> Start all the three OpsMgr services: SDK, Config, and health on Management Server.
> Wait for 30 minutes and see if the agents start getting monitored.
I hope this helps everyone