2012 Health Service handle Count Threshold

I only have one server at present (a beefy one) for testing SCOM 2012 and with just 10 servers being monitored and only the AD, SQL, and Task Scheduler MP's installed, already the RMS is complaining that the Threshold for the
Health Service Handle Count is over the top.
Is this a case of simply adjusting the threshold from 6000 to a higher number?
If so, what is the magic number pls?
Thx very much,
John Bradshaw

Based on my knowledge the Healthservice handle count will go high when there is a huge alert flow mainly where there is lot of agents and when they throw lot of alerts.
In our Environment of SCOM 2007 R2 we monitor Exchange 2010 and that is a quiet noisy MP.
So there may be some agent which is throwing some collection / alerting data for which this count will go high.
Request you guys to run the below SQL Query on the Ops DB to check which are those noisy alerts
Most common events by event number and event publishername: (This
gives us the event publisher name to help see what is raising these events)
SELECT top 50 Number, Publishername, COUNT(*) AS TotalEvents
FROM EventAllView
GROUP BY Number, Publishername
ORDER BY TotalEvents DESC
and
Computers generating the most events: (This
shows us which computers create the most event traffic and use the most database space)
SELECT top 50 LoggingComputer, COUNT(*) AS TotalEvents
FROM EventallView
GROUP BY LoggingComputer
ORDER BY TotalEvents DESC
refer: https://social.technet.microsoft.com/Forums/systemcenter/en-US/908db57b-4ed4-4b8e-8513-fd62965332ba/health-service-handle-count-threshold
Gautam.75801

Similar Messages

  • SCOM 2012 - Event ID 6024 (Launching Restart Health Service. Health Service exceeded Process\Handle Count or Private Bytes threshhold.)

    I am getting event ID 6024 (LaunchRestartHealthService.js : Launching Restart Health Service. Health Service exceeded Process\Handle Count or Private Bytes threshhold.) within an interval ranging from 12-17 minutes.
    I am using SCOM (2012 SP1 and 2012 R2) on Windows Server (2008 R2 / 2012 / 2012 R2).
    This issue is occurring only on agent managed computer (acting as proxy and discover managed objects on other computers setting is enabled) which i am using for monitoring my device. All discovery scripts (powershell) and monitors are targeted on this agent
    managed computer.
    There are total 80 discoveries and 900 monitors. 55 discoveries and 550 monitors are enabled by default and rest all are disabled.
    I am seeing event id 6024 frequently only on agent managed computer. Can anyone help me to resolve this issue.
    Thanks,
    Mukul

    To fix issue 6024, you can follow below steps:
    1. Open SCOM console. Go to Monitors -> Agent -> Entity Health -> Performance -> Health Service Performance -> Health Service State.
    2. Double click Health Service Handle Count Threshold monitor and go to Overrides page.
    3. Click Override -> For a specific object of Class: Agent. Select the affected SCOM agent QMXServer.
    4. Check on the parameter Agent Performance Monitor Type - Threshold. Change the default value 2000 to an appropriate value, like 4000. You can check the Health service handle count alert in SCOM console to get the value when the alert is generated. You
    can also launch the health explorer against QMXServer to check the value when the monitor state is changed from healthy to critical.
    Also you can refer below links
    http://blogs.technet.com/b/omx/archive/2013/10/17/health-service-restarts-on-service-manager-servers-with-scom-agents.aspx
    Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question, please click "Mark As Answer"
    Mai Ali | My blog: Technical | Twitter:
    Mai Ali

  • How is called the Services "OpsMgr Health Service" in the SCOM 2012 and Client machine?

    Hi,
    Can anybody tell me how is called the Services of OpsMgr Health Service in the SCOM 2012?
    I have installed the agent of scom2012 on my client computer. But I dont find any agent called "OpsMgr Health Service" on the Client machine?
    Regards

    Hi
    If you look in the services.msc window then it is listed as the System Center Management Service. This is the display name.
    The actual service name is HealthService
    Cheers
    Graham
    Regards Graham New System Center 2012 Blog! -
    http://www.systemcentersolutions.co.uk
    View OpsMgr tips and tricks at
    http://systemcentersolutions.wordpress.com/
    The Ayman answer is god, It is called "Microsoft Monitoring Agent"

  • No performance counter under the health service performance

    Hi Everyone,
    i have one system where the SCOM 2007 agent installed , but when i go to SCOM console and wants to see the performance of that from it's health service , i dont find any performance counter in Legend section. 
    I did re-installed the agent several time. manually and by pushing from SCOM. But everytime the result is same. I found some 20k series event log in that sever. That describes the agent is unable to communicate to RMS. 
    Please suggest the resolution. I need the performance of this server badly as that is a important application server in my infrastructure. And i need to generate report for this server.

    Hi,
    A couple of articles over the possible issue specifically for SCOM 2007:
    http://technet.microsoft.com/en-us/library/cc540431.aspx
    http://blogs.technet.com/b/kevinholman/archive/2007/12/12/agent-discovery-and-push-troubleshooting-in-opsmgr-2007.aspx
    If SCOM Agent is not in the same domain as RMS, please, consider to watch out these as well:
    http://blogs.technet.com/b/operationsmgr/archive/2009/09/10/step-by-step-for-using-certificates-to-communicate-between-agents-and-the-opsmgr-2007-server.aspx
    http://blogs.technet.com/b/operationsmgr/archive/2009/02/17/opsmgr-2007-port-requirements-for-scom-agents-in-a-dmz.aspx
    Igor Savchenko, VIAcode Consulting LLC (http://www.viacode.com/)

  • SCOM 2012 UR2 - Flush health service state causes infinite agent resets

    Appearing on several of our 2008R2 servers from our SCOM 2012 UR2 environment, set up with several management servers:
    If I select a monitored servers agent in the Operator Console and click the task
    Flush health service state and cache, the selected agent will restart as intended.
    However, it will restart again every 2-3 minutes forever ever after, unless  you stop the agent service and delete the health service cache folder on the monitored server.
    This is visible via the eventlog:
    event 103, Healthservice. A task to reset the health service store has been submitted.  The service store will be deleted and re-created.
    This was never the case with our SCOM2007R2 setup and started appearing with 2012.
    Have anyone seen this before? Any ideas?
    Regards / Jon

    Might save someone some time....
    Stopping the agent, removing the "Health Service State" directory + restarting doesn't appear to help.  I did this *and* deleted some agents from the console (then re-added them.  We turned auto approve off)  and it appears
    it might have fixed it.  I'll know more in the morning if this actually does the trick besides doing a full uninstall/reinstall of the agent.
    If you don't know what agents are constantly restarting, search all management servers for *many* file transfers (Event ID 2110 in Ops manager event log) all to the same Instance/GUID. Execute this powershell on a managemnt server: "get-SCOMClassInstance
    -Id <GUID>" to get the affected agent. Alternatively, make a SCOM rule to catch event 103 and look for many repeats from the same server/agent:
    Event Type: Warning
    Event Source: HealthService
    Event Category: Health Service
    Event ID: 103
    Description:
    A task to reset the health service store has been submitted.  The service store will be deleted and re-created.

  • SQL MP - System Center Management Health Service Credentials Not Found Alert Message

    Hi Dears,
    I have read so many open cases, but I could not find solution to my situation...
    Error: System Center Management Health Service Credentials Not Found Alert Message
    Desc are 1 of those 2:
    An account specified in the Run As profile "Microsoft.SQLServer.SQLDiscoveryAccount" cannot be resolved.
    An account specified in the Run As profile "Microsoft.SQLServer.SQLDefaultAccount" cannot be resolved.
    Okay, I am fine, I  verify the RunAs account configuration and yes this is the problem... I was able to solve it for those SQL running servicec account using domain user account, I created the run as account, and assoistte it with SQL profiles,
    and it is fine....
    BUT, what about my 8 SQL Servers running SQL Service Account under System and Network accounts,
    so how Can I add this coz I cannot target all objects,so what shall I target (Object Health Service or WHAT)?
    Please I need it step by step coz I am not able to handle this issue....
    Thank you Guys

    Hi,
    If you have not distributed the Run As Account to a system, but we discovered SQL on it, you will see the error message.
    This condition may have occurred because the account is not configured to be distributed to this computer. To resolve this problem, please distribute the account to this computer if appropriate. You can refer to the following blog to distribute the Run As
    credential.
    Niki Han
    TechNet Community Support

  • Task created to stop and start Health service not working.

    We have multiple servers being grayed out so we created a task to stop and start the health service on SCOM 2007 R2. We have created two tasks one to stop and another task to start. The STOP task works but the START tasks keeps running but there is no result
    as well as when i check in Services.msc it is still stopped. Below are the screen shots .
    Task created to STOP the health service which is running.
    Screen shot of service start task creation which is NOT working
    The same was created for another service windows audio. Which worked for both stop and stop (Created separate tasks).
    We also tried the recycle health service and chche which is also failing.
    Can any one please help. The issue is on both SCOM 2007R2 and 2012 R2 both. Is there any other way to touch the health service.
    We are facing the issue only with Healthservice.

    Hi All,
    Thank you for all your answers.
    @ dktoa -
    You are right we have to concentrate on the servers to determine why do they go grey (all in one site). But before we do that i felt i find a temporary solution. Then go deep investigation to solve the issue.
    @Yan LI: As per the likn provided above you. I overrided the servers but still the health services were not starting or restarting. When i created a custom group and added the servers to that  group in that site and then  enabled the override on Restart
    Health Service for a specific group and pointed towards that group then it worked.
    Thanks All.

  • How to stop the new health application from Count the steps/ woking background?

    how to stop the new health application from Count the steps/ woking background?
    I really need your help

    I agree with Mr. Hall that using mx.controls.Alert in Flex may be a better route.
    Show the Alert like this:
    // show an alert with a question and yes and no choices
    Alert.show( "Would you like to go to the Adobe Forums?", "Question",
         Alert.YES | Alert.NO, this, closeHandler, null, Alert.YES );
    Then handle the response in the closeHandler() function:
    protected function closeHandler( closeEvent:CloseEvent ):void
    if( event.detail == Alert.YES )
         navigateToURL( new URLRequest('http://forums.adobe.com'), '_self' );
    else if( event.detail == Alert.NO )
         // they chose no
    The following documentation on Alerts may be helpful:
    http://www.flexafterdark.com/docs/ActionScript-Alert
    Let me know if that helps...
    Ben Edwards

  • SQL 2012 enterprise service pack 2 fails to install

    Hi,
    I have installed SQL 2012 sp2 x64 onto the main service manager 2012 database, but it fails on the datawarehouse SQL server. Both are going from SP1 to SP2. Servers are running windows server 2012 sp1 x64.
    On the datawarehouse server it gets so far and then just displays a message of completed, with all the other fields blank.
    The text file for the Summary of the installation has been copied below:
    Overall summary:
      Final result:                  The patch installer has failed to update the following instance: MSSQLSERVER. To determine the reason for failure, review the log files.
      Exit code (Decimal):           -2068709375
      Start time:                    2015-01-09 13:55:32
      End time:                      2015-01-09 14:04:09
      Requested action:              Patch
    Instance MSSQLSERVER overall summary:
      Final result:                  The patch installer has failed to update the shared features. To determine the reason for failure, review the log files.
      Exit code (Decimal):           -2068709375
      Exit facility code:            1202
      Exit error code:               1
      Exit message:                  The NT service 'MSSQLServerOLAPService' could not be stopped.
      Start time:                    2015-01-09 14:00:18
      End time:                      2015-01-09 14:04:01
      Requested action:              Patch
      Exception help link:          
    http://go.microsoft.com/fwlink?LinkId=20476&ProdName=Microsoft+SQL+Server&EvtSrc=setup.rll&EvtID=50000&ProdVer=11.0.5058.0&EvtType=0xAC454CB1%400xF762992B%401202%401&EvtType=0xAC454CB1%400xF762992B%401202%401
    Machine Properties:
      Machine name:                  SCSDWM01
      Machine processor count:       4
      OS version:                    Future Windows Version
      OS service pack:              
      OS region:                     United Kingdom
      OS language:                   English (United States)
      OS architecture:               x64
      Process architecture:          64 Bit
      OS clustered:                  No
    Product features discovered:
      Product              Instance             Instance ID                   
    Feature                                  Language            
    Edition              Version         Clustered  Configured
      SQL Server 2012      MSSQLSERVER          MSSQL11.MSSQLSERVER            Database Engine Services                
    1033                 Enterprise Edition   11.1.3153.0     No         Yes      
      SQL Server 2012      MSSQLSERVER          MSSQL11.MSSQLSERVER            Full-Text and Semantic Extractions for Search 1033                
    Enterprise Edition   11.1.3000.0     No         Yes      
      SQL Server 2012      MSSQLSERVER          MSAS11.MSSQLSERVER             Analysis Services                       
    1033                 Enterprise Edition   11.1.3130.0     No         Yes      
      SQL Server 2012      MSSQLSERVER          MSRS11.MSSQLSERVER             Reporting Services - Native             
    1033                 Enterprise Edition   11.1.3153.0     No         Yes      
      SQL Server 2012                                                         
    Management Tools - Basic                 1033                 Enterprise Edition   11.1.3153.0    
    No         Yes      
      SQL Server 2012                                                         
    Management Tools - Complete              1033                 Enterprise Edition   11.1.3130.0    
    No         Yes      
      SQL Server 2012                                                         
    SQL Server Data Tools - Business Intelligence for Visual Studio 2012 1033                                     
    11.1.3402.0     No         Yes      
      SQL Server 2012                                                         
    Integration Services                     1033                 Enterprise Edition  
    11.1.3153.0     No         Yes      
    Package properties:
      Description:                   Microsoft SQL Server 2012
      ProductName:                   SQL Server 2012
      Type:                          RTM
      Version:                       11
      SPLevel:                       2
      KBArticle:                     KB2958429
      KBArticleHyperlink:           
    http://support.microsoft.com/?kbid=2958429
      PatchType:                     SP
      AssociatedHotfixBuild:         0
      Platform:                      x64
      PatchLevel:                    11.2.5058.0
      ProductVersion:                11.0.2100.60
      GDRReservedRange:              11.0.5300.0:11.0.5499.0
      PackageName:                   SQLServer2012-KB2958429-x64.exe
      Installation location:         c:\ce370c3d01e3ec4095540d8578cc7e\x64\setup\
    Updated product edition:
      Instance             Edition            
      MSSQLSERVER          Enterprise         
    User Input Settings:
      ACTION:                        Patch
      ALLINSTANCES:                  false
      CLUSTERPASSIVE:                false
      CONFIGURATIONFILE:            
      ENU:                           false
      HELP:                          false
      IACCEPTSQLSERVERLICENSETERMS:  true
      INDICATEPROGRESS:              false
      INSTANCEID:                    <empty>
      INSTANCENAME:                  <empty>
      QUIET:                         false
      QUIETSIMPLE:                   false
      SQMREPORTING:                  false
      UIMODE:                        Normal
      X86:                           false
    Rules with failures:
    Global rules:
    There are no scenario-specific rules.
    Rules report file:               C:\Program Files\Microsoft SQL Server\110\Setup Bootstrap\Log\20150109_135509\SystemConfigurationCheck_Report.htm
    Any ideas on why this has happened and how to fix the error?
    Thanks.
    Jaz

    Hello,
    Open the errorlog file on the following path C:\Program Files\Microsoft SQL Server\MSSQL11.MSSQLSERVER\MSSQL\Log. There
    you will find a more descriptive error.
    I received that error before. The workaround I used is contained on the following article:
    http://www.sqlcoffee.com/Troubleshooting112.htm
    Hope this helps.
    Regards,
    Alberto Morillo
    SQLCoffee.com

  • Health Service Heartbeat Failure Alert for Generated when one Management Server Down,

    Hi,
    I have Two Management Server, every one manage about 100 server, when one Management Server goes down unexpected, I receive 100 Alert for 100 Server Health Service Heartbeat Failure.
    My Question, why when the Management Server down, it send that all Managed agent Health Service Heartbeat Failure?
    Is there a way to change this?

    SCOM 2012 agent will autofailover when primary server is down. You can check the failover management server by using the following powershell cmdlet:
    #Verify Failover for Agents reporting to MS1
    $Agents = Get-SCOMAgent | where {$_.PrimaryManagementServerName -eq 'MS1.DOMAIN.COM'}
    $Agents | sort | foreach {
    Write-Host "";
    "Agent :: " + $_.Name;
    "--Primary MS :: " + ($_.GetPrimaryManagementServer()).ComputerName;
    $failoverServers = $_.getFailoverManagementServers();
    foreach ($managementServer in $failoverServers) {
    "--Failover MS :: " + ($managementServer.ComputerName);
    Write-Host "";
    http://www.systemcentercentral.com/how-does-the-failover-process-work-in-opsmgr-2012-scom-sysctr/

  • BO Data Services 3.2-Job fails with 'TNS:No appropriate service handler err

    Hello all -
    One of our DS jobs has started failing intermittently showing the following error in its log:
    Data flow DataFlow_1 - OCI call <OCIServerAttach> for connection <abc> failed: <ORA-12519: TNS:no appropriate service handler found>.
    This  has started happening recently after we've upgraded the repository database form Oracle 10g to Oracle 11g (11.1.0.6).  The source   and target are also 11g.    
    If anyone has encountered this error before, please can you provide some pointers on how to troubleshoot/resolve this.
    TIA.
    Regards,
    Tarun.

    I have found this thread which talks nearly same about your issue.
    TNS:listener could not find available handler witht matching protocol stack
    The session count has to be decreased, that is the crux that comes out from this thread.
    Listener some how have a count of the incoming connection request. If that number tries to go beyond process parameter value,this error is reported.Now I amnot sure that why this is happening in your case as the parameter value is already higher than the incoming connections.
    And voilla!You are using XE I believe so its a bug in it. Read this thread,
    Re: Intermittent ORA-12519 error on 10g XE
    HTH
    Aman....

  • Manages Exchange server health Service is NOT starting after installing EDGE role using Exchange2013 SP1+CU5 setup

    I used Exchange 2013 SP1+CU5 to install Edge role on Windows server 2012 R2 workgroup machine
    then after installation the service "Exchange server health Service" was not starting automatically or manually with the following error "Error 1075: The dependency service does not exist or has been marked for deletion"
    and in the Event Viewer I have this error:
    Event Id: 7003
    The Microsoft Exchange Health Manager service depends on the following service: MSExchangeADTopology. This service might not be installed.
    please advice

    The Exchange 2013 Edge Role has a reduced set of services compare to a CAS or MBX server role:
    Active Directory Web Services
    Microsoft Exchange ADAM
    Microsoft Exchange Anti-spam Update
    Microsoft Exchange Diagnostics
    Microsoft Exchange Credential Service
    Microsoft Exchange Health Manager
    Microsoft Exchange Service Host
    Microsoft Exchange Transport
    Microsoft Exchange Transport Log Search
    The above one was from Exchange 2013 Sp1. Not sure whether Microsoft Exchange Health Manager service has been replaced from CU5.
    Just restart the edge server once again and ensure that you are able to see this service again in services console.
    Remember to mark as helpful if you find my contribution useful or as an answer if it does answer your question.That will encourage me - and others - to take time out to help you Check out my latest blog posts on http://exchangequery.com

  • Health Service on clients

    Hi 
    we have noticed a large spike in disk i/o relating to our scom agents. The health service is constantly reading at around 5-10mb/sec across all our monitored servers. We linked this to last time that we performed a datacentre shutdown. We can see the spike
    from from the days after the shutdown.I have unfortunately inherited scom from someone else so my knowledge of scom is not the greatest at this point. Any help will gladly be appreciated.We have tried restarting the service on the monitored servers.
    We are using SCOM 2012 R2 
    VeeCT

    This could be because of many unwanted rules and monitoring running. Kill the HealthService.exe process on the SERVER where you have high I/O Reads, rename the health service folder and then restart the service.
    also check this link for resolutions -
    http://blogs.technet.com/b/momteam/archive/2012/04/17/kb-how-to-troubleshoot-event-id-2115-in-operations-manager.aspx
    Thanks, S K Agrawal
    that's not going to do anything, you need to find out where the noise is coming from...
    first thing I would be doing would be to run some reports from this Report pack
    http://www.systemcentercentral.com/scc-health-check-reports-management-pack-v2/
    this will give you an idea where the "noise" is coming from and then start tuning out the unwanted rubbish.

  • ORA-12519: TNS:no appropriate service handler found tips

    i have faced this error when i am insert data by using for loop for 200 rows .
    ORA-12519: TNS:no appropriate service handler found tips
    i select the this query but how can i solve this problem.
    select * from v$resource_limit where resource_name = 'processes';
    RESOURCE_NAME CURRENT_UTILIZATION MAX_UTILIZATION LIMIT_VALUE
    processes           148           150               150   i mean which value should i update.
    regards
    Ayham
    Edited by: Ayham on Nov 28, 2012 9:57 PM

    Ayham wrote:
    i have faced this error when i am insert data by using for loop for 200 rows .What are you trying to do, can you plz post the process which u were trying to run..?
    Also why do u want to update oracle parameters instead of solving the base issue.
    Oracle docs note this about ORA-12519:
    ORA-12519: TNS:no appropriate service handler found
    Cause: The listener could not find any available service handlers that are appropriate for the client connection.
    Action: Run "lsnrctl services" to ensure that the instance(s) have registered with the listener, and are accepting connections.
    This is something about the error. Try the action point there.
    Cheers,
    Manik.

  • 7016 - The Health Service cannot verify the future validity of the RunAs account

    Hi,
    We have several gateways set up on our other domains (DMZ, Test and Dev) using certificates to connect to the RMS with a few agents reporting to the gateway in it's domain. I am recieving this warning for all gateways and agents that are being monitored (in the other domains).  All our servers are either Win 2003 32bit or Win 2003 64bit.
    The Health Service cannot verify the future validity of the RunAs account PRODUCTION\username for management group PRODMGMT due to an error retrieving information from Active Directory (for Domain Accounts) or the local security authority (for Local Accounts). The error is The network path was not found.(0x80070035).
    From the searching that I've done on the net, a couple of people have mentioned that if you set the password expiration flag on AD users and computers for the account the problem will go away.. This hasn't happened for me.
    I have checked the logs on the gateway servers and they report the following messages:
    Event Type: Error
    Event Source: HealthService
    Event Category: Health Service
    Event ID: 7016
    Date:  15/03/2010
    Time:  6:05:25 AM
    User:  N/A
    Computer: DEMOMMS003
    Description:
    The Health Service cannot verify the future validity of the RunAs account PRODUCTION\username for management group PRODMGMT due to an error retrieving information from Active Directory (for Domain Accounts) or the local security authority (for Local Accounts).  The error is The network path was not found.(0x80070035).
    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
    Event Type: Warning
    Event Source: HealthService
    Event Category: Health Service
    Event ID: 7020
    Date:  15/03/2010
    Time:  6:05:25 AM
    User:  N/A
    Computer: DEMOMMS003
    Description:
    The Health Service has validated all RunAs accounts for management group PRODMGMT, except those we could not monitor.
    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    However a few hours later I don't get any error messages and it seems to be working happily.
    Event Type: Information
    Event Source: HealthService
    Event Category: Health Service
    Event ID: 7026
    Date:  15/03/2010
    Time:  9:02:28 AM
    User:  N/A
    Computer: DEMOMMS003
    Description:
    The Health Service successfully logged on the RunAs account PRODUCTION\username for management group PRODMGMT
    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
    Event Type: Information
    Event Source: HealthService
    Event Category: Health Service
    Event ID: 7023
    Date:  15/03/2010
    Time:  9:02:28 AM
    User:  N/A
    Computer: DEMOMMS003
    Description:
    The Health Service has downloaded secure configuration for management group PRODMGMT successfully.
    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
    Event Type: Information
    Event Source: HealthService
    Event Category: Health Service
    Event ID: 7025
    Date:  15/03/2010
    Time:  9:02:28 AM
    User:  N/A
    Computer: DEMOMMS003
    Description:
    The Health Service has authorized all configured RunAs accounts to execute for management group PRODMGMT.
    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
    Event Type: Information
    Event Source: HealthService
    Event Category: Health Service
    Event ID: 7024
    Date:  15/03/2010
    Time:  9:02:28 AM
    User:  N/A
    Computer: DEMOMMS003
    Description:
    The Health Service successfully logged on all accounts for management group PRODMGMT
    For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
    ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    Despite the successful logs that appear the gateway still shows up with the same warning.
    If i stop and start the service on the gateway it then shows up as healthy in SCOM, but then the next day it the warning comes back.
    Is the problem caused by different domain acounts and when it tries to find it in the domain it can't find it?
    Cheers, 
    Phil

    I also have the same problem with my scom 2012 system.
    I am getting 7021 and 7016 events.
    as mentioned by Jonathan, i am able to open notepad with the user account for which we are getting error.
    another thing noted, when we run setspn -l domain\acc , we are getting error 
    Ldap Error(0x51 -- Server Down): ldap_open
    or
    FindDomainForAccount: Call to DsGetDcNameWithAccountW failed with return value 0x00000525
    Could not find account DOMAIN/account
    Another point to add, my server is ABC.XXX.company.com and acc i am using us YYY\acc_name. I mean to say my account is of diff domain.
    This config is working fine no issues at all in another server which was setup earlier with 2007 r2.
    Manish
    I recently had the same issue in our Forest. Did you try YYY.company.com\acc_name? If you use the netbios name, setspn (and scom does on account validation as well, if you just pick the domainname from the list) will try to resolve the dc via netbios. Two
    alternatives: add the other domain to the dns searchlist for your network adapter (I won't do this one, this does not resolve the cause of the problem) or configure your action accounts with fqdn [email protected] The funny thing is, in scom event
    you will see scom validated account "\[email protected]" (still add's the backslash)
    Correction: this did not solve the issue as mentioned before, the error reappeared again... :(

Maybe you are looking for